Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: pKXJsNR+nzgNTxzYRxAAaHyEAzj/6L6PktkksGcXnDA=
Subject key identifier: 65:E3:F5:F2:3D:2F:03:DB:60:45:DE:E3:73:C0:32:79:72:0D:34:82
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 01A181BE6F5E0228151BED89452A1391030E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 028F
Signing time: Wed 28 Oct 2026 09:01:43 +0000
Manifest this update: Wed 28 Oct 2026 09:01:43 +0000
Manifest next update: Thu 29 Oct 2026 09:01:43 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: g0Lb2yBrLOV5gMOjesqhjZRgiW+SxH/RjYfPEfVHWnI=)
3: cimLTdgD8ukTyEy4eFNyf55PNR4.roa (hash: jbd+LyuvW0274DhC8DibiCTn8R1aB5kxj9ISDh8MMC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:6f:5e:02:28:15:1b:ed:89:45:2a:13:91:03:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Oct 28 09:01:43 2026 GMT
Not After : Oct 29 09:01:43 2026 GMT
Subject: CN=65e3f5f23d2f03db6045dee373c03279720d3482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:75:68:9d:fe:2c:97:d2:0e:2a:ed:20:c7:
3d:02:db:67:18:37:b7:8e:0d:ca:3a:86:80:48:77:
c7:48:46:e1:3b:d4:88:a3:0c:ed:e0:0d:b3:1e:b5:
8d:a7:59:6e:9a:f5:7c:12:c4:aa:e5:95:53:ef:db:
de:43:85:df:fc:82:91:9a:f8:5a:b3:b1:66:66:f2:
8f:c9:0d:31:fa:57:05:b3:65:4f:29:1b:4d:8b:54:
a1:3f:ac:20:57:49:0f:92:91:40:1f:f1:33:98:76:
0a:16:64:dc:10:00:a0:a6:56:76:02:65:ba:95:55:
5c:2a:ad:85:c1:7e:48:e7:89:52:c3:c4:53:53:02:
09:aa:0f:93:31:ce:31:44:81:19:35:75:0c:6d:23:
6e:6d:af:01:d6:13:7b:14:14:cc:35:c2:5b:19:48:
44:15:8d:11:3d:02:3e:7d:f7:95:ac:d4:db:3f:67:
75:19:4a:ea:a1:19:44:f9:b2:47:07:24:a2:a3:78:
00:75:e7:fb:bb:56:5c:aa:16:06:7b:52:6c:a9:82:
ef:45:f8:0d:83:81:63:4c:ee:5a:05:c4:44:57:8c:
cf:37:7b:55:e0:bf:e5:8d:7e:a9:93:ef:c6:f3:1a:
d9:d9:37:6c:9d:0f:de:0d:88:29:7b:27:56:bd:ca:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E3:F5:F2:3D:2F:03:DB:60:45:DE:E3:73:C0:32:79:72:0D:34:82
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:e2:60:ed:6c:b3:e8:b6:82:3a:57:da:77:86:97:7b:60:
a0:04:15:4c:92:d8:66:d7:6f:40:95:b5:c6:94:7f:99:ed:63:
b3:08:0c:5f:a8:98:97:8c:2f:1c:4f:16:53:a3:a8:89:06:58:
5a:3b:df:ce:4d:86:57:d0:fa:7d:70:ab:4a:73:be:ec:76:78:
a0:57:b5:7d:8c:9c:d4:81:43:a9:63:0b:c2:55:86:99:ca:5c:
5e:e5:06:b7:51:29:34:8b:80:ea:44:44:6a:7d:af:1d:de:cc:
a0:ed:ff:34:77:83:5e:cb:a5:58:6a:64:81:b4:46:de:c6:c1:
89:00:ab:27:6e:0e:b2:72:46:a0:97:54:4a:18:60:00:a2:f6:
65:dc:34:18:3e:d1:83:38:d0:0b:aa:8f:77:ae:ae:92:b5:22:
cf:c8:f9:56:96:d4:61:b2:ec:80:6e:ee:f7:6a:bb:42:e9:bd:
bb:97:d3:ee:80:22:a6:e0:bd:d5:bd:bb:ec:3e:77:04:77:85:
ef:86:43:57:1a:2b:79:e6:10:f6:0c:c7:e2:f1:c3:42:20:1c:
a9:e8:ed:2f:9e:0c:c1:0b:c4:ea:b3:1a:83:db:27:1e:7b:1e:
d7:f9:c2:07:87:8f:7f:a9:1d:75:d6:91:ff:1d:88:8e:ef:a7:
d5:7d:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:16 2026 by rpki-client