Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: NRACx4GXgFJhmwz29SW/AAfy/HiKDZkycxH30XJY8iI=
Subject key identifier: 14:A0:F9:58:25:DB:8A:00:19:6F:92:98:4A:F5:21:51:99:8E:BF:EB
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 01A08C7ACFEDC0C5717A4A03D8A10A20AC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 0210
Signing time: Thu 10 Sep 2026 18:00:53 +0000
Manifest this update: Thu 10 Sep 2026 18:00:53 +0000
Manifest next update: Fri 11 Sep 2026 18:00:53 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: PKWHSNOIKPVzoEJkG9oytf71fJ1bm5UyZy4SNYY0cgM=)
3: cimLTdgD8ukTyEy4eFNyf55PNR4.roa (hash: jbd+LyuvW0274DhC8DibiCTn8R1aB5kxj9ISDh8MMC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:cf:ed:c0:c5:71:7a:4a:03:d8:a1:0a:20:ac:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Sep 10 18:00:53 2026 GMT
Not After : Sep 11 18:00:53 2026 GMT
Subject: CN=14a0f95825db8a00196f92984af52151998ebfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f9:e9:fb:1d:e2:b9:98:21:a8:5b:cf:1c:59:
51:34:94:b8:bd:1c:79:b4:91:3a:38:56:ed:f1:11:
35:27:24:b4:af:2e:b5:84:9a:7c:bd:07:81:64:41:
9e:7a:6b:f6:ad:6b:67:6c:58:67:f1:59:d1:0b:74:
f9:9b:ba:5f:1d:33:ee:0f:d2:8c:f9:85:86:a5:f9:
5e:5f:b2:15:5c:25:45:32:4e:82:3f:4e:0a:fd:65:
7d:b4:6f:31:e3:f6:b6:2d:eb:4f:49:3c:cb:84:f6:
4b:42:71:21:76:8f:a2:28:c8:78:c7:6c:31:2f:45:
2a:8f:22:0d:ac:a5:e7:17:a3:8a:4a:ab:dd:b7:fa:
3f:ba:2c:7b:6c:4b:59:b5:18:af:a5:60:a4:ab:e2:
23:cd:62:2b:89:4f:9c:b2:ab:5a:53:74:71:10:92:
61:ec:a1:34:be:30:4c:29:a2:42:4d:5f:bb:02:cc:
54:5b:ec:da:0a:de:c8:8f:33:fe:0c:ac:49:5e:ae:
80:46:a5:d4:91:f6:75:50:4d:c0:eb:20:48:41:5c:
74:0f:6d:10:cf:f5:03:19:18:ac:2d:28:91:85:99:
b9:d9:7c:8e:8b:37:31:48:dc:ea:8e:34:72:83:74:
ff:2f:8c:76:14:61:ce:dd:52:d4:cc:d8:4a:4d:96:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A0:F9:58:25:DB:8A:00:19:6F:92:98:4A:F5:21:51:99:8E:BF:EB
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:90:c2:ed:6f:94:74:e1:be:96:ee:88:3c:8e:d8:6d:b8:4c:
56:cb:1c:23:ce:58:e1:a8:1b:07:1d:9b:ff:ca:61:cd:ee:b6:
f4:68:81:ab:5d:ff:ed:e9:18:9f:0b:6e:b4:b6:23:2e:f2:1e:
47:c2:3f:5c:ed:bf:b4:dc:f7:d7:64:d5:90:33:c3:3b:e5:bb:
7a:b8:33:02:08:eb:73:75:0e:22:2b:c2:3d:07:06:ad:19:df:
d3:04:40:ae:4a:29:65:e4:c9:c2:a0:1e:c2:aa:30:25:49:a9:
13:5e:68:11:dd:f4:36:3e:ed:14:be:78:bc:61:d4:e6:84:50:
0e:71:a3:b4:90:44:32:59:f3:65:91:4c:ad:a7:3c:3d:61:ce:
8f:e3:7b:fa:ac:13:1d:5f:63:39:77:ae:9b:3f:39:f4:f7:18:
7f:63:17:22:1b:c3:a9:40:e1:26:26:d5:d6:35:a2:01:35:73:
cf:e4:80:f9:d8:fd:35:cc:15:fc:54:17:f8:ba:6d:47:ce:9a:
fd:06:fa:ec:1a:f3:b2:43:75:b3:1c:d5:37:30:5f:88:b0:d3:
b8:0a:d5:b4:03:5e:39:e4:9a:22:63:c1:87:7b:c2:1f:83:e0:
69:af:1c:77:ce:de:79:75:fa:aa:38:ab:27:6e:8d:f5:ba:d7:
2e:9e:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:48 2026 by rpki-client