Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: EVEwJupIA3kqURoC2SrjQFSWRIofoSqKkCTKCCdB+uk=
Subject key identifier: 77:3F:83:FE:99:2F:C9:AD:B6:07:3E:69:F5:47:AC:7B:2A:4F:46:E2
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 01A1231D8005697E1B6CC24CD4140D7E8098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 00:01:38 +0000
Manifest this update: Sat 10 Oct 2026 00:01:38 +0000
Manifest next update: Sun 11 Oct 2026 00:01:38 +0000
Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: FMghedQkUF12lcEb/BOTaTFcvU24mt8o4n0h+wpQ6V0=)
2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:80:05:69:7e:1b:6c:c2:4c:d4:14:0d:7e:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Oct 10 00:01:38 2026 GMT
Not After : Oct 11 00:01:38 2026 GMT
Subject: CN=773f83fe992fc9adb6073e69f547ac7b2a4f46e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:74:cb:f6:51:f4:b6:f4:4a:70:4a:88:9b:
31:a3:c8:5f:a1:63:ef:e2:51:35:fa:6d:e6:cb:49:
ed:75:3b:e4:12:d6:bb:f6:b9:85:c8:71:b4:45:f2:
81:2b:b8:b3:76:b3:e7:19:87:84:f1:fa:e3:23:a5:
55:80:57:93:d4:62:45:ff:7b:b2:42:ee:3f:9b:7d:
06:6b:30:50:ce:12:98:a0:1e:7a:99:a1:1e:d9:29:
f4:65:62:e3:3f:d6:80:17:1a:b5:95:86:70:f6:c8:
a5:cf:e5:5c:d6:b1:ee:be:ed:f6:7c:16:bb:7c:d6:
2d:5c:bb:2d:88:ec:cb:75:a1:ae:50:a1:a6:69:05:
1c:4d:c5:c4:35:46:e5:70:96:30:50:7a:9c:e5:9c:
35:7d:24:5f:72:28:43:1b:e1:73:c3:0c:c7:b2:5e:
1b:fe:ae:19:d1:c0:64:4c:41:aa:72:d7:02:b7:f5:
e4:39:3c:10:08:46:b5:a7:63:91:90:01:54:a8:38:
87:c9:d8:19:79:0b:24:46:55:0d:68:a0:48:d5:c1:
f0:6b:91:f5:b1:4d:9b:05:b9:26:89:3b:f0:bd:89:
94:73:64:72:5e:7e:8d:52:cb:71:39:95:93:05:e3:
43:c5:ad:68:2e:3a:04:04:2b:44:43:88:5b:30:8e:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:83:FE:99:2F:C9:AD:B6:07:3E:69:F5:47:AC:7B:2A:4F:46:E2
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:51:8e:77:ea:e7:03:40:b8:96:0f:b7:12:9b:ec:b8:10:
e9:9d:41:2a:26:6b:af:76:be:aa:8a:73:b8:a0:fa:6d:f0:20:
09:8d:c2:72:ac:a8:a9:6a:98:84:84:6d:8f:84:48:03:f1:03:
da:af:54:b6:08:d7:1a:20:51:8f:4c:12:ba:b3:08:e6:a1:91:
7c:5f:49:09:33:61:d9:32:ca:62:de:f0:f6:e0:ab:4c:47:2f:
cc:79:92:08:23:3c:7a:2c:37:c3:35:e2:9c:3d:58:f0:51:28:
94:cd:2d:75:3a:9e:72:9a:62:55:b5:11:fb:ac:bd:23:58:83:
4f:dc:4e:19:21:05:44:27:37:90:64:b8:b8:f0:16:31:8d:d3:
ab:c6:5b:df:b0:8c:9b:e6:c0:b9:b7:4f:21:23:4b:f3:99:b8:
c0:6e:32:96:ae:71:dc:de:48:d6:03:96:e7:e0:5a:47:49:66:
3f:e9:45:ee:bb:78:db:99:fa:21:28:5f:b7:5f:e9:3e:a0:96:
e4:08:0f:97:a7:55:05:a4:ec:89:27:98:28:b1:5e:f6:7f:1a:
d0:4d:48:3d:92:83:1c:f7:0a:af:45:e1:2d:c0:23:1c:b9:f9:
11:db:6a:28:ee:27:52:9c:7e:6e:e7:d2:3f:ed:7a:e2:b1:10:
06:57:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:29:21 2026 by rpki-client