
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: p7q3bN5GFsaKYN9W6BGqhL9mks+x4msUakskh6LCBDk=
Subject key identifier: 13:1F:FA:D6:85:62:49:02:B4:C4:8F:6F:A8:45:76:60:67:03:9E:7C
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019FAB637D424CD7212D2D526A8C7B11CE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 019B
Signing time: Wed 29 Jul 2026 01:00:51 +0000
Manifest this update: Wed 29 Jul 2026 01:00:51 +0000
Manifest next update: Thu 30 Jul 2026 01:00:51 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: noFo8sgEqfn/8gVRB0bF0TDkKrrW6AZRCKi42+w912w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:7d:42:4c:d7:21:2d:2d:52:6a:8c:7b:11:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Jul 29 01:00:51 2026 GMT
Not After : Jul 30 01:00:51 2026 GMT
Subject: CN=131ffad685624902b4c48f6fa845766067039e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:98:62:19:5c:27:27:0a:0a:00:14:d5:a4:
1d:6d:d6:fc:1c:ef:9b:a9:ec:c4:bf:dd:26:74:2c:
61:c3:13:29:a7:e6:24:40:81:69:5b:06:0c:a1:9e:
32:dc:f8:8a:e4:58:8c:6e:ac:19:4f:77:25:fe:8e:
b3:a2:fd:78:40:db:2b:90:9e:08:ac:e2:1e:fe:94:
3c:36:ee:89:8f:3d:0c:ba:3f:39:1d:d2:88:b8:a3:
50:44:9a:a6:b3:c6:d0:f6:80:e1:e1:08:c5:b3:23:
21:6a:5e:bb:6e:79:0b:c3:7a:cb:b4:43:ca:c2:45:
c1:14:ae:1b:ce:95:c6:f2:d2:3f:1e:f3:2f:69:7f:
0d:1f:ed:c6:26:9e:f5:74:c3:cd:36:59:02:5d:6a:
b8:85:d4:b2:85:2a:3a:a0:ea:e3:96:a9:83:45:a6:
02:1c:b7:a9:cc:6b:e0:24:57:65:c3:ec:fa:e0:18:
5a:68:73:ec:80:b5:ec:97:0a:53:32:16:c9:44:64:
05:89:13:83:63:17:2a:d9:8b:ab:8a:05:8c:58:06:
67:d3:9f:91:20:f0:d3:e9:a4:c7:90:ab:77:14:4b:
90:66:07:8e:ff:3f:7c:a5:ad:35:b9:1a:21:66:c1:
73:8f:6f:b4:6d:73:d7:8e:54:a1:35:05:11:6d:aa:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1F:FA:D6:85:62:49:02:B4:C4:8F:6F:A8:45:76:60:67:03:9E:7C
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4c:0e:af:6e:20:4f:54:fd:38:39:a5:ef:5a:8d:4e:b8:93:
e7:ea:e8:bb:10:4d:fb:64:77:ab:99:30:e0:e7:a5:0c:fe:39:
da:09:ce:41:45:fa:4a:16:a7:45:96:b8:47:1a:9d:32:34:bb:
6e:66:05:78:c4:9f:44:6e:f8:94:b4:bf:db:c7:8c:76:e9:1e:
61:f0:b5:2c:41:f7:03:56:0a:2f:e6:d0:3e:f5:69:d6:bf:98:
f3:3c:5c:0d:17:30:b1:e7:c3:d8:d3:94:45:d0:c8:11:3f:77:
b1:3f:45:cf:42:2f:3b:19:4b:a9:38:22:21:c9:a2:63:59:3c:
ad:0e:a8:1b:6c:f3:8c:ab:2a:8e:a1:9d:ce:b1:8a:9e:c1:90:
8b:10:26:cf:9a:d3:a8:fa:90:73:2f:bb:4a:be:ea:ca:b1:0f:
91:41:75:de:67:ce:50:2f:f2:38:18:9f:2d:2a:ce:6d:12:14:
e2:b0:f3:0a:2b:ea:37:85:c2:f7:81:8c:42:7f:1b:11:33:2a:
0b:d5:47:2b:2c:b4:c6:e0:39:69:0c:0a:29:3d:4b:6d:e1:37:
d3:3f:1f:0c:0a:2f:cb:db:3e:8f:70:48:85:ba:76:3d:6c:bf:
83:eb:46:f9:51:d0:b5:4c:ee:cf:7b:08:ab:dc:fb:a9:d4:d1:
b5:3c:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:25 2026 by rpki-client