Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: In3LyW/BBF0eM1No+IJ58h2AdOLYhvVVDI2IDXwvxL4=
Subject key identifier: A5:94:81:98:83:06:C8:42:0B:06:DB:03:1B:35:51:1B:FF:FD:56:44
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019CAA583CA797AF60FCB494991D96F14765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: /8EYpf7zZ0NcWHBxovy6+uRnRe8q9mRiJfmWJ5yiLWM=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3c:a7:97:af:60:fc:b4:94:99:1d:96:f1:47:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=a59481988306c8420b06db031b35511bfffd5644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:88:dd:fb:29:22:24:24:02:70:a0:45:2b:
be:1e:0e:0b:2e:80:a6:2d:6b:1c:db:56:35:7e:cf:
b4:e9:a8:e8:fb:4b:32:1a:e4:3c:40:4b:5a:16:71:
f9:07:f6:99:ff:83:75:8c:e4:ee:93:14:0d:a8:60:
37:84:cf:5a:14:7e:d3:c6:eb:7a:af:4d:58:9c:fb:
75:eb:14:45:a3:24:c8:a2:f4:27:8c:f0:63:f3:65:
51:bd:3d:c4:95:4c:d6:1c:f7:fd:95:62:25:30:61:
a9:cd:6a:fa:85:14:c4:6c:81:18:43:12:c7:1d:08:
e6:01:35:76:b3:c5:09:41:73:0f:05:cd:95:56:e3:
15:ef:da:6b:1b:df:08:05:5d:0d:a6:f2:54:e9:80:
a7:7d:a9:54:3e:97:61:76:37:d5:09:15:ac:87:5a:
81:5a:4a:8b:f4:69:c0:3d:73:8d:ee:6b:71:eb:f5:
b0:0b:e9:26:eb:4d:3b:32:9a:6a:bc:63:90:f2:f3:
db:12:5c:ab:d9:6a:c9:74:92:61:4b:5b:fb:d3:cd:
ab:f6:6a:76:7d:5b:b3:ec:93:b6:61:f0:f0:4e:36:
b5:2d:68:d3:c2:10:d0:38:5b:fb:bb:c1:77:d5:db:
f6:ca:83:9c:1d:31:87:ca:eb:0f:ff:42:c2:ac:4f:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:81:98:83:06:C8:42:0B:06:DB:03:1B:35:51:1B:FF:FD:56:44
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:16:42:4c:1f:84:cc:5f:47:d8:09:b2:61:ab:53:f4:8d:
34:39:0f:54:d5:76:28:d5:72:b4:4f:be:9e:49:40:48:51:04:
02:b7:82:bf:c8:be:fe:96:e1:a2:11:1d:b3:52:f9:28:64:97:
61:08:e7:18:88:5f:59:a4:01:34:a6:aa:81:40:30:92:6e:8b:
2b:d7:82:ef:eb:24:a4:02:d3:7a:d1:96:4e:fd:30:fb:9a:4d:
7e:95:3d:a6:86:56:9d:8e:28:ae:d9:e0:5c:b7:41:34:b3:d4:
e0:66:fa:89:e3:e6:5b:b0:b7:ab:c0:25:5d:46:38:f4:ed:bc:
31:12:a5:fa:dc:26:34:b5:96:e8:f9:7d:e9:14:3e:f1:d3:68:
bc:d6:d0:ee:e4:bb:72:ee:4d:a3:ae:67:6a:7e:e3:04:3f:18:
47:cd:a9:83:11:9a:d8:5f:99:cc:a7:8c:0a:fc:f1:c1:48:1f:
19:03:aa:0e:fa:67:75:53:7d:b9:a8:e1:6e:b5:b5:54:fe:8c:
33:5e:c1:ab:05:37:80:63:95:cf:5f:31:08:97:26:91:ab:a4:
a8:1c:07:dc:15:b8:54:21:f9:89:e8:b1:6d:e0:00:e3:93:e8:
7f:73:7b:09:3d:e3:05:38:90:6c:5c:5e:08:f4:f8:cc:e3:7a:
0b:20:e4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWDynl69g/LSUmR2W8UdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz
MTE1OWMwHhcNMjYwMzAxMTcwMDM1WhcNMjYwMzAyMTcwMDM1WjAzMTEwLwYDVQQD
EyhhNTk0ODE5ODgzMDZjODQyMGIwNmRiMDMxYjM1NTExYmZmZmQ1NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte2I3fspIiQkAnCgRSu+Hg4LLoCm
LWsc21Y1fs+06ajo+0syGuQ8QEtaFnH5B/aZ/4N1jOTukxQNqGA3hM9aFH7Txut6
r01YnPt16xRFoyTIovQnjPBj82VRvT3ElUzWHPf9lWIlMGGpzWr6hRTEbIEYQxLH
HQjmATV2s8UJQXMPBc2VVuMV79prG98IBV0NpvJU6YCnfalUPpdhdjfVCRWsh1qB
WkqL9GnAPXON7mtx6/WwC+km6007MppqvGOQ8vPbElyr2WrJdJJhS1v7082r9mp2
fVuz7JO2YfDwTja1LWjTwhDQOFv7u8F31dv2yoOcHTGHyusP/0LCrE/P7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWUgZiDBshCCwbbAxs1URv//VZEMB8GA1UdIwQY
MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt
NjlkODA5MmI1NGUxLzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx
LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDsWQkwf
hMxfR9gJsmGrU/SNNDkPVNV2KNVytE++nklASFEEAreCv8i+/pbhohEds1L5KGSX
YQjnGIhfWaQBNKaqgUAwkm6LK9eC7+skpALTetGWTv0w+5pNfpU9poZWnY4ortng
XLdBNLPU4Gb6iePmW7C3q8AlXUY49O28MRKl+twmNLWW6Pl96RQ+8dNovNbQ7uS7
cu5No65nan7jBD8YR82pgxGa2F+ZzKeMCvzxwUgfGQOqDvpndVN9uajhbrW1VP6M
M17BqwU3gGOVz18xCJcmkaukqBwH3BW4VCH5ieixbeAA45Pof3N7CT3jBTiQbFxe
CPT4zON6CyDk9g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:05 2026 by rpki-client