Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: T8znmN6voiGMyxoLsHAOCWbdi+RRTHexJqfs5lIa9AY=
Subject key identifier: AB:34:C2:A4:56:36:30:D1:6E:82:59:C6:22:D2:68:3B:B5:54:C0:B2
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019CE63644F28FA40698CB588ED97280D427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 2B
Signing time: Fri 13 Mar 2026 08:00:42 +0000
Manifest this update: Fri 13 Mar 2026 08:00:42 +0000
Manifest next update: Sat 14 Mar 2026 08:00:42 +0000
Files and hashes: 1: KaIgliHustVSIeqdoMLZfqd-lkU.roa (hash: TSquDL50Tyqppks/him9Q1dPueR/BPipThvWxXHjwT8=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: 8K3Q16J1cfq31eGRy1BuSlCZ1gFrPfq4NuFjKILcYBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:44:f2:8f:a4:06:98:cb:58:8e:d9:72:80:d4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Mar 13 08:00:42 2026 GMT
Not After : Mar 14 08:00:42 2026 GMT
Subject: CN=ab34c2a4563630d16e8259c622d2683bb554c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:e3:16:ea:ee:cf:89:53:2b:83:e6:a0:49:
09:c8:e6:a3:a8:96:f6:a8:73:7b:d8:81:82:7f:bc:
0d:e7:97:fd:f8:45:6c:3d:b1:d4:ba:b9:49:36:38:
49:ec:e4:97:21:23:bc:2e:94:f4:f2:d3:9c:d0:1b:
15:fd:59:4f:f6:2d:17:72:8e:64:06:cb:5a:b6:11:
28:9b:9c:a1:96:04:7f:0b:f9:f7:47:04:b5:b9:87:
62:40:b0:2f:67:fe:f8:64:db:69:b2:f7:4c:d3:c2:
03:d2:67:f7:a7:68:a2:0c:30:33:c8:27:a4:4c:99:
ad:8f:b2:f4:8b:d7:a1:41:91:69:0f:16:99:fc:b1:
95:16:2f:f1:9c:1b:ec:a3:c8:c4:39:46:f1:69:78:
7b:a7:45:65:1c:bc:8b:2c:15:50:40:12:36:50:d1:
e6:17:25:aa:dd:9e:01:81:cb:22:b9:95:e4:49:a7:
10:0b:1b:02:19:a8:1e:da:a5:de:62:e0:da:60:ac:
39:84:3a:97:be:0f:d6:c3:66:67:9d:99:d2:55:0d:
7f:b7:f7:4d:94:09:67:79:54:cb:95:0d:4c:65:03:
07:c1:18:d9:8a:1a:0e:92:78:64:be:e8:23:7c:39:
d4:f1:b3:a0:bc:6d:fe:08:c8:8d:ca:0c:dd:31:93:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:C2:A4:56:36:30:D1:6E:82:59:C6:22:D2:68:3B:B5:54:C0:B2
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:19:a8:c3:cb:b0:51:db:e6:65:0f:05:0f:a9:c6:6f:ce:4a:
78:31:84:49:67:a0:bd:ec:ea:55:72:a3:67:6d:95:ba:63:13:
be:35:b0:cd:42:93:e7:1d:89:fd:68:93:70:b4:8d:72:85:b4:
8d:09:cb:0e:b4:d9:b8:63:a3:1f:27:49:40:32:fd:90:78:e8:
54:b5:9d:6c:4b:d2:8c:42:00:70:10:c1:05:ee:6a:65:62:aa:
bd:8b:4b:49:16:80:6d:d8:ce:19:0b:8e:4b:d8:42:40:67:f8:
f0:e9:1c:ab:51:81:93:fb:cc:b8:61:3c:1c:78:d2:91:04:4e:
52:10:5c:df:2a:ef:c1:c1:ab:5e:2a:80:f8:cf:2d:38:63:99:
28:8e:b2:8a:b4:83:47:52:99:49:03:c5:a7:45:bc:22:71:06:
79:1a:7a:0d:55:ad:ab:ea:58:87:10:e5:80:2d:ee:00:9f:a6:
ee:c0:83:ba:90:0d:10:60:ba:df:2b:e9:82:99:eb:ad:bc:8d:
20:85:f1:14:d5:27:54:c5:47:35:b9:a8:68:0e:46:d9:47:bb:
47:91:b0:a2:b2:d6:d5:47:ef:51:8e:07:83:8c:c6:5d:04:75:
18:ed:31:74:e8:6a:e9:90:54:23:c6:9c:22:d0:a3:76:ff:11:
bc:e9:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:44:25 2026 by rpki-client