Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: u73NCjYQYA6565SFlFKxAmtPR070/VXzJOeAs7VJ83Y=
Subject key identifier: C5:64:31:BC:7B:FE:6D:15:47:0E:3A:41:07:25:F9:8D:36:DD:BE:48
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019D996245942109556B7C5E7F5EE19A07CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0D29
Signing time: Fri 17 Apr 2026 03:00:47 +0000
Manifest this update: Fri 17 Apr 2026 03:00:47 +0000
Manifest next update: Sat 18 Apr 2026 03:00:47 +0000
Files and hashes: 1: 1-8yART7xM2-_6XMTd_NQPcz65zM.roa (hash: tQW6oVAcsw1dq1koaqtzJ35SlN0zgIfaKPB7+0DEfrg=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: H1ouvStTO0IaD9+7/+f2zMkR477C7ncEqp1jAlHLDFA=)
3: zv8htVuLlM7L27gWdlqS584Hu_g.roa (hash: aUcg7/4honTLftFLDXOy/acZ6va/bYgkctanVBZKlS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:45:94:21:09:55:6b:7c:5e:7f:5e:e1:9a:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Apr 17 03:00:47 2026 GMT
Not After : Apr 18 03:00:47 2026 GMT
Subject: CN=c56431bc7bfe6d15470e3a410725f98d36ddbe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:e6:83:be:fe:0a:fd:8a:c6:5f:28:9e:fa:
95:79:bc:73:5b:f8:a7:68:b1:e5:8f:7d:ef:89:a7:
5f:5d:22:d8:20:a8:c4:01:26:7c:1d:47:38:32:e6:
fd:19:e9:42:90:73:0a:fc:77:57:e4:fb:52:07:3b:
a5:86:46:48:a2:9b:cc:88:2f:39:94:bd:e6:40:12:
5c:76:33:4f:d6:fd:43:6e:2c:21:a8:92:4c:5c:1e:
4e:48:d1:d2:63:c1:36:65:cc:cf:cf:86:74:07:c6:
d7:e3:35:9c:70:f3:39:8c:31:27:19:d6:9d:3b:90:
3d:ed:07:38:d3:7d:35:3f:c8:df:d8:0e:09:34:08:
e7:bf:52:cc:cd:1e:31:38:14:38:2a:06:48:6b:01:
af:0d:41:c5:81:e5:a7:c2:63:88:52:63:2f:de:70:
b0:9c:62:3c:33:36:fe:5a:73:81:7f:2f:91:09:bc:
cc:ac:05:c3:a5:52:d2:f7:63:cf:92:86:bd:27:a2:
76:61:5f:fd:bd:b9:3d:da:dc:c3:62:f6:ff:38:4b:
35:9f:a1:20:9c:00:e5:0f:ab:78:0e:b7:c1:23:a5:
9e:bb:05:fa:e0:4f:e1:0a:da:e0:c5:0c:31:b7:da:
55:62:7c:03:51:1f:9e:9e:7b:a5:cc:9e:83:1f:d0:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:31:BC:7B:FE:6D:15:47:0E:3A:41:07:25:F9:8D:36:DD:BE:48
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5b:8f:5f:ac:7a:d7:7e:66:47:a1:ce:9f:dd:ae:ac:71:0a:
e0:3a:f0:41:e9:d3:52:4b:f3:1e:b8:4b:7d:28:25:15:44:9f:
fc:19:80:4f:ff:0b:84:ec:f7:16:6f:7f:c3:fe:18:31:79:59:
96:5e:a5:29:9f:08:14:f8:7b:45:dd:03:4a:60:40:6a:46:6c:
6c:f7:c9:f4:3e:f1:01:35:23:5d:88:0a:5c:83:42:04:09:b0:
46:a9:75:8e:e4:98:57:13:ce:95:06:0d:4a:96:1e:91:54:b8:
60:56:5a:1e:91:8e:a0:7b:70:8d:7a:46:5a:36:c0:51:73:df:
c7:a5:29:91:0c:92:0b:4e:07:bc:8f:a5:a2:7e:9f:16:0b:61:
cd:cc:ea:92:5b:0f:3b:4f:a0:18:13:c4:11:e7:47:b0:16:b7:
28:f8:1b:4e:9b:a8:7a:ab:b4:de:33:2e:f1:a7:19:03:13:aa:
ae:85:3e:28:29:9b:d7:78:05:87:e3:0d:92:53:a9:01:c3:b0:
92:90:ad:a5:9b:8a:0c:33:70:37:26:f1:4b:45:43:9c:20:3b:
c3:6c:a5:94:5e:8a:dc:fd:9f:4b:eb:b0:1f:d7:69:5f:48:8c:
b5:55:4a:39:db:36:9b:da:cf:c7:f4:d6:31:1b:ee:a9:69:47:
e6:83:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:50 2026 by rpki-client