Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: 4pI5JDudTAJoy+syDsit4JVVCUxM9s5FdH0F1f71ePk=
Subject key identifier: FF:4A:91:16:E6:51:EE:27:2B:2D:BB:D3:E9:BF:2F:F8:C1:83:D9:B1
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019EC1495FCA18C577A52A8C57450B8A09D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 14:01:11 +0000
Manifest this update: Sat 13 Jun 2026 14:01:11 +0000
Manifest next update: Sun 14 Jun 2026 14:01:11 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: +qhlB4y1JL7ebMba23Iv6DOrV8MTkT5QcsT1cH5Bp6Y=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:5f:ca:18:c5:77:a5:2a:8c:57:45:0b:8a:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jun 13 14:01:11 2026 GMT
Not After : Jun 14 14:01:11 2026 GMT
Subject: CN=ff4a9116e651ee272b2dbbd3e9bf2ff8c183d9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:a9:87:6d:86:f5:19:22:4d:91:ec:ef:c1:
1c:65:1c:76:f5:ca:7e:50:a5:75:cd:58:2c:9b:5e:
48:34:f3:21:17:c8:0e:a9:79:53:bb:72:c2:70:8c:
96:4a:73:d8:d2:41:98:98:f9:8b:0e:31:34:13:50:
c9:f7:80:83:b7:b5:d1:09:b1:c4:b3:1b:4b:5b:51:
58:cd:33:2e:a9:95:40:df:0d:7d:7d:3b:db:2b:cb:
5a:8b:b9:81:1b:51:6b:4c:a7:5c:77:6f:69:cf:71:
6a:4b:18:18:50:8f:54:3e:de:99:ae:bb:5d:ff:05:
e0:07:ae:fa:93:58:7d:f1:d0:ad:3f:f3:51:da:02:
2b:73:29:8f:18:15:cd:d6:a4:ce:ad:62:07:93:33:
30:a1:86:77:c2:d1:c6:25:a3:c6:65:0a:10:4a:b9:
f6:d1:13:c3:ff:46:ea:d8:7a:84:58:14:50:a6:08:
35:2a:48:db:76:9d:f2:29:74:2c:01:b0:0c:9c:d9:
a8:8d:9f:46:d1:7c:93:25:05:78:f2:08:09:b6:07:
88:b7:6e:53:90:ef:ba:a6:ac:e0:4e:3d:61:1c:90:
56:da:5a:d9:32:8e:7b:49:34:b2:92:26:4e:b1:07:
86:ed:cb:3b:e0:d0:10:b1:ee:3d:ed:88:62:a3:7e:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4A:91:16:E6:51:EE:27:2B:2D:BB:D3:E9:BF:2F:F8:C1:83:D9:B1
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6e:3a:b4:4c:b0:27:86:4e:d4:8a:1a:1c:2d:38:01:48:c7:
13:37:e7:e0:1d:0e:59:65:e7:bc:db:ae:07:be:f3:4a:a3:76:
ef:ca:93:35:1a:fa:d2:d8:3c:35:74:35:b0:0b:5c:40:f0:63:
83:e8:97:d0:70:20:92:a3:73:d8:a8:ab:96:a9:c5:3f:9b:80:
56:52:cf:5c:e0:27:e5:ed:b5:d9:12:6c:7b:d3:d6:89:76:60:
b1:0b:92:b8:3a:43:d2:49:cc:cf:66:d9:ad:46:8c:6e:00:51:
67:24:6f:cd:ea:0b:3f:97:d7:bb:f7:08:3e:2f:c2:5f:4a:95:
ea:be:53:3f:a7:f3:59:02:23:35:f7:a2:10:4c:65:42:02:84:
dd:85:14:46:7d:0b:9c:23:08:a4:93:41:1b:89:e3:c8:07:35:
a0:9f:c3:c7:60:a8:cb:34:df:44:6e:7f:4f:83:72:fc:9c:52:
e6:88:ea:d4:a8:17:78:33:9c:31:2c:7d:93:a6:8d:79:a3:49:
97:87:72:35:46:d7:a9:74:bf:0c:49:cc:c0:73:8d:e7:de:0b:
ad:37:50:6d:b5:cf:77:4f:da:97:85:dd:0e:a5:fe:7c:bd:d4:
78:90:ed:d3:2b:33:8e:ef:f8:f1:5b:da:17:3e:80:29:76:d0:
9b:be:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:44 2026 by rpki-client