Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.mft (raw, json)
Hash identifier: O/Q4MG6V1PdOMytV/OmPJCAoi2GiTa1s22yaCxC8TPw=
Subject key identifier: D2:27:72:42:0A:B4:9D:3E:0B:11:54:DC:50:27:F4:DD:13:1F:A8:9C
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 01A0E1747F9EA5E1DAA90174F1B7AEA34296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
Manifest number: 023C
Signing time: Sun 27 Sep 2026 06:01:43 +0000
Manifest this update: Sun 27 Sep 2026 06:01:43 +0000
Manifest next update: Mon 28 Sep 2026 06:01:43 +0000
Files and hashes: 1: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (hash: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=)
2: ZNn7Pyyv7VlOBore3HipfIgpwQE.crl (hash: deSIMdlUozkZn0V7WfrRTcUegX99Dg3tH160RZ4/yaA=)
3: cimLTdgD8ukTyEy4eFNyf55PNR4.roa (hash: jbd+LyuvW0274DhC8DibiCTn8R1aB5kxj9ISDh8MMC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:7f:9e:a5:e1:da:a9:01:74:f1:b7:ae:a3:42:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Sep 27 06:01:43 2026 GMT
Not After : Sep 28 06:01:43 2026 GMT
Subject: CN=d22772420ab49d3e0b1154dc5027f4dd131fa89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:73:03:21:82:92:de:95:28:05:30:7d:60:
0c:30:c1:b5:8c:13:35:89:be:95:c1:b1:e1:37:81:
6f:b7:8b:d6:d5:08:8c:40:d4:0d:20:d2:28:90:3b:
3b:48:20:8a:fc:2f:59:41:97:bc:d5:f5:c0:56:da:
23:f8:f6:fe:11:fc:86:02:5f:d5:c9:50:26:7c:e7:
63:72:c6:f7:9e:ad:da:b8:44:18:fe:48:4b:a2:b5:
94:4e:83:e3:40:48:3a:73:23:5d:12:e5:db:88:52:
a4:e1:98:55:cf:7e:b1:af:60:4c:45:f3:21:c6:44:
7e:ad:e2:3f:7e:9f:29:26:6e:da:85:60:4d:b1:b6:
78:41:15:f7:46:a6:5f:c2:45:42:3c:38:53:35:a2:
ff:a1:81:10:c2:87:93:db:a6:6f:d6:70:f0:c8:6a:
e1:f0:56:03:a9:bb:4c:bf:ff:0b:17:3e:c3:5d:a8:
75:3a:ed:c6:ce:87:cf:04:fd:63:60:5e:02:6f:ee:
75:03:c9:77:6d:a2:a9:7c:f8:a8:a6:14:61:0b:50:
14:f4:99:53:36:f6:52:8c:58:1a:82:57:cb:f3:aa:
32:b6:fe:34:7e:e5:b5:a0:ee:0e:7f:8a:c5:41:74:
76:a9:46:f1:58:34:fc:a2:9c:7b:f1:fe:5c:9a:5b:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:72:42:0A:B4:9D:3E:0B:11:54:DC:50:27:F4:DD:13:1F:A8:9C
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1f:db:5b:7f:8d:ff:18:97:71:6e:53:db:71:a3:e9:ae:ab:
54:0b:76:d9:1d:a4:d6:bd:09:fa:83:4c:29:f2:12:67:35:59:
64:81:02:28:c4:dc:f2:24:3f:87:77:3c:1d:eb:44:a9:3d:0f:
b6:18:9d:fb:56:8c:2b:01:9e:7c:71:d2:44:49:85:62:51:1f:
18:8c:d4:05:0d:4e:a8:37:42:42:ad:d8:a5:dd:cd:62:32:a9:
bb:4a:f3:9a:da:72:67:e4:3e:23:17:10:75:05:58:49:f1:17:
6a:18:04:bf:c7:5d:cb:e5:23:09:ea:4b:40:e6:9b:3b:26:80:
bd:0c:c6:31:99:72:7f:cd:b0:ec:aa:23:b1:fc:fa:6c:64:a2:
21:f3:b2:a5:2c:f1:22:a1:54:20:96:e8:82:3f:2e:ab:60:d3:
3c:3e:97:0e:35:4d:73:12:86:84:09:78:00:9b:d1:f3:d7:a3:
3f:ba:f6:4a:40:96:2d:a7:08:5b:c4:6d:7d:23:48:98:ac:b9:
37:b3:c2:81:6d:4f:ac:01:24:90:b0:00:15:e8:85:34:96:7b:
77:ba:47:2e:8d:47:7c:99:66:39:4d:02:64:6d:91:83:0e:5d:
21:07:b9:92:24:c9:81:94:f8:92:67:e9:1b:f2:ee:c7:f6:9b:
7c:4f:41:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdH+epeHaqQF08beuo0KWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDlmYjNmMmNhZmVkNTk0ZTA2OGFkZWRjNzhhOTdjODgy
OWMxMDEwHhcNMjYwOTI3MDYwMTQzWhcNMjYwOTI4MDYwMTQzWjAzMTEwLwYDVQQD
EyhkMjI3NzI0MjBhYjQ5ZDNlMGIxMTU0ZGM1MDI3ZjRkZDEzMWZhODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0hzAyGCkt6VKAUwfWAMMMG1jBM1
ib6VwbHhN4Fvt4vW1QiMQNQNINIokDs7SCCK/C9ZQZe81fXAVtoj+Pb+EfyGAl/V
yVAmfOdjcsb3nq3auEQY/khLorWUToPjQEg6cyNdEuXbiFKk4ZhVz36xr2BMRfMh
xkR+reI/fp8pJm7ahWBNsbZ4QRX3RqZfwkVCPDhTNaL/oYEQwoeT26Zv1nDwyGrh
8FYDqbtMv/8LFz7DXah1Ou3GzofPBP1jYF4Cb+51A8l3baKpfPiophRhC1AU9JlT
NvZSjFgaglfL86oytv40fuW1oO4Of4rFQXR2qUbxWDT8opx78f5cmlu3vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNInckIKtJ0+CxFU3FAn9N0TH6icMB8GA1UdIwQY
MBaAFGTZ+z8sr+1ZTgaK3tx4qXyIKcEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5uN1B5eXY3VmxPQm9yZTNIaXBmSWdwd1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85OWExZGEtMjBkYS00YTY4LWIzMjYt
MjYxN2EwZWNiYzE0LzEvWk5uN1B5eXY3VmxPQm9yZTNIaXBmSWdwd1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85OWExZGEtMjBkYS00YTY4LWIzMjYtMjYxN2EwZWNiYzE0
LzEvWk5uN1B5eXY3VmxPQm9yZTNIaXBmSWdwd1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxB/bW3+N
/xiXcW5T23Gj6a6rVAt22R2k1r0J+oNMKfISZzVZZIECKMTc8iQ/h3c8HetEqT0P
thid+1aMKwGefHHSREmFYlEfGIzUBQ1OqDdCQq3Ypd3NYjKpu0rzmtpyZ+Q+IxcQ
dQVYSfEXahgEv8ddy+UjCepLQOabOyaAvQzGMZlyf82w7Kojsfz6bGSiIfOypSzx
IqFUIJbogj8uq2DTPD6XDjVNcxKGhAl4AJvR89ejP7r2SkCWLacIW8RtfSNImKy5
N7PCgW1PrAEkkLAAFeiFNJZ7d7pHLo1HfJlmOU0CZG2Rgw5dIQe5kiTJgZT4kmfp
G/Lux/abfE9Byg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:04 2026 by rpki-client