
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: wAsIkgNckaj9AyBjttiRrG49xLd0tmMmUX7wRTeZKBc=
Subject key identifier: F3:7C:EF:35:83:64:70:83:9B:56:55:46:1A:78:68:AB:C7:AC:F5:28
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019FA1BB1ACE29816E51234B11C49698CB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 0196
Signing time: Mon 27 Jul 2026 04:00:21 +0000
Manifest this update: Mon 27 Jul 2026 04:00:21 +0000
Manifest next update: Tue 28 Jul 2026 04:00:21 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: yPSPvL8+gstVG++Bc18pFxDDWR8MDCXS6Ke17t3OP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:1a:ce:29:81:6e:51:23:4b:11:c4:96:98:cb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Jul 27 04:00:21 2026 GMT
Not After : Jul 28 04:00:21 2026 GMT
Subject: CN=f37cef35836470839b5655461a7868abc7acf528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:07:6f:18:f0:aa:4a:aa:e1:3a:f1:94:29:
b6:95:37:0a:eb:01:32:aa:e8:9c:1b:8f:f7:42:41:
1d:ea:5d:b6:9c:f2:2a:2b:d9:5c:ff:d3:48:ed:54:
24:60:ec:cc:61:3f:f7:6a:98:6f:aa:09:91:14:ce:
1a:5b:3a:32:5e:64:96:08:2c:81:4e:0a:b3:57:13:
4d:e6:c4:54:9c:d4:8e:5d:d5:c8:7c:14:af:12:1a:
42:f2:4a:17:1b:4c:77:57:65:9c:f4:f8:b4:59:41:
0e:0b:32:89:a8:c7:d2:04:6c:3f:e1:f9:1e:89:7d:
71:89:c7:b3:d3:56:22:cc:fb:12:3b:0c:36:38:41:
40:8c:ee:ed:35:ac:55:5b:51:2d:49:c3:6e:32:06:
28:e1:57:11:ec:7b:0d:8f:3d:c8:5c:ba:87:36:d9:
65:6f:0a:2d:55:06:85:db:2c:30:8c:16:41:30:ca:
4c:70:d7:fb:a4:3f:3d:bc:cb:32:0c:b2:62:00:7d:
89:91:a7:82:6e:52:9e:b2:d7:01:4a:fa:ca:d2:87:
04:f6:76:67:e4:eb:f1:b3:39:14:b0:eb:87:ec:c7:
38:af:55:65:19:4d:b8:4a:2f:f2:2f:2f:42:ca:97:
73:d5:d8:a6:b0:af:a0:ff:48:25:6b:0b:fb:ff:41:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:EF:35:83:64:70:83:9B:56:55:46:1A:78:68:AB:C7:AC:F5:28
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f6:c8:5a:62:84:51:99:e9:36:85:34:55:5b:c2:09:b9:27:
91:e8:f6:b0:21:68:82:a1:09:e9:aa:fe:3a:aa:b2:29:0d:c6:
90:1e:b6:10:99:55:2d:c1:38:4c:67:5b:fe:b4:c5:9e:c5:ee:
75:a8:fc:af:e4:33:fa:79:14:44:e8:dd:a0:d8:ea:df:96:3b:
60:99:c0:7f:22:42:1d:13:f0:55:4f:8c:8b:b3:3d:97:f7:fc:
18:e7:19:12:be:0e:d0:6b:00:d3:8f:f9:d9:59:18:60:21:8f:
47:b8:bc:c0:5d:bf:1b:5c:ca:24:1a:02:4c:f8:ca:f9:f4:8c:
e2:3a:f3:29:34:40:94:8e:3d:1c:c5:ac:74:1c:dd:95:7f:97:
4b:1d:7e:9a:53:fd:e0:7c:46:f2:06:1e:8b:fc:57:88:84:8d:
f5:f8:73:e5:69:d9:f5:3e:20:20:ba:35:ea:6f:97:ed:97:c3:
0c:53:aa:af:18:73:cb:e2:2a:20:c3:2f:10:69:c5:7a:92:3d:
3b:72:a1:fb:85:be:b2:6f:3e:13:19:fa:a0:81:45:a5:e1:85:
bf:2e:55:be:f2:11:d9:86:57:dc:92:40:10:87:b0:3c:23:60:
1e:2d:2b:a6:5e:64:d5:a9:fd:35:6d:dd:2a:9b:0a:54:35:1b:
9d:2c:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:35:23 2026 by rpki-client