Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: 6kNwkTxkVWOzHXBJg2K3+FTSEHuhFmPey5Num9p9Ots=
Subject key identifier: 2C:21:19:D2:E2:9A:B6:50:CF:66:35:C6:6E:4B:5A:E7:2E:03:EA:F0
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019FACE3DCEB6B3FA5ED6B6A4546C79B2E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 08:00:42 +0000
Manifest this update: Wed 29 Jul 2026 08:00:42 +0000
Manifest next update: Thu 30 Jul 2026 08:00:42 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: W2CEbeEMAl5sB8KKP5fGMaeDfRJ6ITbcHXL3ieeBCHo=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:dc:eb:6b:3f:a5:ed:6b:6a:45:46:c7:9b:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jul 29 08:00:42 2026 GMT
Not After : Jul 30 08:00:42 2026 GMT
Subject: CN=2c2119d2e29ab650cf6635c66e4b5ae72e03eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:9b:3f:cf:59:7c:f5:a0:83:fc:45:72:6b:
83:1a:12:02:d0:61:b6:bd:62:e2:e7:ed:02:1e:f6:
aa:17:7d:33:5e:58:04:f0:4a:4f:5b:52:84:4c:80:
fd:81:d0:65:d7:40:ca:56:be:c0:be:09:23:57:1f:
51:f6:dc:a9:15:98:fa:85:34:88:e4:d2:85:b9:d1:
dd:e7:7c:55:49:9a:30:70:9a:36:d1:7f:ac:a3:4e:
a8:80:6e:f6:c3:fd:15:f9:9f:29:f4:cf:a1:db:2f:
30:76:90:7a:ca:49:54:8d:30:c1:35:d4:39:c5:55:
e7:d6:1d:18:bd:e7:72:e5:cc:10:af:38:3e:be:11:
b7:da:26:b0:f3:5f:89:5f:39:29:2c:9d:05:09:69:
7e:cb:bf:fc:fc:1e:2c:e0:27:6c:9a:a9:c0:22:22:
bf:b1:df:13:00:4a:f8:5e:cb:32:e7:2c:97:34:0a:
4d:f5:85:62:5c:e1:6c:f2:9f:32:d0:e4:c6:fc:b4:
88:1e:fc:08:2a:bb:4b:0c:05:1e:ae:3d:e6:9c:19:
60:db:0b:28:97:7f:51:67:43:92:49:82:76:c4:6d:
20:81:ea:28:6f:c5:20:2a:55:f4:13:e9:c7:1b:cc:
4c:62:52:7d:34:2f:01:0b:6f:2b:d0:92:14:68:14:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:19:D2:E2:9A:B6:50:CF:66:35:C6:6E:4B:5A:E7:2E:03:EA:F0
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:b3:94:78:6d:96:b2:8d:d0:89:f4:83:73:6f:d0:01:24:
e9:72:a7:38:3c:16:ee:40:fe:53:fa:4d:19:84:b5:11:24:78:
cc:75:88:20:09:e0:13:ab:c4:f8:dd:84:2d:a1:0d:23:0f:2a:
e4:c0:77:4c:5d:d7:3b:a8:1f:30:46:c2:07:1a:aa:fd:44:a6:
7b:cf:8f:88:a8:17:3c:f0:55:ba:d9:d0:1e:5f:1d:57:10:fb:
ea:3a:8a:3f:49:7a:26:a9:bd:d9:f8:94:18:0e:e4:4e:8c:ef:
93:1f:62:7e:c7:c3:03:24:f7:a3:d1:48:72:1f:d5:12:98:81:
2d:e8:3a:47:98:79:ef:13:5b:01:63:de:d1:88:e8:42:36:69:
3c:5c:5c:d6:0e:db:ad:86:dc:54:50:67:81:8e:ce:9f:93:24:
bc:c9:60:ba:5c:89:a4:ec:fa:55:b5:99:87:8a:ef:c3:f3:d7:
c6:7c:69:98:36:df:9f:72:d9:ec:26:ea:73:cd:66:7e:04:99:
d1:ef:a7:a0:bc:84:5f:ac:d0:fa:29:85:63:92:22:27:05:70:
e6:91:28:c6:84:86:96:81:a8:46:1d:d0:5b:88:3c:7f:a9:28:
bd:c5:68:7c:1b:7b:bb:c1:eb:a9:87:50:db:73:ef:fa:e0:59:
fc:14:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:34:00 2026 by rpki-client