Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: dSoGJbdrzgzdyqrDKzLQmiQSnU5nOFaViZqiXXKHe/0=
Subject key identifier: 44:F1:D7:95:E7:E4:57:4C:67:12:7B:4D:63:83:ED:F4:6A:5A:FE:BB
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 019DCE997EF181C6F7BEADB0455A95503A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0947
Signing time: Mon 27 Apr 2026 11:00:59 +0000
Manifest this update: Mon 27 Apr 2026 11:00:59 +0000
Manifest next update: Tue 28 Apr 2026 11:00:59 +0000
Files and hashes: 1: 0TK3c5i8HR_A-PsT2oVGhcZw6cM.roa (hash: h0uiRwWUdBUK99Ks+Y8sh+LxhfXczzzvDGj593a9g3k=)
2: DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa (hash: oHLHJsgbUguG193W+KSxMKgTzMMz/6UR3KrwC/LYnpQ=)
3: LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa (hash: GpWCJE/Uhd8pdU1hHuUyPW3gfCMnh5kn2jlAjryWbcU=)
4: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: H6+zw+MD5hgZ0K82sC7QCRGqL8B7i2D+WFKgEAA+ua8=)
5: ZPnR3HMA7sGvzycup7HofhXYTG8.roa (hash: A+4R2yyAAlbJkqTLskXX0nzQm93oNzg5z6lYvLAvYBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:7e:f1:81:c6:f7:be:ad:b0:45:5a:95:50:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Apr 27 11:00:59 2026 GMT
Not After : Apr 28 11:00:59 2026 GMT
Subject: CN=44f1d795e7e4574c67127b4d6383edf46a5afebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:f1:52:fb:8b:a4:3c:61:37:b1:69:92:33:
28:92:c7:a5:d8:63:ad:41:41:19:a2:83:86:31:3b:
f0:24:92:56:f4:e1:db:a0:d7:65:40:cf:9b:57:b4:
23:69:50:7b:9c:3a:bf:d8:32:6f:8a:a2:4c:25:cb:
cf:ce:40:21:7f:87:23:e7:db:0f:c6:7f:8f:2c:cc:
81:65:05:15:36:ef:e5:e0:8c:c7:dd:39:01:60:10:
4a:94:43:fa:2b:8c:b2:f6:52:b5:d3:2a:39:25:54:
3b:fc:a2:e3:96:6b:72:3f:3e:4e:4e:04:98:50:9e:
f9:e4:7f:9a:36:c8:4c:aa:61:26:e6:70:9a:e9:80:
05:e8:d8:29:c1:bd:4b:11:b2:2c:8b:25:fb:3d:95:
93:2b:db:84:43:b6:26:3f:ae:1c:2d:db:46:69:20:
6f:02:6f:ba:0c:c2:5b:25:96:7a:70:a7:ae:8d:df:
d5:7d:73:0a:41:f8:a0:c6:e7:c6:4f:02:8a:a5:65:
86:9a:f2:30:6a:d1:b2:0b:41:e4:18:a2:08:cb:b9:
44:d1:e7:74:ee:f7:6f:3e:2c:c4:31:7c:da:f4:14:
92:89:1a:e9:43:aa:c2:e3:67:70:61:7d:ab:fa:bb:
2d:88:cb:ac:b4:b6:68:91:05:e5:81:15:8c:4c:ed:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F1:D7:95:E7:E4:57:4C:67:12:7B:4D:63:83:ED:F4:6A:5A:FE:BB
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:cc:66:ee:7b:cc:4b:ce:e2:ff:fa:c6:1f:8d:ea:5c:3f:
21:a0:59:76:32:43:76:d5:69:52:8c:8f:82:03:fd:c2:bb:d2:
66:cd:7b:06:7d:24:b2:c1:8e:50:ca:9b:30:83:45:63:90:ee:
28:2e:e2:9b:8a:ce:6f:5e:79:d7:0f:dc:6a:5e:d4:e0:1f:90:
37:26:4d:1d:be:56:f3:f0:42:69:a5:a0:12:a6:b6:13:34:17:
61:be:f7:9b:89:6c:8c:cd:5d:fd:1c:07:4f:f9:c1:43:19:ea:
6e:72:42:59:4e:fb:6c:77:3b:69:dc:52:4d:37:44:13:c4:b1:
62:ee:cd:5a:45:c4:4f:bd:bf:40:6b:70:30:a8:5c:15:c4:bb:
fd:d9:07:07:46:ea:60:eb:14:6c:48:cd:b8:1c:ba:ca:dd:05:
2d:bc:38:1e:4c:ce:72:6c:8f:5d:8d:e6:31:2d:8d:25:57:d4:
68:0e:eb:be:35:1a:18:f0:60:61:1e:f4:ba:2d:ed:ee:23:36:
64:ab:c2:b8:25:a1:e6:5b:64:81:0f:a6:49:a2:d0:f4:fb:98:
e0:fc:5c:b9:1d:d8:1a:4c:b9:fa:74:96:51:d8:3e:c4:83:71:
fb:ef:96:d7:7d:81:1d:82:a9:34:15:25:80:37:ac:7f:6c:40:
25:26:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:55 2026 by rpki-client