Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: EI7ykD+0mpDlZqTyIhtc216ggNvT225bqt8e35osmrY=
Subject key identifier: 88:8B:60:D1:33:28:52:7F:A3:BD:AA:90:20:7E:17:D1:03:6D:A8:ED
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 01A102B6B85A5B5B790B84EA03FE22488E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 17:01:31 +0000
Manifest this update: Sat 03 Oct 2026 17:01:31 +0000
Manifest next update: Sun 04 Oct 2026 17:01:31 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: bXdSsZ/XU0OfXGAn88gvSpzhWg2cfR4IUY336PK4ND4=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:b8:5a:5b:5b:79:0b:84:ea:03:fe:22:48:8e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Oct 3 17:01:31 2026 GMT
Not After : Oct 4 17:01:31 2026 GMT
Subject: CN=888b60d13328527fa3bdaa90207e17d1036da8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:59:0f:77:fa:ba:fc:a7:f9:93:4c:6d:fe:
09:63:2b:20:be:bc:ae:15:a7:bd:55:a0:c4:53:8a:
9a:19:1f:4b:43:93:d9:18:0a:bd:f0:05:cf:e1:7a:
9e:3e:b8:a8:1e:a3:8d:5b:f0:03:5c:3d:6b:79:6b:
6d:58:1a:09:74:61:7d:5d:2c:0e:e5:ee:22:3b:78:
ec:6e:9c:7d:1a:c1:dd:dc:a9:0b:5d:c2:22:e1:46:
04:4a:bc:ca:a9:e3:fb:81:ea:e5:20:c0:0c:61:28:
42:b1:e6:b9:b0:02:99:1e:2f:6a:42:16:ff:08:59:
0b:a4:d9:37:ea:e4:3c:1d:1c:be:96:2a:c5:c9:6d:
fa:25:9b:ff:3b:71:34:b0:c5:8f:0f:6f:cb:58:02:
08:f9:bd:3b:ba:d0:9a:c2:c5:72:ae:34:f9:f3:27:
7b:a2:eb:97:eb:65:2c:83:af:fd:ef:70:61:b7:75:
ae:81:39:0d:47:b9:38:fa:1b:a7:4f:e9:25:4c:bc:
4a:73:0c:07:fd:43:bd:de:5d:24:fc:28:ac:5c:df:
ac:8e:5c:61:23:36:12:7b:75:4e:1b:a5:49:4e:87:
df:2d:0c:0b:7e:b8:21:bf:db:03:26:ef:67:64:94:
eb:fe:c6:5f:65:74:89:c6:5b:6b:2d:73:ed:21:bd:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:60:D1:33:28:52:7F:A3:BD:AA:90:20:7E:17:D1:03:6D:A8:ED
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2e:70:26:23:94:cb:36:78:ec:e2:15:ec:b0:1a:8f:32:51:
a2:a5:aa:14:ef:4a:58:0e:7b:67:48:25:ea:86:64:b6:54:4d:
15:e8:73:18:1e:19:0d:e1:30:88:f0:68:b0:59:d9:be:ef:f2:
b8:8a:d5:40:72:71:65:f2:c7:a7:15:a7:16:f7:0c:16:e8:75:
f6:27:df:8c:0e:78:90:c4:d2:2b:54:74:20:22:31:58:73:97:
d6:9d:9c:4c:37:77:32:cc:3c:1f:61:ab:74:8f:ea:ff:94:b9:
90:24:38:21:53:05:ba:c4:19:53:54:ed:a3:af:ad:af:ab:a5:
74:01:2b:df:7f:c6:b0:db:ae:21:14:c3:48:c3:ab:78:c9:97:
90:6c:e7:be:e7:45:62:b9:aa:6f:9a:ec:30:db:09:b8:df:28:
50:61:4c:fc:93:6b:5e:36:d7:6c:29:ad:29:cd:6c:cb:29:29:
62:38:91:72:d6:d0:0e:99:9c:6b:88:c3:e4:d8:6a:61:3b:4b:
ef:dd:4b:f3:38:cc:89:7b:f7:3c:7e:67:bb:b1:8d:93:eb:19:
cd:30:d2:d0:c5:bf:37:e2:5b:0e:6a:3e:ee:ac:82:0a:0a:ba:
ab:d0:6b:11:cd:0c:83:74:72:db:85:d2:97:e6:a4:62:30:10:
01:d7:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:38:53 2026 by rpki-client