Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: IXLyUaQLU7yjl3odrhrLxYNCcvELeln34GTk4viQKuU=
Subject key identifier: 22:70:A3:B4:FB:15:AE:96:6D:58:0D:9C:39:AE:EE:49:96:8B:01:5B
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019EC2C9BDACECB05041065A2751ADA778BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 21:01:01 +0000
Manifest this update: Sat 13 Jun 2026 21:01:01 +0000
Manifest next update: Sun 14 Jun 2026 21:01:01 +0000
Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: 68GJ+UF4mhs7OPrZYKtNmrGACKH72wtIdATdlmdqzoo=)
2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:bd:ac:ec:b0:50:41:06:5a:27:51:ad:a7:78:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jun 13 21:01:01 2026 GMT
Not After : Jun 14 21:01:01 2026 GMT
Subject: CN=2270a3b4fb15ae966d580d9c39aeee49968b015b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:15:93:96:65:2f:d6:13:8d:b4:0a:8a:e2:
c8:bc:bf:ce:6a:a1:6b:17:22:f6:2c:08:8a:68:25:
b5:84:15:ff:3e:63:ce:6e:10:c8:02:35:ce:1a:ef:
a4:f2:f0:e6:a9:67:13:e2:56:a7:5d:38:a5:a5:18:
a4:0e:f5:17:3b:69:25:80:27:77:c3:e6:fa:ec:8a:
a4:b9:94:96:d5:9c:36:b5:8f:69:ec:21:a3:b8:91:
fc:3d:01:e8:1d:40:13:ee:df:d1:3e:12:3e:3d:bc:
a5:8a:12:9a:53:02:7b:67:5e:9d:4f:16:3d:88:b9:
66:97:57:46:4c:80:30:9b:63:5c:00:27:07:94:1f:
9f:59:6a:27:6e:20:a3:6e:84:76:dd:b6:6f:cc:0d:
c1:77:89:0e:d5:05:33:95:cf:26:6d:73:32:c6:3f:
d1:20:ba:cc:b6:3d:fd:59:26:37:d1:fb:30:26:5c:
ec:65:f7:a4:3e:0e:cc:7c:ce:c2:d6:9a:3f:1d:55:
e9:aa:fd:2c:cc:db:ba:5b:59:d6:01:3f:6a:85:cf:
c9:74:ec:73:3c:2a:a2:90:56:84:c1:2a:fe:76:f4:
3b:d3:fa:91:fe:df:e8:ba:e3:d0:bc:a8:59:c5:24:
1e:7e:4d:bd:67:aa:75:ff:01:87:9f:f8:ac:8d:a4:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:A3:B4:FB:15:AE:96:6D:58:0D:9C:39:AE:EE:49:96:8B:01:5B
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:50:86:39:8a:c7:73:ed:a3:43:de:af:7d:0c:02:89:59:
b3:7d:cb:c1:75:ed:56:31:f6:0c:62:22:05:74:c6:d5:b4:c5:
b5:90:5b:14:e5:0e:4c:ed:a0:26:d8:64:c2:44:14:f9:50:b4:
7e:cc:e5:2e:be:9e:30:4b:13:a4:88:8e:10:2c:e4:6a:cc:c3:
ee:89:97:d5:33:2d:40:b9:28:cd:2f:0a:7e:34:b1:3a:cb:06:
35:13:dd:c8:89:85:cb:4a:c7:73:4d:07:dd:d0:6c:56:93:72:
12:8d:a5:5a:8c:6e:fc:17:ef:19:28:c3:28:0b:00:f7:bf:54:
a4:84:1b:a0:05:e1:65:52:14:bf:a9:9f:71:88:c5:5a:2e:d8:
b9:57:b4:da:95:64:f4:8a:d4:04:0b:56:1f:20:f7:5b:90:69:
ae:10:2b:bc:6e:55:8a:8b:04:63:09:19:88:4b:02:e3:db:fe:
9b:bf:14:f7:9d:85:03:48:20:8a:19:5a:92:ba:ec:37:ac:2c:
22:d6:82:e6:a7:2b:05:35:c3:a1:b4:cb:86:71:fc:ff:38:04:
03:dd:8b:1f:b7:c8:e7:5d:b4:72:e2:88:14:00:7c:73:d2:80:
a9:1e:df:43:eb:30:70:61:a6:64:86:b8:d7:ca:84:2a:6b:b6:
0a:ab:a5:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Cyb2s7LBQQQZaJ1Gtp3i9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl
N2Y3NTcwHhcNMjYwNjEzMjEwMTAxWhcNMjYwNjE0MjEwMTAxWjAzMTEwLwYDVQQD
EygyMjcwYTNiNGZiMTVhZTk2NmQ1ODBkOWMzOWFlZWU0OTk2OGIwMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMQVk5ZlL9YTjbQKiuLIvL/OaqFr
FyL2LAiKaCW1hBX/PmPObhDIAjXOGu+k8vDmqWcT4lanXTilpRikDvUXO2klgCd3
w+b67IqkuZSW1Zw2tY9p7CGjuJH8PQHoHUAT7t/RPhI+PbylihKaUwJ7Z16dTxY9
iLlml1dGTIAwm2NcACcHlB+fWWonbiCjboR23bZvzA3Bd4kO1QUzlc8mbXMyxj/R
ILrMtj39WSY30fswJlzsZfekPg7MfM7C1po/HVXpqv0szNu6W1nWAT9qhc/JdOxz
PCqikFaEwSr+dvQ70/qR/t/ouuPQvKhZxSQefk29Z6p1/wGHn/isjaQDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJwo7T7Fa6WbVgNnDmu7kmWiwFbMB8GA1UdIwQY
MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt
MDAzOTVhMzhjMzdkLzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk
LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJlQhjmK
x3Pto0Per30MAolZs33LwXXtVjH2DGIiBXTG1bTFtZBbFOUOTO2gJthkwkQU+VC0
fszlLr6eMEsTpIiOECzkaszD7omX1TMtQLkozS8KfjSxOssGNRPdyImFy0rHc00H
3dBsVpNyEo2lWoxu/BfvGSjDKAsA979UpIQboAXhZVIUv6mfcYjFWi7YuVe02pVk
9IrUBAtWHyD3W5BprhArvG5ViosEYwkZiEsC49v+m78U952FA0ggihlakrrsN6ws
ItaC5qcrBTXDobTLhnH8/zgEA92LH7fI5120cuKIFAB8c9KAqR7fQ+swcGGmZIa4
18qEKmu2Cqul5w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:01 2026 by rpki-client