Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier: drDI7YGkOr6ONuQoMvBCa3AQK8amFbd/KSTqDHhWRv4=
Subject key identifier: 43:43:45:A8:67:FF:4B:BB:FB:37:3E:97:56:C2:31:2E:B8:EB:BA:C1
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 019CAC47476020BC4AEB54EA61965B2CC99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number: 088E
Signing time: Mon 02 Mar 2026 02:01:18 +0000
Manifest this update: Mon 02 Mar 2026 02:01:18 +0000
Manifest next update: Tue 03 Mar 2026 02:01:18 +0000
Files and hashes: 1: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (hash: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k=)
2: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (hash: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q=)
3: aFesnPDh7CxN2CqxODqrdmrSUuk.roa (hash: x5ilgl/10IUgJ6jnlwharE+K/9xapRQ9JBmeLGM6YOI=)
4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: WF3UR0fJvH/jhV8Q1Q1kPrLZ/fnUHdeANcnNMtfLuZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:47:60:20:bc:4a:eb:54:ea:61:96:5b:2c:c9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Mar 2 02:01:18 2026 GMT
Not After : Mar 3 02:01:18 2026 GMT
Subject: CN=434345a867ff4bbbfb373e9756c2312eb8ebbac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:12:32:89:dd:07:60:93:91:e5:4a:38:f9:
f4:d7:c2:9c:ce:ff:9c:09:6d:68:6a:48:3a:84:83:
51:e4:64:66:13:29:37:ff:0e:75:04:c3:76:7d:32:
e4:57:b1:bd:b5:e1:86:91:38:d3:03:54:77:42:14:
0a:22:a7:29:85:74:8a:72:9e:c9:ce:99:67:58:f5:
b5:3f:81:6d:22:d8:25:1c:12:19:6d:c0:8e:3e:df:
4a:8a:f9:f6:77:d5:9a:f7:c1:2a:91:25:51:c9:56:
ab:98:79:a6:89:0d:e1:0f:6a:35:da:89:42:d6:ac:
ff:71:ec:fe:96:3f:fc:cb:8d:56:c3:ce:69:b3:c3:
0a:5f:df:40:cf:af:e4:1e:69:70:98:31:4b:2d:b7:
45:79:f0:be:b5:ad:e4:79:97:0c:cf:d7:6d:3f:19:
0d:33:18:d5:3c:b7:13:df:31:30:31:8c:a6:e4:e8:
12:15:c0:8b:f9:02:79:84:1e:70:f7:a4:96:38:ed:
2f:43:bc:45:80:f6:e9:40:fe:72:77:d8:42:80:04:
cb:86:f0:c4:6c:55:3f:b8:73:54:31:f4:87:65:46:
07:1b:fc:3f:cb:36:49:4d:75:72:de:bc:ef:27:16:
fc:49:81:ab:84:9f:ea:46:80:0a:c1:3b:3d:fc:a1:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:45:A8:67:FF:4B:BB:FB:37:3E:97:56:C2:31:2E:B8:EB:BA:C1
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1b:66:11:29:73:69:55:da:8c:d1:52:d4:61:e2:ba:7a:12:
6c:9c:be:8d:3d:fa:ed:29:fd:1d:d3:5e:f8:d6:a2:1e:4e:c7:
07:8d:01:cb:c0:40:cf:2f:4e:66:5d:30:45:64:d9:1a:e0:85:
8e:a8:dc:68:e6:10:86:4a:90:fb:e3:2d:a3:e2:d2:cd:88:54:
02:7c:7a:20:8a:74:88:ce:11:bf:20:fd:89:4d:ed:82:ed:cb:
e6:29:23:e2:0a:97:69:6b:f9:ef:20:9f:9a:9c:76:19:80:81:
f3:55:44:9f:66:a4:d3:e1:5d:49:83:82:57:e5:f6:ec:30:71:
c7:07:79:8c:77:b7:05:6b:bd:59:84:ea:74:bf:2f:89:5f:58:
89:08:45:ca:87:24:f3:ca:92:c7:95:e5:8e:ea:8e:a1:be:09:
86:0e:d7:cd:aa:26:b8:6f:5c:0e:93:b0:54:22:e1:c6:a9:f6:
62:ce:f5:d7:f6:99:e9:6e:7c:38:c6:e0:a9:83:65:21:7c:97:
6f:a6:af:36:cd:dc:be:70:1c:31:19:d4:ff:26:31:46:8c:3d:
ff:74:49:2a:ad:86:32:89:a3:52:ee:9c:0a:b4:a6:cb:f9:73:
7b:94:33:7c:5d:e4:79:e7:2b:1f:c5:63:e3:f5:b6:33:bf:32:
ef:5b:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:08 2026 by rpki-client