Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: 18z3zt4bZyaqsk3QsQqoMqSaFNLJbRkFIrze7NFAm4Y=
Subject key identifier: 84:9B:DA:14:8C:CC:3E:15:EF:0E:91:7D:F5:F6:1E:92:26:1F:5F:E9
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019EBFC8B05B93D19F4F082388B0CC01B01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 0121
Signing time: Sat 13 Jun 2026 07:01:01 +0000
Manifest this update: Sat 13 Jun 2026 07:01:01 +0000
Manifest next update: Sun 14 Jun 2026 07:01:01 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: eektvK3ZsFSbEJ0lykLsOBRU9XGQyUbVHC0PIumyZQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:b0:5b:93:d1:9f:4f:08:23:88:b0:cc:01:b0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Jun 13 07:01:01 2026 GMT
Not After : Jun 14 07:01:01 2026 GMT
Subject: CN=849bda148ccc3e15ef0e917df5f61e92261f5fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:e9:89:69:3a:41:df:f8:a7:33:f5:c0:35:
73:5e:8b:ce:32:26:1a:d0:0d:a5:f6:c2:bf:58:a9:
1b:4a:6b:da:69:72:19:c4:82:92:55:3a:93:fc:20:
35:03:52:32:49:36:60:6a:73:69:e4:ba:f9:21:c7:
a2:6a:1c:c9:11:bb:56:22:54:53:ea:d7:ba:2d:74:
d1:83:db:47:22:b6:7c:66:f2:1b:8d:08:62:9b:5b:
0d:51:72:41:03:d2:3b:5e:18:0c:85:48:0b:cc:19:
c9:25:5d:b6:16:d5:50:70:be:8d:6b:50:fc:17:a2:
18:f7:0c:7e:f1:96:bf:41:c3:09:d5:16:64:65:17:
5b:d7:71:3a:cd:08:ee:b6:12:7c:d9:54:1d:eb:8f:
da:3a:58:0b:cb:ed:35:29:10:dd:2b:6c:94:a0:bd:
e2:42:1a:5e:36:2c:5e:aa:48:b7:34:0c:9f:55:47:
31:2f:26:e1:1a:1d:20:0d:54:f7:7f:9e:a0:82:85:
99:32:60:d3:89:63:40:da:ab:b3:b6:f1:1c:b5:57:
bd:b9:02:e5:9a:00:94:ea:76:cc:dc:d9:77:eb:d2:
25:96:54:5b:7f:b8:74:b3:ea:49:89:e6:21:cf:25:
f5:89:46:c3:55:54:7b:f1:64:6c:3b:4e:de:24:5c:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9B:DA:14:8C:CC:3E:15:EF:0E:91:7D:F5:F6:1E:92:26:1F:5F:E9
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f9:47:19:d3:08:83:0a:46:1e:53:af:f2:d3:10:58:53:a2:
2a:d3:81:f3:21:aa:10:a5:86:d7:4f:6f:14:4f:b7:1f:9b:f3:
46:81:cc:b6:63:77:31:5c:c2:11:fe:ca:ee:3d:2e:22:79:43:
db:25:7b:56:d5:f5:41:ba:f9:ab:2d:21:85:61:24:b5:ab:60:
1e:5e:72:f0:bc:c1:5e:dd:12:1f:2d:ef:ff:86:11:c7:77:17:
f7:65:b1:4e:fe:3e:1f:b3:bb:cf:4c:c3:bf:ef:4a:8b:0f:57:
e6:76:6b:06:c6:5f:fc:ac:01:64:e9:b0:d0:4d:29:66:62:b6:
f9:14:2a:26:37:82:9e:16:bc:26:65:2a:dc:0d:b1:f7:d0:7e:
ac:bc:c9:42:d1:37:76:67:9e:06:77:c3:55:ea:c0:b5:c2:0d:
cd:60:92:2e:f1:d7:02:30:90:df:77:11:22:cc:b1:fa:e0:d4:
e0:6e:ee:86:4b:17:0f:89:1d:b5:17:2e:9d:73:c8:77:37:09:
38:c9:a2:3d:ee:14:89:5a:39:b5:ec:ab:a4:17:da:5a:2e:58:
36:85:dc:e0:55:5f:3e:c3:07:b4:3f:dc:12:16:67:d8:fd:18:
f9:44:64:8b:29:2b:4b:f3:38:34:c2:35:44:88:03:da:cb:af:
0a:f9:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:06:29 2026 by rpki-client