Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: lpDOVuhjlWxEm2DC+K68THz4CWdzCHVFmwWW21w0Ro4=
Subject key identifier: 1B:B3:70:CB:96:F7:82:7F:9F:3B:C9:4D:CA:0E:5A:B3:02:EF:96:CB
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019DCE7BB5A8D8F9CA85EB13E1EC321150DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: A4
Signing time: Mon 27 Apr 2026 10:28:27 +0000
Manifest this update: Mon 27 Apr 2026 10:28:27 +0000
Manifest next update: Tue 28 Apr 2026 10:28:27 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: sAD1ZHqhI5TDCfpwGR5tbQXKwj8SKsbWpX4xs7Ig/qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:7b:b5:a8:d8:f9:ca:85:eb:13:e1:ec:32:11:50:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Apr 27 10:28:27 2026 GMT
Not After : Apr 28 10:28:27 2026 GMT
Subject: CN=1bb370cb96f7827f9f3bc94dca0e5ab302ef96cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:44:d7:e4:1a:30:cf:0e:da:aa:81:87:1f:
32:08:5b:0f:fd:0e:d1:e5:a7:8f:16:78:03:c1:e5:
87:6c:ee:d6:12:38:42:95:06:91:f8:66:e8:bc:16:
f3:cf:40:65:6a:b5:47:58:f8:c2:e5:78:18:d2:6c:
de:38:1a:66:9f:eb:41:6e:16:9f:f2:79:be:06:f2:
40:93:aa:cb:ed:b0:23:0c:8a:a8:e8:20:3e:9a:15:
68:f3:a6:59:67:3c:9c:fa:b0:cb:35:d0:64:be:a4:
42:fe:05:88:5a:a5:3b:d2:5d:e0:27:d1:23:6f:35:
20:28:aa:08:fa:ad:b9:04:fc:79:57:26:6c:66:fa:
da:4b:47:76:66:1d:e7:85:05:ad:cc:b7:be:4c:38:
f4:a7:9e:fc:f7:17:df:95:f2:53:e7:f8:b7:55:d7:
ba:8c:08:74:da:59:3a:14:d2:bd:6c:06:82:e4:b6:
23:9f:e5:1e:14:59:3d:67:86:b3:14:d0:40:79:2c:
ae:e8:d2:de:3b:4c:d5:07:64:21:5a:80:bc:53:6a:
e8:aa:e7:1d:54:e2:d6:6c:67:69:93:57:16:c2:60:
8a:fe:c6:be:d3:48:e2:49:5a:c6:b9:c3:a3:69:5a:
61:b5:76:61:72:4e:2d:5c:86:e1:06:1d:a1:3a:cb:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B3:70:CB:96:F7:82:7F:9F:3B:C9:4D:CA:0E:5A:B3:02:EF:96:CB
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:43:12:ad:36:ef:24:9a:29:4d:63:78:76:0b:26:63:07:a6:
37:ef:16:e4:47:b2:59:67:a6:67:0c:26:41:74:be:7b:d2:5b:
58:43:c5:08:5e:6d:17:2c:4f:a6:71:28:1e:ed:44:f8:ad:c6:
88:ba:7c:ba:1f:64:3f:f3:5e:90:b9:c3:cd:b2:b5:76:51:f1:
2c:8c:2b:49:eb:e2:9c:0d:52:23:d1:8a:09:88:2d:57:af:87:
97:d2:20:9a:06:dd:e2:0c:67:1d:70:b7:db:ac:63:ff:92:2d:
a6:20:1c:5c:2c:3d:2a:a1:8b:c3:80:dd:a2:37:5e:48:e1:3f:
53:6d:9b:2f:f0:7a:24:2e:ca:cd:25:d8:3a:6e:b1:21:af:a2:
53:96:6e:66:66:a0:24:d9:0e:26:ab:b7:97:15:1d:0b:d5:1e:
20:81:d4:9d:62:e6:32:ea:7c:f6:4e:02:4d:7a:60:0b:f7:0e:
e1:b3:43:dc:81:4a:44:d1:54:68:58:98:3b:0a:2b:c8:8b:60:
66:fb:26:be:af:0b:73:04:ab:ae:2f:ac:6a:27:74:a5:04:c7:
3e:b7:c4:a8:49:b5:bf:9b:52:11:51:a6:56:c3:de:3f:1b:47:
88:f7:c2:c3:07:3f:b5:97:04:05:95:97:52:75:5c:07:a7:5a:
75:ad:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:13:04 2026 by rpki-client