Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: qJhAo3pjhDqoR0VVbnbHG+j3599ACVdri6YodG+6ONE=
Subject key identifier: 60:73:4F:6C:6A:0D:42:F9:04:80:F6:5F:A3:C0:DE:8D:BF:E7:74:62
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 01A08E69991392732B0DFFD5DC17618A7F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 03:01:20 +0000
Manifest this update: Fri 11 Sep 2026 03:01:20 +0000
Manifest next update: Sat 12 Sep 2026 03:01:20 +0000
Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: 4Art8ZgFS5SvrPbXEJgh/gm0TFK3yFdsW+yFsaekpHE=)
2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:99:13:92:73:2b:0d:ff:d5:dc:17:61:8a:7f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Sep 11 03:01:20 2026 GMT
Not After : Sep 12 03:01:20 2026 GMT
Subject: CN=60734f6c6a0d42f90480f65fa3c0de8dbfe77462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:2c:48:99:67:15:40:5f:f5:b0:46:8b:64:
fd:b2:8f:42:7f:04:ea:63:4f:eb:9e:5b:96:ff:30:
53:6f:19:01:26:7f:83:ef:b9:37:70:1e:9e:e8:49:
4e:9f:00:5f:c9:91:55:1f:a2:64:2a:30:14:ef:b1:
45:fb:32:86:1d:85:e7:3f:b2:a5:9d:de:5b:2e:3f:
e7:00:c7:95:09:a5:29:6c:ad:ee:1f:53:af:28:a1:
de:49:e7:9b:a9:c2:c9:13:e9:6a:83:66:e8:62:9a:
32:5d:74:be:7e:55:fc:a2:36:7c:1a:15:87:46:08:
9d:78:d6:67:16:18:d8:3a:00:aa:51:d6:b7:5c:f4:
2c:0f:98:c4:cb:bf:ac:c2:79:cf:45:60:36:f0:fa:
be:65:4c:e0:79:39:51:53:c3:6d:d2:e0:89:4e:19:
3b:0e:a9:f4:c3:b2:ef:e1:8c:46:07:73:f5:1c:b4:
ae:e0:28:f9:73:52:31:fa:77:43:bb:c7:c3:38:02:
99:ff:af:74:5c:99:94:ad:85:18:8d:66:4b:7d:6f:
95:a0:34:7e:b4:33:ef:ba:a4:b4:e9:ee:f0:cc:83:
66:ea:a4:cd:ab:6a:52:96:87:e6:82:3d:31:b6:cb:
30:fe:20:65:ba:fe:27:cb:63:1e:b9:8a:04:77:95:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:4F:6C:6A:0D:42:F9:04:80:F6:5F:A3:C0:DE:8D:BF:E7:74:62
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:06:e4:30:32:8f:d8:00:bf:bc:bc:b8:6a:1b:fe:4d:63:
74:23:b2:0b:c9:15:31:36:1b:e4:86:96:6d:4f:b6:03:0e:17:
01:82:9e:77:d8:01:7f:5c:9e:8f:af:fa:6a:5f:d9:33:f2:37:
c6:70:3f:3d:db:10:01:9e:23:9a:68:ac:5f:b6:4d:96:d6:72:
0b:80:17:83:91:e1:2d:14:51:e5:91:15:26:00:28:dc:a0:ac:
6b:84:7f:3c:6a:cf:35:7f:73:92:76:8f:99:03:52:a1:2d:3c:
e3:a6:06:3f:ce:72:a4:5e:16:d6:a3:7c:65:cd:71:a7:6e:3c:
7f:5a:58:6c:f5:c4:96:6e:2d:3e:66:9c:b9:58:e4:0a:cc:d5:
dc:1c:cf:8c:eb:99:55:5c:44:1c:a0:99:12:cb:e7:21:9e:1b:
5e:e8:72:d6:f3:3a:50:29:ad:d9:e7:43:da:80:12:89:9e:85:
ac:a5:ba:72:47:33:a5:11:43:a0:82:ce:c3:19:58:0a:b1:57:
09:1a:43:4e:60:56:5f:98:bd:50:8e:3d:1d:b9:04:ff:39:12:
a6:c6:80:1d:51:a6:32:10:61:0e:44:61:a0:b9:54:59:62:0c:
c1:f0:c0:51:83:79:54:c3:20:b3:fd:76:1d:4b:f5:23:2b:94:
cf:90:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:52:07 2026 by rpki-client