Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: tP+yrCK+R555zMHihUaRmT7feENGjez7sp4jTZPje+k=
Subject key identifier: 97:7D:E0:8F:AC:B2:89:BF:A6:92:58:01:51:BE:05:50:C0:9F:FC:31
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019F0E88A0B1F6E4F1B8F375B33116465474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1982
Signing time: Sun 28 Jun 2026 14:01:02 +0000
Manifest this update: Sun 28 Jun 2026 14:01:02 +0000
Manifest next update: Mon 29 Jun 2026 14:01:02 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: arFCYYqHoeM/TBzQ6cuhb7wsnUE0geYuMYTRWHKYs00=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:88:a0:b1:f6:e4:f1:b8:f3:75:b3:31:16:46:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jun 28 14:01:02 2026 GMT
Not After : Jun 29 14:01:02 2026 GMT
Subject: CN=977de08facb289bfa692580151be0550c09ffc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:f0:93:bf:ac:60:a8:f3:f3:34:6f:d1:ec:
ea:d9:8b:ad:49:aa:27:ef:3e:c0:ec:15:04:6d:a2:
68:91:8b:58:de:85:58:51:e2:fa:bc:16:90:74:c3:
07:58:b5:b5:d5:8b:a2:dd:fb:0e:2b:04:35:a5:74:
aa:75:b4:1f:80:cb:55:48:f9:35:a7:c3:a7:aa:97:
59:1c:d9:09:19:39:06:6c:14:2f:95:66:0d:3e:4c:
61:b7:6f:8b:a3:61:8c:46:90:b1:84:6c:a0:2e:8b:
0c:60:8c:fb:2d:81:79:66:82:92:28:46:a6:7a:d6:
7d:c3:90:0f:67:e6:5e:b7:ca:3d:66:23:f9:e4:26:
ae:62:eb:c1:97:0a:e4:5a:3a:6e:ba:dc:cb:59:76:
33:e8:97:d1:5d:30:37:25:24:62:03:60:05:6e:d4:
e0:d1:b7:fc:04:3c:17:3a:9f:ed:66:6c:8c:6f:2d:
d8:98:73:9c:b7:c5:eb:bb:8f:ee:85:c8:47:19:a3:
57:37:39:fa:fd:37:44:8a:54:47:1d:ea:ea:97:16:
e4:c7:f0:28:56:fd:b0:3b:89:90:40:f1:1b:32:c3:
93:05:8c:9f:77:ec:b6:e3:0c:f3:14:8a:6c:21:de:
2f:95:31:6c:d6:c6:51:37:9d:8a:29:d5:a9:fb:53:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:E0:8F:AC:B2:89:BF:A6:92:58:01:51:BE:05:50:C0:9F:FC:31
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1b:ae:4f:cf:c5:c0:23:96:c2:2c:7b:f9:c1:25:ac:12:2c:
49:d2:c0:e0:69:30:ff:a5:ed:e9:57:f5:66:4b:80:03:ae:5d:
2e:22:51:fe:94:cf:66:e7:3d:75:de:5a:b6:f2:f5:60:20:02:
f2:2e:0d:e9:22:35:63:62:8d:e2:9d:fd:d7:d4:28:63:d7:e1:
75:29:6a:ec:d9:88:52:4d:ae:02:81:05:18:18:4d:2a:f3:ef:
8f:c7:47:5d:69:16:18:69:08:77:84:a6:f2:eb:b1:5d:11:7d:
6d:a7:b4:b3:0c:33:92:f2:f6:21:2d:31:1c:26:f7:a4:7a:b1:
f0:c9:c9:95:8e:03:0f:01:c3:f8:d3:ac:3c:c8:c0:d4:2b:62:
25:e7:50:02:43:f8:83:c4:11:e3:f8:dd:a5:21:e6:9c:6f:1c:
64:f4:67:ee:31:3d:6c:e8:18:87:b3:12:b5:31:74:5b:5a:7e:
b9:68:67:13:37:1a:54:55:e3:b0:89:29:fb:c5:ea:80:12:dd:
0d:90:41:3a:3a:8d:31:c8:d7:13:36:af:4e:0a:7c:79:6b:1a:
d3:66:21:8e:df:ab:fe:d2:87:03:f7:e7:a1:90:09:0d:96:fc:
7f:55:89:e3:c2:03:0d:ea:66:6d:4e:db:fa:85:eb:b3:3b:de:
b5:56:8b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8OiKCx9uTxuPN1szEWRlR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz
MTE1OWMwHhcNMjYwNjI4MTQwMTAyWhcNMjYwNjI5MTQwMTAyWjAzMTEwLwYDVQQD
Eyg5NzdkZTA4ZmFjYjI4OWJmYTY5MjU4MDE1MWJlMDU1MGMwOWZmYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/bwk7+sYKjz8zRv0ezq2YutSaon
7z7A7BUEbaJokYtY3oVYUeL6vBaQdMMHWLW11Yui3fsOKwQ1pXSqdbQfgMtVSPk1
p8OnqpdZHNkJGTkGbBQvlWYNPkxht2+Lo2GMRpCxhGygLosMYIz7LYF5ZoKSKEam
etZ9w5APZ+Zet8o9ZiP55CauYuvBlwrkWjpuutzLWXYz6JfRXTA3JSRiA2AFbtTg
0bf8BDwXOp/tZmyMby3YmHOct8Xru4/uhchHGaNXNzn6/TdEilRHHerqlxbkx/Ao
Vv2wO4mQQPEbMsOTBYyfd+y24wzzFIpsId4vlTFs1sZRN52KKdWp+1MB0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJd94I+ssom/ppJYAVG+BVDAn/wxMB8GA1UdIwQY
MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt
NjlkODA5MmI1NGUxLzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx
LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBuuT8/F
wCOWwix7+cElrBIsSdLA4Gkw/6Xt6Vf1ZkuAA65dLiJR/pTPZuc9dd5atvL1YCAC
8i4N6SI1Y2KN4p3919QoY9fhdSlq7NmIUk2uAoEFGBhNKvPvj8dHXWkWGGkId4Sm
8uuxXRF9bae0swwzkvL2IS0xHCb3pHqx8MnJlY4DDwHD+NOsPMjA1CtiJedQAkP4
g8QR4/jdpSHmnG8cZPRn7jE9bOgYh7MStTF0W1p+uWhnEzcaVFXjsIkp+8XqgBLd
DZBBOjqNMcjXEzavTgp8eWsa02Yhjt+r/tKHA/fnoZAJDZb8f1WJ48IDDepmbU7b
+oXrszvetVaLnA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 00:26:28 2026 by rpki-client