Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: JzWtpt6RW9Q4eDQzagP9X5OvRFgccdct4K8fp4b2b7s=
Subject key identifier: 52:49:CC:EC:AF:41:B4:2B:B3:4F:B5:8B:10:96:52:B6:5B:22:D6:30
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019F954998A1F796D3D24BC9A0EC27D8369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 18:00:56 +0000
Manifest this update: Fri 24 Jul 2026 18:00:56 +0000
Manifest next update: Sat 25 Jul 2026 18:00:56 +0000
Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: Uianlv/6IJajt3DcJnCUDQDjendu3ZP8dhO44nFgTwQ=)
2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:98:a1:f7:96:d3:d2:4b:c9:a0:ec:27:d8:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jul 24 18:00:56 2026 GMT
Not After : Jul 25 18:00:56 2026 GMT
Subject: CN=5249ccecaf41b42bb34fb58b109652b65b22d630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:4e:5d:77:fb:ff:29:65:22:c9:0e:f5:fe:
6d:cc:20:15:77:3f:7a:fd:fb:24:c5:4b:54:75:47:
78:b2:33:31:a3:85:b0:22:40:77:32:6b:c0:c8:c7:
72:94:b4:0d:b9:09:9d:2b:6c:e6:72:62:79:a6:1a:
5b:dc:ee:43:cd:5f:bc:a0:c8:ac:19:0a:5c:1e:7b:
b7:ff:44:c2:83:e1:6d:e0:27:55:99:47:92:97:c3:
df:d3:78:6d:2b:af:44:99:8a:72:fe:63:a1:f8:35:
ea:47:7e:d5:76:9b:7c:0a:72:b4:ec:6f:9e:07:ce:
3c:f7:08:e9:9e:23:3b:36:8a:31:a5:86:74:a6:f0:
2b:0a:fa:6e:98:6c:7c:c8:ae:dd:4f:97:a2:25:d5:
bb:af:e8:c3:99:c6:d0:a4:96:53:69:5a:1c:93:b4:
20:d2:a5:34:75:0b:f2:45:7a:9c:dc:eb:6a:c2:b3:
bd:40:41:79:c2:99:37:c9:da:f9:da:9c:ea:86:19:
4a:f2:30:70:ac:14:ef:64:2d:ee:22:53:30:64:12:
ca:f4:9b:fd:b2:e4:0b:b7:f1:09:7f:29:88:a8:28:
f3:65:f6:b2:b8:e4:d7:b8:ba:d8:71:93:52:27:f0:
05:bd:26:0c:7f:da:9e:76:eb:8a:b5:e1:ba:b8:52:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:CC:EC:AF:41:B4:2B:B3:4F:B5:8B:10:96:52:B6:5B:22:D6:30
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b3:9f:d5:12:ec:b8:3e:6b:ec:0a:8e:93:b9:5b:2c:a6:72:
22:62:54:d5:e3:b9:f8:5e:dd:75:29:0e:46:ab:2e:08:53:4b:
20:66:ce:cc:03:58:5c:23:ed:b8:e4:3e:59:72:56:23:98:23:
8a:ac:2c:b4:31:f8:24:b9:06:56:64:26:08:74:5c:92:40:10:
f8:a4:ff:5f:e1:78:57:f3:0f:73:fa:39:6a:1a:05:53:07:c0:
54:39:55:ad:96:e0:2a:4a:96:59:71:b1:ef:16:97:0c:c8:df:
ac:01:99:36:e2:05:71:b6:e3:ff:91:82:bd:af:a2:57:37:c9:
47:14:3d:b0:26:c9:63:d9:76:4c:d0:81:62:e3:cc:9a:1f:0f:
d1:87:52:cc:05:b3:2b:a5:49:21:9b:3e:71:a1:d9:48:4f:e0:
f0:21:73:9e:71:d7:79:b7:cd:c2:0c:a3:b1:2e:43:3a:ee:b1:
41:31:de:20:e1:c8:5a:7d:5d:60:d6:3c:f1:49:04:ab:86:46:
ac:de:a6:5e:6e:34:b8:04:f3:b7:0f:77:a0:03:ef:57:3c:fd:
e7:44:67:a1:32:b1:e1:01:cb:2d:e6:7b:ca:9f:29:6a:1f:99:
c6:d0:e3:01:48:27:ee:59:12:b6:b9:9e:93:fd:01:7a:ef:a5:
ec:4c:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:34 2026 by rpki-client