Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: wy5XhF3cNgi56AJLCrJCr7VOc9fWbP+C/q8aeRG7Gf0=
Subject key identifier: 7C:18:E1:B6:BD:47:38:AC:B7:58:F7:35:13:AA:1B:88:78:37:9E:38
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019E1D90258470F3CAD09DB6BBCB7B0DD7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: CD
Signing time: Tue 12 May 2026 19:00:46 +0000
Manifest this update: Tue 12 May 2026 19:00:46 +0000
Manifest next update: Wed 13 May 2026 19:00:46 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: 4PIvHt2VpDpmwMo5YsX0/+SS9LF8SocuzmI0tEFQrdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:25:84:70:f3:ca:d0:9d:b6:bb:cb:7b:0d:d7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: May 12 19:00:46 2026 GMT
Not After : May 13 19:00:46 2026 GMT
Subject: CN=7c18e1b6bd4738acb758f73513aa1b8878379e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:95:b7:c5:88:3b:a9:b1:32:ef:be:e2:e2:
a9:f9:5c:e7:36:86:94:ae:46:43:3b:35:b5:4e:0b:
66:f2:1d:55:c6:b1:d8:76:d1:91:3b:db:05:b9:7b:
5d:f7:39:63:9e:fd:17:6c:3c:35:08:3a:98:1c:c3:
c8:ee:61:49:00:96:ae:34:cc:ae:51:3c:b9:31:ab:
9f:9a:b3:ed:d0:fd:71:5b:cc:ea:9a:51:39:2d:53:
f6:fb:09:20:37:e6:cb:80:f1:d2:6d:53:54:3f:2d:
d1:05:fe:51:d5:da:49:27:8c:99:3a:1a:a7:4d:9a:
31:c9:dd:61:12:25:7d:a4:39:a5:80:5c:af:d7:f4:
dd:f2:ef:32:77:ea:60:0d:a1:fd:d4:19:92:d4:fd:
21:93:da:4b:88:fc:00:b2:42:25:52:f0:df:5c:f5:
80:a5:77:0f:c0:4d:be:6b:74:79:07:dd:60:1a:82:
74:20:07:7f:72:89:38:96:0c:5e:51:6d:ca:be:23:
aa:bd:ee:c6:f7:47:be:bc:89:3d:16:2c:d8:c4:8a:
5a:01:72:65:75:73:0e:82:17:d0:29:b4:9a:b9:1b:
40:54:63:79:fd:d4:d9:85:82:c6:b6:36:a6:8b:84:
ef:e0:5d:94:79:46:46:76:db:8b:0c:82:c0:54:bd:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:E1:B6:BD:47:38:AC:B7:58:F7:35:13:AA:1B:88:78:37:9E:38
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:68:79:80:40:6a:61:bf:b2:75:f5:1f:2c:f1:da:45:bf:
06:0a:29:80:47:f1:55:e5:72:12:86:b0:33:a8:8c:76:f3:c3:
3f:03:f5:56:2d:38:2e:bb:36:8f:91:1d:07:76:bd:69:0a:7e:
a5:7b:69:bd:3d:ab:ea:19:5e:94:0f:b1:4e:45:ef:d5:31:6f:
ce:91:40:ab:56:d7:74:1e:4c:f8:8c:44:e4:d1:53:01:9a:26:
cd:a5:d5:39:16:c2:73:26:32:10:00:3c:7d:72:e5:2a:31:f3:
c0:f0:f8:17:1d:3e:01:ef:89:0e:bb:5b:2e:26:92:0b:55:da:
16:33:23:37:b7:94:42:94:0a:97:98:f8:33:f1:45:59:9a:6a:
13:df:de:e4:6e:a2:c1:e1:2c:31:9a:62:91:b6:23:ad:de:60:
9e:64:ce:46:a8:8b:25:dd:a4:36:79:6a:12:ab:e7:da:14:72:
53:ea:eb:e7:3b:5f:32:34:4b:c1:2c:49:ce:10:8b:89:e1:81:
29:fd:12:55:31:97:81:25:b9:23:7b:8a:c6:3c:b3:ea:03:3c:
90:95:b0:1b:ba:48:55:53:f0:8c:9b:7b:6f:2a:b6:da:96:9b:
ed:b3:f0:2c:94:5a:33:95:97:05:54:7d:d2:f4:14:2a:08:a7:
a2:f6:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:42 2026 by rpki-client