Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: ci2RaEN0/N4Dwork7yPi/aoEONshlqkZ0KDDIGTLJEo=
Subject key identifier: 8A:5D:C6:B2:BD:F5:17:23:C6:E5:52:5C:FE:A7:FA:63:5B:3B:58:EE
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019FF8353CB097C62874E1CE11A9A011A565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 19FB
Signing time: Wed 12 Aug 2026 23:01:06 +0000
Manifest this update: Wed 12 Aug 2026 23:01:06 +0000
Manifest next update: Thu 13 Aug 2026 23:01:06 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: V16Ja3tGCiWY1m5LksLaiPK+2Myg42EMSj/m2eUBiOM=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:3c:b0:97:c6:28:74:e1:ce:11:a9:a0:11:a5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Aug 12 23:01:06 2026 GMT
Not After : Aug 13 23:01:06 2026 GMT
Subject: CN=8a5dc6b2bdf51723c6e5525cfea7fa635b3b58ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:86:96:99:5f:c4:b9:d3:45:8b:fa:52:76:
72:4e:2d:e0:b0:2d:95:c5:b6:fd:a2:40:6c:0c:5f:
92:b6:6c:7f:d5:b3:da:ec:2a:31:68:a5:3f:d3:a7:
10:a1:89:01:39:95:54:60:ae:8c:0d:e0:21:78:be:
92:b2:60:43:50:5a:a8:5f:60:e7:2b:3b:4a:05:3e:
52:c6:b2:f4:05:19:90:6b:7d:ff:3b:a7:7a:f8:2d:
e5:96:49:84:96:6b:ac:64:8c:aa:a9:9c:4e:e8:9e:
6e:b5:13:80:ed:3d:6d:28:b3:94:e5:05:99:57:28:
60:7d:e4:ea:89:d7:f9:c7:d2:b8:de:74:84:7f:23:
c7:b7:76:54:77:f9:a6:c4:b4:04:a7:45:4d:62:b1:
27:1f:fa:62:a5:8f:fa:ab:4a:88:2a:e6:25:60:a8:
40:3a:12:ee:ef:40:a8:d2:40:37:c7:fe:79:c6:92:
18:6e:92:70:9a:b9:47:b1:65:43:e9:af:8e:58:f7:
79:69:09:dc:e5:f8:dd:68:88:cd:ce:94:8d:1a:7c:
4b:f0:68:39:1d:9d:a0:5d:e7:42:40:26:6b:e2:16:
ae:f4:f7:30:a0:95:21:e7:7b:a4:2d:37:43:db:36:
46:fa:2a:1a:7b:20:85:fb:63:9e:cc:7c:ff:a7:dd:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:C6:B2:BD:F5:17:23:C6:E5:52:5C:FE:A7:FA:63:5B:3B:58:EE
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d1:47:4a:bd:68:d4:f6:fe:fd:79:73:03:8c:fc:69:4a:1b:
84:c8:97:2b:3f:6d:8d:77:ab:fa:59:ff:81:ca:13:3e:ba:c9:
42:66:04:0f:b8:3d:71:18:c3:d3:81:22:fa:14:b5:66:f8:05:
47:44:39:d5:87:d6:04:b2:d8:f9:35:b5:76:b5:54:ac:cc:06:
89:36:21:14:a9:ce:97:5c:29:4d:46:3d:29:f7:85:39:1d:41:
f3:e9:24:dd:cb:4d:2c:ff:85:8d:4a:ac:ec:61:0c:71:12:ba:
0a:c5:e6:9d:bd:73:64:ac:eb:44:f8:f9:36:14:99:7b:bb:91:
24:f4:f3:59:54:31:68:79:31:96:c6:df:cc:a2:6e:62:7b:7f:
ca:ed:d4:3d:a1:c2:2d:e4:b4:5d:c7:4d:00:ec:e9:21:a1:5d:
e8:a9:a4:8a:13:a8:27:cb:62:8c:ee:9f:ad:8b:22:f2:0b:01:
d7:07:c1:7c:22:3f:3b:cd:35:2b:50:6c:ae:52:dd:9a:0a:bc:
8f:7c:ea:da:8f:b6:5a:54:f7:62:c4:91:66:3e:72:d0:e0:62:
02:45:e2:c9:54:aa:1e:ac:40:8d:ca:65:b6:02:f9:e1:31:d6:
ef:bc:70:cf:8a:36:c8:ce:9d:68:ff:03:d6:4b:f3:68:b4:fa:
98:04:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:33:15 2026 by rpki-client