Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: /Vlm+Zn59XaGztJQGzwng6QZRqyyJTSeSWjaRAkMk/E=
Subject key identifier: EA:8D:3F:28:E4:D4:52:A3:1B:D3:C8:0D:83:B2:ED:33:88:DF:83:06
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019F93C88373F616FBCFA9ACC8623C392396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 11:00:19 +0000
Manifest this update: Fri 24 Jul 2026 11:00:19 +0000
Manifest next update: Sat 25 Jul 2026 11:00:19 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: P2zK5ZeoQFUDa0Ju3PsyD+Z4H7dAWJsbQpbvY9PIP64=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:83:73:f6:16:fb:cf:a9:ac:c8:62:3c:39:23:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jul 24 11:00:19 2026 GMT
Not After : Jul 25 11:00:19 2026 GMT
Subject: CN=ea8d3f28e4d452a31bd3c80d83b2ed3388df8306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:05:d6:28:5b:66:c4:66:42:63:8f:28:4d:
48:c0:49:60:c6:21:1e:0b:9c:b6:c6:36:73:53:50:
25:73:10:a2:e2:11:31:7c:e6:a1:db:f1:89:08:41:
c2:19:6a:95:8d:60:b0:c3:08:91:1e:22:8a:30:01:
80:08:96:be:22:7e:81:4a:f0:39:2b:36:78:20:81:
96:fa:ce:35:57:4b:e7:23:f2:22:b4:6a:af:f2:25:
fa:a8:33:06:dc:6f:fe:d5:e5:20:8f:5b:b3:40:3d:
2b:14:60:36:fe:46:03:5f:23:47:20:5f:c5:9c:fb:
c8:3f:17:66:14:30:00:f3:92:7c:36:d4:3a:7b:ef:
67:3b:5d:2b:c1:a2:8b:e0:3f:16:ef:ec:08:e1:84:
2f:b4:3c:e2:c7:b5:47:bb:80:60:8a:23:78:39:7b:
71:60:d4:29:58:2e:16:28:e4:0e:56:f3:d9:0e:22:
f4:47:35:c4:ad:33:3e:ce:61:ad:97:90:37:0d:12:
4f:4b:a7:02:9d:22:8f:c3:d9:b6:80:74:f7:81:2d:
1c:13:63:82:db:5a:51:a0:5a:76:bf:e4:66:a1:c0:
92:53:27:b0:53:9f:21:41:28:6b:3e:3d:f2:67:22:
f7:76:95:a4:17:9c:eb:43:c4:7c:f6:89:4b:1c:89:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:3F:28:E4:D4:52:A3:1B:D3:C8:0D:83:B2:ED:33:88:DF:83:06
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6c:14:5f:e9:8a:f9:97:52:a8:d1:43:15:40:0a:6e:42:3c:
c3:ac:ca:46:1e:a1:e4:fc:43:cf:52:c3:d1:43:33:4b:d5:f0:
5b:9b:74:6e:c6:4b:68:bb:27:b2:e2:67:9e:58:49:2f:ea:6c:
a9:1c:a3:22:10:94:2e:c7:6a:f7:06:dc:a1:c0:61:8d:2d:2e:
f2:15:1b:76:d1:7a:e3:9e:e7:db:b9:35:d1:83:df:0c:26:c4:
29:0f:69:cb:8a:f6:10:c7:ee:15:e5:50:fe:8a:86:a8:e0:c7:
1c:83:c6:85:32:24:f5:42:ee:65:5a:cc:ea:40:5f:a1:53:71:
b8:d6:c9:4b:0a:04:8d:e2:ba:ff:c6:c9:a1:3f:ea:a6:5a:2d:
e4:dc:51:a6:80:2e:c8:e0:e9:54:ce:be:dc:b0:4e:26:e4:2a:
40:5c:89:58:c2:8f:10:89:0b:ed:6b:de:ea:70:ef:5f:ae:46:
eb:56:6b:52:18:f8:15:4c:a9:d4:fc:53:79:63:f5:d2:58:0f:
f0:b5:f7:66:eb:22:ba:b6:8f:6d:0f:4c:cd:5d:ce:e0:76:e2:
ea:d7:23:96:da:a1:ac:29:3b:7b:28:19:9d:d9:06:2b:fc:82:
11:85:67:09:47:3a:f4:19:2f:16:8f:8a:68:3e:a8:cc:f3:e9:
59:41:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:02:47 2026 by rpki-client