Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: Iyv/3vjPmkr5VSedVmG24ZlEYh6aI5M27go0KqGP4AY=
Subject key identifier: 34:69:99:89:54:41:EB:C1:DA:14:89:84:7A:EF:FF:9E:14:DD:91:8A
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019FA2CDB34615BADD60A340D49152873ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 09:00:17 +0000
Manifest this update: Mon 27 Jul 2026 09:00:17 +0000
Manifest next update: Tue 28 Jul 2026 09:00:17 +0000
Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: pkVeisPoWJ6wC+UmwSHPxhr7oZE97xnKohXY4tfB5DY=)
2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:b3:46:15:ba:dd:60:a3:40:d4:91:52:87:3a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jul 27 09:00:17 2026 GMT
Not After : Jul 28 09:00:17 2026 GMT
Subject: CN=346999895441ebc1da1489847aefff9e14dd918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:32:74:f3:f5:13:d6:66:2f:67:ed:d9:51:
7c:ea:ea:da:82:bc:b1:dc:46:27:8f:1c:49:6b:d6:
dd:29:f4:fd:eb:14:c2:6a:b2:a8:e3:d9:1d:fd:ef:
35:80:c2:d9:17:75:37:78:37:7c:95:95:47:2d:f9:
ae:3f:d7:c8:81:a6:1a:57:0c:0e:51:c1:47:cf:f0:
8c:4f:5a:92:f8:08:69:41:02:db:30:a6:19:98:53:
b3:80:05:7e:f7:ef:01:6e:a5:98:9f:5c:d4:bc:1e:
b5:ac:5b:97:a9:f7:c5:b1:b5:63:7d:4d:54:c0:71:
c1:1b:f6:c8:41:f2:fb:e1:db:ea:24:70:a0:3b:f7:
3a:8b:2c:09:e0:f7:17:27:d3:0b:af:6b:71:00:f2:
61:7c:a3:a6:8b:53:f0:d8:a9:5a:0c:a5:3e:3e:aa:
e3:f9:8e:d8:95:50:82:4f:d2:34:66:f0:ba:12:a1:
01:d8:ae:f9:9a:ca:81:dc:ed:74:dd:9e:14:2b:54:
4f:68:0b:44:97:d7:5e:22:3f:45:0e:49:33:d4:4c:
67:27:87:53:86:2a:9c:3a:d2:69:93:d7:9a:c6:78:
fb:ce:8c:93:c2:7e:f9:ab:50:65:1d:5f:61:aa:ef:
dc:c3:09:16:e7:c8:27:51:94:04:8e:79:8e:30:3a:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:99:89:54:41:EB:C1:DA:14:89:84:7A:EF:FF:9E:14:DD:91:8A
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:26:4e:c7:a3:80:7b:f2:8e:ab:a9:96:2f:19:dd:f1:bc:
3b:d1:a8:a8:06:da:c7:a1:37:9c:6b:d4:6d:a8:f5:dc:01:8d:
94:d0:ce:0b:c0:60:c1:b7:d2:b3:d3:86:d9:b7:58:b9:e1:5c:
5d:2a:99:96:12:48:40:0a:cb:69:13:62:2f:c7:45:a3:b9:2f:
e4:02:92:3d:ff:2e:e1:54:f7:ca:70:f7:94:42:9b:32:47:1f:
97:3f:79:87:5f:23:53:b8:7d:d3:0b:48:66:5a:36:f8:ae:02:
ce:6a:7f:59:c9:34:38:de:09:4a:96:18:1d:dd:34:ae:f4:6d:
c1:49:8f:a7:4f:ef:15:41:c3:5b:11:cd:a3:ea:08:db:78:9b:
88:e4:8a:22:f9:a1:3a:5c:c8:8f:23:97:80:fd:03:07:da:15:
af:19:b0:96:ba:c5:e7:cd:4a:ef:e1:33:59:22:54:10:c3:f7:
10:49:5f:c2:3b:c3:12:4d:22:05:f2:cf:46:2d:9a:6a:56:40:
06:f0:bc:b6:13:3b:52:9b:65:75:07:98:53:b9:49:ad:8f:06:
4c:7e:98:29:f5:f9:4c:b9:c4:35:39:af:fe:05:0e:bf:e7:74:
24:b0:34:f6:3e:51:d9:08:a9:25:6a:28:45:02:71:ef:3b:f2:
d8:b3:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:49:40 2026 by rpki-client