Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: +G0Ki7yPob1pZeVxzDdBMWQUs13AvXIEW8Gtc6HpQxE=
Subject key identifier: B7:D5:C0:72:D0:E1:18:30:1C:C2:6C:71:8A:4A:4D:24:4F:A6:9A:E1
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019D99D0365E0EBADDD9F49F666502E57F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:00:52 +0000
Manifest this update: Fri 17 Apr 2026 05:00:52 +0000
Manifest next update: Sat 18 Apr 2026 05:00:52 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: fBcz+O/jVJ2Hhxa4ilfmDUxq2pQXrq1ToiB3doYknS0=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:36:5e:0e:ba:dd:d9:f4:9f:66:65:02:e5:7f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Apr 17 05:00:52 2026 GMT
Not After : Apr 18 05:00:52 2026 GMT
Subject: CN=b7d5c072d0e118301cc26c718a4a4d244fa69ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:c6:21:da:65:f4:25:5a:ec:b4:d0:df:42:
cf:b0:db:01:5f:38:5a:fc:ed:46:8d:65:86:f4:2d:
d4:01:00:54:30:58:f1:85:2e:ce:69:33:3b:5f:1a:
5c:7a:bc:6d:41:31:42:ed:7d:5b:aa:dd:46:64:61:
6a:80:af:9c:ad:b2:10:cb:5d:34:38:54:98:15:ef:
9a:e6:5d:86:de:a4:88:e0:72:89:fa:fc:fa:82:1a:
27:5e:d3:b9:41:0e:6f:58:f9:81:74:5c:88:62:bb:
db:b0:63:a2:c7:67:93:39:ef:56:5a:34:cf:ac:31:
a1:d1:8e:58:3b:f2:3c:37:ba:28:6b:87:ff:62:ad:
f4:a7:44:c3:6e:d1:8b:fa:5c:9f:91:ef:5c:4e:65:
7c:ad:78:04:a1:c2:d8:06:b2:85:0c:d7:ab:17:50:
b9:dd:13:1c:ff:2f:85:7a:bd:4b:ad:e1:d3:eb:62:
53:74:d1:cc:32:2d:58:0c:07:a2:16:f3:69:bb:0e:
51:f8:5c:15:be:91:56:cc:00:30:ae:4a:3c:9d:c2:
d6:35:25:ab:b9:3b:9c:77:fd:c3:b4:86:0e:fa:28:
2b:47:7d:f6:46:09:a8:79:0b:14:85:cf:98:80:b2:
a6:28:99:55:98:39:35:47:94:67:5b:0e:fe:af:3f:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D5:C0:72:D0:E1:18:30:1C:C2:6C:71:8A:4A:4D:24:4F:A6:9A:E1
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:00:97:1e:c8:02:f3:77:38:f7:10:cf:10:5e:65:1a:44:
81:6b:c8:c4:4f:b6:a6:8c:a4:88:3e:ad:cd:86:a4:45:87:63:
e2:86:b6:7f:71:38:b3:68:df:0c:95:45:83:17:29:a0:b9:8a:
6a:8a:f0:c4:99:b1:29:2d:73:72:b3:ae:15:4b:33:4c:c1:f1:
84:a1:42:28:c2:e0:ee:c3:4d:c9:71:0a:5e:0f:1b:89:ae:2b:
17:93:1b:7d:ae:c8:27:d7:3d:5d:48:75:58:91:8d:94:11:67:
f5:61:88:86:e1:0f:b5:d7:f5:6c:f5:09:13:53:71:7d:43:9a:
8b:09:66:ee:6b:81:81:3f:fb:0b:e8:a4:e4:2e:ff:10:29:70:
d0:17:28:03:64:bc:ee:87:1d:b9:cc:4a:9a:fe:4a:70:c1:f0:
e6:b2:12:5e:85:7b:d8:ad:7a:71:f7:bd:0f:8b:69:74:b5:12:
56:23:d8:e1:0f:15:c8:0c:c0:41:8f:b8:71:95:e9:d0:e3:a4:
a5:eb:86:6d:c9:bc:ca:13:00:28:4e:d3:8a:ae:37:33:74:88:
76:55:59:b2:d0:d1:c5:ce:9e:d0:86:1d:83:d4:2e:06:84:d5:
93:5e:43:5b:f8:9c:e9:96:38:5e:46:42:10:e9:d3:b7:27:c0:
b6:e3:bd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:01 2026 by rpki-client