Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: 4Bn7ne1Y2ppGO4RXRH/XJ1T5ftNhT7RQltKkl9U7lAk=
Subject key identifier: 11:C7:09:D3:F1:AC:32:08:F6:8B:2B:EB:8A:9B:BF:30:CC:87:AC:44
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019D2960C8012111F68644E4B200A8B0F37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 4E
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: 7uOKKFf0OuMc+3ZDj3iQqaNfDaplfPLYtxntke49lZs=)
2: ykfKyRWK4Nt7IcA6CfQGrBnxmKM.roa (hash: fHbnOtC4WbqvqsULvp2mzQmtMQ4JYI3nqV/Rvum872Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c8:01:21:11:f6:86:44:e4:b2:00:a8:b0:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=11c709d3f1ac3208f68b2beb8a9bbf30cc87ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:94:e7:7e:6e:60:3e:6c:a9:5d:d6:c7:fd:
3e:37:e4:db:ba:44:af:65:a0:ac:88:05:83:78:d1:
f8:6a:15:4b:62:42:ef:0e:25:e8:05:1f:55:88:51:
ea:a0:c9:58:51:49:9d:b3:ea:59:cb:43:31:1f:f1:
b9:65:2c:35:22:10:8f:11:df:85:5e:fb:bd:e3:19:
51:37:74:98:39:37:1f:3b:d9:de:cf:dc:f3:96:37:
60:60:f2:32:74:ca:6d:fa:06:ef:9b:02:1f:c3:87:
e5:08:46:44:08:fa:8b:e6:7b:5c:8a:e6:a2:02:bd:
df:fe:e5:6e:f1:0b:e0:d6:fd:9a:d4:dd:3b:d7:d6:
55:c6:85:fc:fa:3b:8c:7a:07:55:78:95:21:43:79:
f2:15:6d:06:4c:ea:7e:df:c0:06:2f:87:9e:fb:df:
7c:e6:0e:7c:b9:06:d0:a5:c7:4d:f0:d9:3c:17:50:
e5:46:c6:76:fb:09:0b:71:49:17:d5:da:2b:e7:7e:
02:90:4b:6b:89:b3:f1:70:be:83:9c:17:ed:b9:8d:
5d:0c:a7:58:d8:2b:19:43:ff:5d:e4:ac:4f:e0:39:
e3:d4:da:5d:b2:f6:0f:2a:d4:23:34:08:65:90:ac:
b6:86:ce:14:02:44:af:04:a3:00:f7:0c:4b:44:fa:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:09:D3:F1:AC:32:08:F6:8B:2B:EB:8A:9B:BF:30:CC:87:AC:44
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b2:75:df:f2:c1:e9:cf:73:44:c4:46:c4:4c:41:07:28:81:
5a:94:a0:f2:50:ae:79:1e:b6:a7:50:ef:b0:e0:5e:83:d1:90:
1d:68:5d:22:7d:5e:2e:f9:d8:3b:06:f6:8d:3f:e6:da:66:d7:
c5:7a:20:cf:b8:ba:d8:54:73:81:1a:92:c5:43:43:3a:59:9c:
3d:bc:ac:cc:44:0f:3f:04:01:27:76:9e:15:9c:e6:02:04:55:
9c:ae:a7:9b:1d:6d:d3:e9:f2:ff:a2:d4:3c:e7:8c:d4:98:2b:
c4:91:e6:d2:c1:3f:7a:c7:42:d6:f9:c0:7e:41:04:2f:5e:6a:
ff:3f:a1:5b:2b:86:8a:90:d7:3c:e2:ae:46:31:2a:e0:b0:7e:
26:ea:94:04:76:2d:7b:37:50:8d:93:86:44:58:8c:3d:fc:9a:
29:9e:67:01:28:ae:c4:11:8f:3f:d9:12:6c:86:b4:f8:3c:bb:
8c:66:6d:d8:0c:84:06:9d:ec:9c:ac:47:49:b9:ef:0b:59:b6:
0e:bb:02:dd:51:ac:e4:39:6c:dd:a4:ba:f5:4c:5b:3b:e4:f5:
ca:90:48:79:73:fa:4a:c5:06:33:6b:e8:33:32:98:64:44:00:
02:dc:60:62:00:45:a6:a7:06:a6:b5:d0:b2:8a:1b:52:cf:c4:
d2:dd:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:25 2026 by rpki-client