Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: q7NUWB2ZFlq8r1f0moOOO5lH2/rWajCIUrd8PTEh11o=
Subject key identifier: D8:AE:CA:F6:A5:9E:52:1F:33:99:F6:2E:2E:B7:91:61:E3:42:DB:90
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019CB023CC3A111106A99892CADC43B1E6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 0F
Signing time: Mon 02 Mar 2026 20:01:01 +0000
Manifest this update: Mon 02 Mar 2026 20:01:01 +0000
Manifest next update: Tue 03 Mar 2026 20:01:01 +0000
Files and hashes: 1: KaIgliHustVSIeqdoMLZfqd-lkU.roa (hash: TSquDL50Tyqppks/him9Q1dPueR/BPipThvWxXHjwT8=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: pWttOR0SmJp2dEMMLnAy99XhbkgN+F1r+15/oLKFmmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:cc:3a:11:11:06:a9:98:92:ca:dc:43:b1:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Mar 2 20:01:01 2026 GMT
Not After : Mar 3 20:01:01 2026 GMT
Subject: CN=d8aecaf6a59e521f3399f62e2eb79161e342db90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:ab:83:f6:a4:b2:f5:c7:4d:0d:ca:37:26:
ed:55:c0:b8:c8:ba:82:53:e1:a8:bd:69:c4:92:36:
95:5b:d7:65:15:56:59:79:42:9a:de:7e:2b:d2:8a:
a9:1d:47:dd:9f:21:ba:d5:ad:9a:a3:c8:5e:08:64:
f5:b2:2c:13:95:79:d9:9c:57:60:2d:97:bc:35:06:
44:ea:8a:fc:67:af:22:18:f8:a2:0b:ae:24:39:d8:
d3:43:0b:97:24:3d:33:c0:68:e0:30:c6:91:6f:70:
f8:14:8b:13:9f:ca:ba:be:fd:e8:50:12:9f:07:7f:
7b:8e:6e:41:28:1f:08:2d:94:58:7b:d5:7d:63:bd:
c7:af:fa:c7:53:91:70:4e:19:0d:58:e9:8f:c1:1e:
1a:1b:33:39:9b:1b:bd:35:a1:c4:23:fa:c1:b3:b4:
ec:bd:68:0a:9c:71:29:14:90:7f:25:05:bb:f1:36:
60:1f:c0:3b:05:21:6d:1b:10:c9:c9:a5:2b:68:7a:
4c:68:c3:34:db:65:6e:81:75:88:a0:8b:98:36:a5:
dd:c6:49:76:f5:f7:94:26:57:75:c8:f0:8c:ec:9f:
fb:d6:ed:a7:d7:c7:78:19:a2:a1:30:5b:a7:c9:7c:
2a:a7:7b:1a:82:e7:29:d4:b1:c1:25:a0:f5:8a:ae:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:CA:F6:A5:9E:52:1F:33:99:F6:2E:2E:B7:91:61:E3:42:DB:90
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:55:04:fd:6a:2e:0e:a8:b8:81:56:0f:16:80:f2:2c:71:
a0:8a:b6:47:b9:81:0f:58:f0:76:2f:1c:70:73:7d:3b:0b:85:
44:83:0b:46:16:e3:9f:b7:79:9c:02:07:18:39:ee:b9:1a:9b:
dc:cb:fa:ba:67:99:4e:ae:ce:b1:19:c8:6d:17:cf:0f:51:93:
6e:a1:a1:47:b1:db:bd:88:d0:ca:34:2a:f8:5c:51:6b:84:fb:
40:73:e1:fc:a0:2e:52:98:6e:46:ae:6b:05:ce:2c:9c:a3:e5:
89:0b:d7:68:67:aa:55:65:ba:27:ba:ab:a3:37:da:d9:77:1f:
d6:15:61:f6:e4:55:80:0d:a5:82:5a:66:f4:a0:f2:f6:cb:ab:
d4:1e:a6:30:e3:0e:26:ff:db:f2:89:30:7d:ef:f6:3c:52:c4:
05:a9:c3:21:dc:ed:aa:fa:b4:f9:7f:84:b5:70:37:c4:3f:23:
27:77:6f:41:c9:b5:be:0c:4b:62:78:36:c2:ea:9e:3d:f4:bb:
63:23:f5:5c:98:4f:16:b1:97:60:c4:51:94:b4:18:85:20:47:
e0:d0:22:fe:24:b4:e7:11:e8:58:d8:e9:17:95:84:81:4d:30:
98:4c:5d:6c:ab:94:74:28:bb:00:88:03:ee:dc:6f:8a:a7:8b:
4f:17:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:54 2026 by rpki-client