Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: qWQbpOQM4ZvzS0aSNC1mPP3haH9W0tzFH9jADJhp2Ao=
Subject key identifier: 71:E2:90:A3:66:84:13:DE:76:B8:CB:B2:12:00:96:22:D4:78:DA:25
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 019CAAC67B67F160FA235E36E4C824DDFCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 1557
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: C7f6La2RHnovZkVXPsCMvF_ZrpU.roa (hash: vor63A+KF0/+NLo3bRvMmDXK5iRB2pgk/JSZQYxp0os=)
2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: s52Tp7KQ87K0PQ54duMrPho3sD/yTsv2OlPPhE2C00g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7b:67:f1:60:fa:23:5e:36:e4:c8:24:dd:fc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=71e290a3668413de76b8cbb212009622d478da25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:d9:ba:1e:f4:a0:2d:89:3b:f7:36:b7:df:
b7:df:4f:47:3a:49:13:cd:f1:d8:c0:9a:22:6c:b6:
f8:d5:57:ad:5c:d7:f8:07:3e:7a:1c:6d:13:85:33:
40:dd:6e:df:cc:bc:c5:a0:4e:6d:46:08:8e:02:c0:
91:73:9d:d3:3c:44:db:3e:cb:66:78:71:6e:5b:3b:
55:0d:21:8f:d7:61:e9:fd:34:4d:e6:cc:06:0c:38:
b2:a2:3c:0e:b1:92:be:80:02:83:f2:a0:8b:66:6b:
b1:6c:64:90:99:34:f4:fe:e8:ef:bb:46:37:da:d9:
60:59:ac:65:e3:d3:7b:f4:61:09:f5:1e:7d:35:02:
29:59:50:f5:db:ee:89:6e:5e:3a:fc:d5:d7:63:ca:
53:c7:06:f3:86:d2:c2:62:d7:08:47:28:f8:a7:96:
63:b3:79:18:89:4a:6d:fe:3d:57:f3:6f:85:17:56:
b8:51:76:fe:e0:26:90:1d:1a:a6:f6:50:c6:7b:13:
fc:f2:43:1e:51:05:09:34:de:32:e0:6c:46:0f:ca:
d1:53:b4:91:b2:22:ee:aa:d8:44:ce:4b:49:cd:c4:
9c:6c:b9:d6:74:8a:f6:a5:83:68:45:b3:3a:f2:2c:
ae:f1:6d:9c:3a:b2:d7:18:30:34:f7:2d:9d:e0:dd:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:90:A3:66:84:13:DE:76:B8:CB:B2:12:00:96:22:D4:78:DA:25
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ab:b6:06:6d:15:2a:0a:de:4e:5e:b4:be:17:db:61:aa:37:
9f:c3:70:82:22:ea:f9:d3:69:92:f4:2a:f0:6d:cf:65:2a:7c:
d2:50:12:12:04:20:93:99:f3:c3:7d:d2:92:68:51:d9:da:79:
6c:25:60:25:5e:4d:72:47:0c:01:9a:c8:c7:c3:d0:e6:2f:d6:
32:7d:4d:b5:9b:f1:d0:d5:c8:7f:07:23:7d:04:ca:bf:9b:20:
a8:01:ee:96:8a:da:e5:db:f5:93:39:1c:6e:24:2f:66:e1:9c:
5e:5f:d0:67:fd:9c:ca:16:7b:65:cb:79:62:7c:17:65:fa:04:
85:be:27:f3:59:91:5b:ac:5c:29:57:cf:a8:4c:8d:b5:ac:ab:
24:e9:2d:6c:0b:a8:46:32:65:0f:2c:c6:01:e4:3b:ba:e4:41:
8d:de:cf:67:fc:92:7b:b6:48:1c:f2:b2:3e:e9:9a:87:ae:5e:
dc:f7:84:01:9a:f3:e6:6d:c4:32:00:b7:13:55:fd:fc:88:d3:
6c:04:96:88:16:1b:9f:b7:90:86:28:f8:04:5a:0c:e2:30:ec:
41:9e:f5:5e:f2:29:69:85:b4:f9:04:39:4e:53:b7:ed:fa:67:
b4:1e:e5:d9:45:9e:c2:26:cc:83:76:97:d5:c9:f9:3c:18:d7:
5a:86:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:31 2026 by rpki-client