Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
File: Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft (raw, json)
Hash identifier: 9wPC8OdWj3ReGDqQR132VOvgUKr9wpbKcCyL/+OWV6w=
Subject key identifier: A3:E3:9A:70:AD:43:A9:38:EC:F7:72:39:30:59:D8:4F:42:07:04:C8
Authority key identifier: 67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
Certificate issuer: /CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Certificate serial: 019F935B34E352456734EF5E733DF4C36C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:55 +0000
Manifest this update: Fri 24 Jul 2026 09:00:55 +0000
Manifest next update: Sat 25 Jul 2026 09:00:55 +0000
Files and hashes: 1: Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl (hash: oixD9TAO1lahiIepoGBNfDq8+fxs8Nl+O0x42f+ya9c=)
2: _uELF3uAGWWWU-RJRHYGaIoW8U4.roa (hash: U5mRlj1KFH4M3tby5YOjE/zPfPpRLKSqjkUhZ3s2pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:34:e3:52:45:67:34:ef:5e:73:3d:f4:c3:6c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Validity
Not Before: Jul 24 09:00:55 2026 GMT
Not After : Jul 25 09:00:55 2026 GMT
Subject: CN=a3e39a70ad43a938ecf772393059d84f420704c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:20:58:03:36:7d:ca:6b:06:e0:0f:1f:47:
db:44:cc:45:a2:bc:a1:dc:38:e8:c3:bd:08:6c:27:
0e:c8:0f:ca:0f:61:87:b3:26:e0:71:d6:54:ea:25:
f5:aa:78:61:7d:cc:32:a0:2c:ae:8f:06:2a:ac:9a:
01:d9:ea:c9:93:fb:eb:f0:01:c9:ab:75:21:bc:5d:
ec:18:d1:a8:82:5a:fe:f0:89:79:bd:81:28:a9:ab:
ee:59:6f:18:a7:a7:df:a8:ce:87:4c:49:fc:ad:d3:
3e:08:67:0e:50:b4:53:9b:da:0e:a7:6f:89:40:6c:
2e:d9:d8:58:68:cb:bc:17:06:c0:50:65:f6:fa:c5:
32:70:cc:41:fe:41:cf:e3:95:ab:78:a8:2f:35:62:
55:e6:8b:b7:d3:18:5d:a2:8b:fb:48:d9:85:ed:69:
a4:3c:ec:5a:cb:26:7b:65:34:89:1c:42:a4:99:22:
48:06:78:9c:19:e0:cd:43:f9:3e:ab:8c:1a:ae:7b:
9f:b1:66:9b:1a:1a:11:ed:af:dc:6b:1c:b4:f1:ad:
a7:1a:9d:e7:98:ec:22:40:86:c5:df:c2:89:c0:57:
2d:1e:f9:86:71:03:d4:13:8d:68:23:3c:9e:6b:bd:
d6:50:e0:cc:5f:aa:34:c2:a7:4d:8b:e3:7b:32:4b:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:9A:70:AD:43:A9:38:EC:F7:72:39:30:59:D8:4F:42:07:04:C8
X509v3 Authority Key Identifier:
keyid:67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d3:82:36:fc:15:25:77:61:70:5e:7e:df:cd:a4:4a:e0:41:
e1:bc:48:5a:44:1f:35:6c:ca:10:ab:d8:73:74:03:79:00:92:
1e:d1:bb:e6:24:10:ea:22:e9:24:ba:90:12:75:c4:6f:54:ee:
85:3f:fd:70:5d:fb:d8:b7:c0:4d:87:58:98:be:dd:68:32:16:
07:66:18:6c:d5:cd:73:06:58:c6:08:46:f7:bf:86:2e:58:ef:
f5:42:f8:8c:5d:6c:53:af:fc:eb:e7:bc:b5:ee:bf:c4:74:40:
f5:12:d3:25:a6:68:dd:92:45:7c:18:eb:3d:ac:2f:af:3d:e7:
8b:98:ea:42:15:70:61:c0:79:7f:91:87:eb:83:b6:02:30:32:
ba:66:d8:90:e1:14:bb:e1:1d:15:d5:06:0c:13:6d:0e:07:ef:
6a:72:00:35:fa:80:6d:7c:10:b0:0f:b9:5b:46:f8:8f:2c:bb:
e8:33:7e:40:17:be:4c:46:6b:82:8e:f4:34:b8:84:23:76:cd:
7c:82:2e:1a:9a:2c:1e:cc:57:3e:98:60:f0:16:e3:2f:d7:b6:
d4:3c:84:ff:a8:91:e6:d7:f9:35:27:b0:43:45:a0:ae:6e:94:
dd:23:04:7e:9c:68:62:b6:f4:17:4e:1f:bd:07:4e:4c:5e:2e:
a6:83:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:05 2026 by rpki-client