Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: xjdec9C2qpac6ecY3Mae6LIQvMN4/16dnpk3Vv9LpWI=
Subject key identifier: BA:BE:F0:FB:EC:22:3D:DB:E2:D0:53:3B:EC:E1:1C:4A:DC:20:AF:C4
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 019D9A3DEC04E42C4033CA20A260B2552F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 15D3
Signing time: Fri 17 Apr 2026 07:00:42 +0000
Manifest this update: Fri 17 Apr 2026 07:00:42 +0000
Manifest next update: Sat 18 Apr 2026 07:00:42 +0000
Files and hashes: 1: C7f6La2RHnovZkVXPsCMvF_ZrpU.roa (hash: vor63A+KF0/+NLo3bRvMmDXK5iRB2pgk/JSZQYxp0os=)
2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: xSaZ93jKcFjAlyZmj3LznpKXvaMpNm6eXAivgEhesig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ec:04:e4:2c:40:33:ca:20:a2:60:b2:55:2f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Apr 17 07:00:42 2026 GMT
Not After : Apr 18 07:00:42 2026 GMT
Subject: CN=babef0fbec223ddbe2d0533bece11c4adc20afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:1b:12:bc:ed:ae:9e:e8:40:4a:58:3b:9d:
6b:c2:5b:be:3b:3b:73:f6:ad:50:3e:69:78:d2:d8:
6d:35:cb:b6:00:b5:b1:70:96:49:eb:ff:24:67:fe:
92:07:56:7a:4c:c0:4d:33:7b:01:64:e2:70:04:cc:
69:00:df:27:dc:a3:98:98:ae:cd:3f:4a:b8:38:e7:
75:e8:a5:a9:3d:18:40:4e:e8:5e:3b:d8:be:01:65:
38:1b:b4:bb:e7:7f:d4:c1:96:1c:b6:b7:3f:7d:f7:
2b:bd:1d:d0:ea:f1:90:f4:9c:01:6f:e8:f3:03:9f:
ff:11:77:0b:ef:a2:fc:52:75:b6:ea:a7:63:df:f2:
68:13:7a:fb:b2:7a:c8:97:59:b2:12:ca:f0:2d:c7:
16:2d:fd:61:66:ef:fa:59:1b:6e:0f:3c:a7:53:ea:
56:bf:33:cd:42:cd:e6:a5:76:c1:54:24:20:9a:89:
b8:b4:a3:2d:43:a4:86:70:5d:d5:cc:47:67:e5:f3:
31:62:e3:7d:11:5b:19:0e:69:73:43:4a:62:8a:9d:
0f:84:af:ff:c1:ef:ec:5e:2d:14:98:44:e6:81:25:
6e:40:d7:44:30:f1:59:c7:aa:7c:f0:d8:f1:29:dd:
d6:99:e2:68:32:e0:16:b8:3f:e6:c3:2e:f1:ac:89:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:F0:FB:EC:22:3D:DB:E2:D0:53:3B:EC:E1:1C:4A:DC:20:AF:C4
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5e:ef:0f:25:dd:df:68:0e:fe:36:07:b2:d4:9e:1d:35:c0:
00:91:ff:75:94:12:69:a2:8b:5e:58:bd:8f:f7:84:a1:36:bb:
77:d8:40:03:11:00:f0:9d:c2:83:4a:24:31:e1:91:67:b7:7d:
00:dd:bb:7d:65:70:7a:04:17:50:86:62:98:7c:34:84:3f:87:
49:72:40:20:fe:fc:b3:1c:44:04:85:cb:91:8a:2d:99:77:dc:
29:c7:c9:5b:58:85:d9:11:2e:6b:62:c2:71:27:15:10:f3:f8:
89:7e:26:30:bb:71:ee:6b:f8:3c:e1:a6:fe:30:00:37:36:73:
cf:54:83:90:3f:1d:5c:5f:4c:e1:e0:61:1f:51:de:e1:0b:26:
a7:54:d3:51:4c:c6:bd:74:46:30:8c:5c:56:07:77:d7:24:34:
cc:ba:f8:49:37:07:c9:35:30:af:8b:59:64:c9:4c:91:97:a8:
2e:af:38:05:f8:d7:ff:87:ee:20:4b:bf:85:7f:70:60:c7:e0:
77:2b:e0:91:72:68:1e:fa:56:54:e4:3c:46:70:53:72:8b:cc:
fa:82:6f:68:bd:50:18:a0:97:b2:18:0d:c3:ff:a3:28:23:86:
a0:9a:52:b6:af:b4:e6:bc:49:c9:b5:07:e5:d7:3a:32:11:2e:
8a:75:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:10 2026 by rpki-client