Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: aYA36OSPCNJGrAjHui+Bc/LDj6yiOtqj86rRO894i70=
Subject key identifier: 44:68:C6:3E:9D:F4:3A:62:EE:E1:5C:77:F3:3C:88:D3:D3:83:F9:B1
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 01A0D080268CADF8BEE02050497AFDA6C5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 23:00:54 +0000
Manifest this update: Wed 23 Sep 2026 23:00:54 +0000
Manifest next update: Thu 24 Sep 2026 23:00:54 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: rxl5LEfFNz2IJDlimL9F4CpVc4EeKGo5+80yP5Uqfns=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:26:8c:ad:f8:be:e0:20:50:49:7a:fd:a6:c5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Sep 23 23:00:54 2026 GMT
Not After : Sep 24 23:00:54 2026 GMT
Subject: CN=4468c63e9df43a62eee15c77f33c88d3d383f9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:0e:ae:fe:86:30:f5:f3:8f:86:79:e8:76:
b8:b2:7b:41:0e:25:26:19:2a:c3:06:38:86:25:60:
4d:43:12:e8:f4:bc:92:a5:ff:6e:d2:27:ea:85:d9:
32:50:31:ee:3b:28:8a:00:56:e1:55:3f:4e:c4:76:
8a:19:62:c5:c7:e2:7f:fe:16:91:49:94:0e:7d:20:
e8:37:c3:f1:10:e4:a7:ab:ab:ea:f7:2d:e6:9a:14:
42:ba:36:32:77:6d:94:9c:d6:50:76:b8:77:d2:60:
d9:d4:60:62:aa:9f:96:98:c3:00:0b:85:b8:c3:98:
ad:8a:08:19:52:a5:01:47:c4:1d:b3:cf:56:ab:95:
34:89:1c:e4:45:a5:46:eb:c4:a7:2c:bb:9c:9a:8e:
b0:d1:cc:10:fb:71:42:14:06:31:5f:20:e9:18:8a:
ae:de:85:cf:47:65:93:b1:04:70:9f:5d:ad:bc:dd:
46:0a:08:76:50:da:62:72:03:4e:3e:43:d1:7d:4d:
af:1d:c2:1a:1a:57:04:3e:2e:74:f0:95:9a:26:35:
9a:d6:d9:59:c6:42:4d:48:27:09:88:67:7d:26:5e:
ea:89:6a:b9:5d:c7:f2:a6:5b:fb:17:4b:de:05:ca:
0c:f8:71:2f:81:fd:dc:1c:f5:8c:49:45:66:83:ad:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:C6:3E:9D:F4:3A:62:EE:E1:5C:77:F3:3C:88:D3:D3:83:F9:B1
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3c:e8:de:cc:f8:97:33:14:c7:e2:aa:7e:43:a8:d3:2e:58:
6b:c0:f5:a8:1a:66:02:77:de:ac:a6:c9:da:00:5b:79:95:f0:
48:6f:9b:80:48:39:b1:a8:5e:cd:1e:08:10:73:40:fb:9b:e7:
18:ad:9f:1a:9b:82:b0:45:86:11:2f:74:61:43:34:ed:4d:a4:
fd:69:08:ed:62:30:f9:48:fa:d0:86:90:c7:e1:13:90:8f:e8:
67:24:24:59:1e:bc:fa:74:2b:43:a6:d3:aa:77:2b:c9:06:3c:
b3:ca:ba:45:80:33:9b:bc:2a:fe:40:82:53:73:d5:71:1d:66:
d2:55:f1:9e:50:99:65:7b:67:9d:5a:b9:ef:f0:a3:68:b9:de:
84:7e:4c:2b:1a:a4:bd:46:5f:24:9c:d6:7b:12:2d:1e:1b:3c:
36:56:1f:22:20:21:6b:f3:a9:f9:cb:68:ce:02:87:77:85:e8:
d0:ab:cc:5d:01:0e:a7:6a:a8:73:88:5a:d9:2c:f1:d1:0f:8a:
41:c0:e5:a7:4c:59:4e:94:42:b8:65:2f:0a:80:9e:ce:6a:fd:
50:8f:36:a0:aa:b0:8e:0f:ba:35:a6:54:e6:71:e4:f1:c1:73:
6e:ea:1d:26:d7:9c:31:37:8e:7e:a0:4c:b7:94:53:5f:98:69:
45:d5:a6:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgCaMrfi+4CBQSXr9psXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz
MTE1OWMwHhcNMjYwOTIzMjMwMDU0WhcNMjYwOTI0MjMwMDU0WjAzMTEwLwYDVQQD
Eyg0NDY4YzYzZTlkZjQzYTYyZWVlMTVjNzdmMzNjODhkM2QzODNmOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynwOrv6GMPXzj4Z56Ha4sntBDiUm
GSrDBjiGJWBNQxLo9LySpf9u0ifqhdkyUDHuOyiKAFbhVT9OxHaKGWLFx+J//haR
SZQOfSDoN8PxEOSnq6vq9y3mmhRCujYyd22UnNZQdrh30mDZ1GBiqp+WmMMAC4W4
w5itiggZUqUBR8Qds89Wq5U0iRzkRaVG68SnLLucmo6w0cwQ+3FCFAYxXyDpGIqu
3oXPR2WTsQRwn12tvN1GCgh2UNpicgNOPkPRfU2vHcIaGlcEPi508JWaJjWa1tlZ
xkJNSCcJiGd9Jl7qiWq5Xcfyplv7F0veBcoM+HEvgf3cHPWMSUVmg610AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERoxj6d9Dpi7uFcd/M8iNPTg/mxMB8GA1UdIwQY
MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt
NjlkODA5MmI1NGUxLzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx
LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDzo3sz4
lzMUx+KqfkOo0y5Ya8D1qBpmAnferKbJ2gBbeZXwSG+bgEg5sahezR4IEHNA+5vn
GK2fGpuCsEWGES90YUM07U2k/WkI7WIw+Uj60IaQx+ETkI/oZyQkWR68+nQrQ6bT
qncryQY8s8q6RYAzm7wq/kCCU3PVcR1m0lXxnlCZZXtnnVq57/CjaLnehH5MKxqk
vUZfJJzWexItHhs8NlYfIiAha/Op+ctozgKHd4Xo0KvMXQEOp2qoc4ha2Szx0Q+K
QcDlp0xZTpRCuGUvCoCezmr9UI82oKqwjg+6NaZU5nHk8cFzbuodJtecMTeOfqBM
t5RTX5hpRdWmpg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:14 2026 by rpki-client