Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier: P+00m3do0J+hVkZa0Mvb4rlCwbyiq62/kpMlk9j8RIE=
Subject key identifier: AD:58:85:17:26:AB:B2:99:8D:39:9B:8C:55:84:18:72:79:EF:D1:A2
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 019D3752592B48D23618285A5C098BEA8B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number: 08D6
Signing time: Sun 29 Mar 2026 02:00:36 +0000
Manifest this update: Sun 29 Mar 2026 02:00:36 +0000
Manifest next update: Mon 30 Mar 2026 02:00:36 +0000
Files and hashes: 1: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (hash: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k=)
2: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (hash: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q=)
3: aFesnPDh7CxN2CqxODqrdmrSUuk.roa (hash: x5ilgl/10IUgJ6jnlwharE+K/9xapRQ9JBmeLGM6YOI=)
4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: c9fcMWIJxscfzvo6Y2IKZxJllo7flXQNPaOJ9e+dmVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:59:2b:48:d2:36:18:28:5a:5c:09:8b:ea:8b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Mar 29 02:00:36 2026 GMT
Not After : Mar 30 02:00:36 2026 GMT
Subject: CN=ad58851726abb2998d399b8c5584187279efd1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:5d:94:11:30:b0:10:ca:e4:b1:5d:f0:7e:
8f:ea:11:6f:45:e0:b4:41:e8:92:e6:2d:93:33:57:
e9:76:af:38:c6:25:4d:7e:3f:18:b2:72:45:a4:c5:
84:c8:69:23:b5:0a:df:ff:08:b5:d9:02:8d:d2:22:
fb:db:09:e9:3c:4f:6f:d2:cb:cb:d8:03:e6:81:28:
17:1d:d2:fa:b6:f9:17:ce:13:3b:c0:3c:99:ca:2f:
3d:84:9d:12:2f:66:a4:8a:92:2e:6a:24:8d:b0:24:
f8:0a:9e:0b:86:51:23:1d:82:3e:bd:ad:c6:0f:3d:
61:4d:15:3a:72:fe:aa:1f:8b:eb:e7:3f:5b:2a:08:
ca:b7:1f:6b:20:27:8e:1d:6e:f4:87:43:a0:1a:27:
2b:ea:ab:6d:08:aa:38:bc:66:46:89:1e:d1:b0:58:
bb:6f:d1:55:16:08:ef:b6:2f:0c:64:98:e4:ba:2c:
f9:81:54:d6:ac:6a:27:4f:51:26:17:72:e0:9a:c9:
e7:d9:8c:cf:88:a6:d6:a3:6c:7f:14:88:60:79:fd:
d6:01:79:2e:98:dd:c9:a1:52:19:75:f7:fc:63:61:
6a:b4:ea:70:bc:4a:51:d0:34:6e:b1:e2:f8:6f:2c:
43:f7:d1:2b:9e:b3:9a:5a:75:22:b0:7d:79:d6:1b:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:85:17:26:AB:B2:99:8D:39:9B:8C:55:84:18:72:79:EF:D1:A2
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6e:2e:08:bc:0c:07:a2:d3:8e:e4:75:0e:18:c6:ae:23:98:
90:19:ec:c1:79:ad:7f:68:16:24:8a:ad:2d:6e:18:bc:16:e5:
0c:16:25:bf:6a:db:78:b2:57:74:1c:c5:05:4f:7b:c4:78:e9:
a8:58:70:1c:4a:3e:64:86:fa:ea:6b:54:b4:67:29:fb:2f:64:
d9:83:53:41:eb:31:ea:8c:82:db:46:5c:e4:e6:67:94:cf:7a:
6e:82:c5:b3:b4:76:fc:9d:b5:2b:7a:09:bf:55:5c:31:d8:4c:
1b:27:5f:84:d5:a1:60:39:4b:2a:9a:25:43:d5:bc:f0:99:84:
2f:29:ec:7a:9a:60:43:0a:ab:f0:62:ab:f6:53:bd:22:d3:78:
1e:47:9c:73:00:5a:f0:18:5d:6d:14:18:57:53:31:94:f6:9d:
98:15:34:9d:e5:0a:4c:8d:72:0d:1c:d8:86:39:e3:42:20:4b:
62:55:6b:52:24:bc:e4:84:a6:19:43:12:a7:a0:0a:de:13:95:
bc:51:cc:62:02:88:12:87:21:77:43:e6:42:04:f3:81:7b:ad:
fe:e4:ed:33:c6:ef:13:3a:ad:cf:3b:e8:a2:25:be:a6:0a:a8:
f4:7e:96:0c:53:6c:0a:94:40:6b:8d:30:b4:27:ca:a6:b7:47:
5d:33:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:50 2026 by rpki-client