Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: z0sg5ydBnk3dWJ2nq+KEnrxD9BSTApEnHxsqkRzVEpU=
Subject key identifier: 2D:C8:A2:C3:B9:9D:16:E1:61:D0:B4:7A:0B:81:68:BB:C0:24:10:DA
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019D39409ABEF825E26F2D5430324D569A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:28 +0000
Manifest this update: Sun 29 Mar 2026 11:00:28 +0000
Manifest next update: Mon 30 Mar 2026 11:00:28 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: YNZJhYdK/4mIAsLDo39rvNtmRRrKeUBmLsQuyNHsFKc=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9a:be:f8:25:e2:6f:2d:54:30:32:4d:56:9a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Mar 29 11:00:28 2026 GMT
Not After : Mar 30 11:00:28 2026 GMT
Subject: CN=2dc8a2c3b99d16e161d0b47a0b8168bbc02410da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:9d:97:8e:4e:b7:a4:7c:69:59:e1:b9:bd:
17:f3:c1:80:d4:13:2b:33:00:b1:b9:f7:b7:62:9f:
21:ac:bf:5f:f5:b0:52:e6:2f:2c:06:91:a3:73:8b:
21:c2:57:2f:c3:cf:53:f4:40:0c:ca:fb:38:49:cc:
b0:56:87:2d:5d:1a:e8:e7:08:c2:8d:5d:5c:95:0d:
80:f3:5f:be:eb:ef:22:84:dc:e8:d2:a6:32:88:66:
be:64:0b:80:86:01:fc:d9:1d:9f:4f:84:91:19:a5:
ac:b5:45:35:e6:3e:b0:78:1d:ee:f5:15:fb:59:5e:
ec:80:41:bd:16:b8:db:37:63:80:2a:70:15:42:f1:
70:1e:5d:6b:d9:98:79:ab:06:32:9e:bf:e7:93:0f:
5c:43:d9:db:ae:d6:bd:9f:9e:01:ad:de:aa:ff:ee:
00:ef:1b:cb:d2:22:38:51:74:4c:e7:97:e3:c2:03:
91:50:cf:25:a6:80:52:50:e0:ec:f4:57:2e:af:fa:
f5:79:a0:a3:98:1d:f6:f2:9c:41:22:ab:96:f9:75:
38:41:7e:5a:05:61:b1:91:cc:37:ba:e8:6d:f0:dc:
1f:ff:96:1b:5a:4b:1e:76:09:f9:ed:13:b5:7a:3e:
6f:97:cb:6f:c9:1b:db:f1:9d:ce:90:bb:30:83:e6:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:A2:C3:B9:9D:16:E1:61:D0:B4:7A:0B:81:68:BB:C0:24:10:DA
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:86:14:86:ef:d0:89:bd:fb:7d:c7:74:4a:b0:af:00:cd:10:
48:7c:5f:a4:dd:89:0e:83:b2:06:f1:d6:62:84:e9:69:ed:df:
ca:5d:52:b4:36:79:0c:f0:05:20:6d:02:34:21:be:97:ed:98:
0f:ad:51:51:b7:94:1c:0d:9d:d6:8c:e8:20:ff:27:b1:85:b2:
ae:72:5a:e5:1e:77:6b:55:01:50:88:4b:5a:dd:6d:dc:15:0d:
a0:95:dd:bb:82:a9:14:25:70:0e:b0:07:23:43:f9:dd:93:f7:
8c:1a:5a:57:b8:3e:f3:5c:91:7d:9d:d8:b3:0a:3b:16:8a:22:
df:c5:d5:46:62:12:fe:08:cc:ee:48:74:6f:0e:d6:33:ac:56:
f2:41:0b:a2:c9:ac:24:d2:52:34:a3:ba:7f:c0:12:c6:8a:fe:
09:24:8b:6f:23:25:87:1d:67:03:f0:21:0f:4d:2d:72:b3:d9:
d2:1c:18:50:3d:7a:41:dc:42:6e:e1:2a:56:b2:a8:11:8f:0e:
ff:cf:77:1b:c7:88:c6:df:eb:cc:0d:5e:50:7d:c4:94:1b:41:
de:21:20:99:cf:1d:92:be:92:55:ed:26:c2:4e:4f:66:51:5f:
2b:a5:c9:c1:00:2f:ec:89:0c:96:33:3b:d9:08:56:52:18:6b:
00:bc:0d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJq++CXiby1UMDJNVpofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz
MTE1OWMwHhcNMjYwMzI5MTEwMDI4WhcNMjYwMzMwMTEwMDI4WjAzMTEwLwYDVQQD
EygyZGM4YTJjM2I5OWQxNmUxNjFkMGI0N2EwYjgxNjhiYmMwMjQxMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleGdl45Ot6R8aVnhub0X88GA1BMr
MwCxufe3Yp8hrL9f9bBS5i8sBpGjc4shwlcvw89T9EAMyvs4ScywVoctXRro5wjC
jV1clQ2A81++6+8ihNzo0qYyiGa+ZAuAhgH82R2fT4SRGaWstUU15j6weB3u9RX7
WV7sgEG9FrjbN2OAKnAVQvFwHl1r2Zh5qwYynr/nkw9cQ9nbrta9n54Brd6q/+4A
7xvL0iI4UXRM55fjwgORUM8lpoBSUODs9Fcur/r1eaCjmB328pxBIquW+XU4QX5a
BWGxkcw3uuht8Nwf/5YbWksedgn57RO1ej5vl8tvyRvb8Z3OkLswg+a5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3IosO5nRbhYdC0eguBaLvAJBDaMB8GA1UdIwQY
MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt
NjlkODA5MmI1NGUxLzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx
LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYYUhu/Q
ib37fcd0SrCvAM0QSHxfpN2JDoOyBvHWYoTpae3fyl1StDZ5DPAFIG0CNCG+l+2Y
D61RUbeUHA2d1ozoIP8nsYWyrnJa5R53a1UBUIhLWt1t3BUNoJXdu4KpFCVwDrAH
I0P53ZP3jBpaV7g+81yRfZ3Yswo7Fooi38XVRmIS/gjM7kh0bw7WM6xW8kELosms
JNJSNKO6f8ASxor+CSSLbyMlhx1nA/AhD00tcrPZ0hwYUD16QdxCbuEqVrKoEY8O
/893G8eIxt/rzA1eUH3ElBtB3iEgmc8dkr6SVe0mwk5PZlFfK6XJwQAv7IkMljM7
2QhWUhhrALwNCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:41 2026 by rpki-client