Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: P5GWam9InLnBULVTlplxBqVshyapTdxDyxCmBsuGFU4=
Subject key identifier: 5E:4C:1C:B4:7E:C7:02:4F:B1:CA:09:D3:40:30:A7:EF:61:60:9A:9D
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019E1F110EF3633C7EF8647FCA26147F2BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 02:01:12 +0000
Manifest this update: Wed 13 May 2026 02:01:12 +0000
Manifest next update: Thu 14 May 2026 02:01:12 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: kynkboB/jU2M6ZeJQObB9sYZIOds6D1STWpr56vcRu8=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:0e:f3:63:3c:7e:f8:64:7f:ca:26:14:7f:2b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: May 13 02:01:12 2026 GMT
Not After : May 14 02:01:12 2026 GMT
Subject: CN=5e4c1cb47ec7024fb1ca09d34030a7ef61609a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:a7:88:22:f1:ef:0d:1d:06:08:ac:b3:e7:
b1:61:42:06:9a:0e:c2:3a:92:02:ea:10:ec:bf:10:
53:c1:b7:0c:dc:7d:92:ae:65:08:48:e7:68:49:74:
91:c0:ee:aa:7e:e1:ef:7a:2f:8a:c0:8b:7e:01:2a:
19:48:23:ce:e4:40:01:b1:b2:03:be:25:1e:cd:43:
b6:0a:c4:c2:e0:ce:91:1a:ba:72:57:15:39:b4:a9:
6e:ad:aa:f2:ae:a9:03:93:4c:cf:ff:22:d7:d3:26:
ac:5e:9e:1d:41:3b:4d:95:ca:e3:30:19:07:de:3d:
76:61:18:15:ac:39:c6:2c:77:7e:13:bf:f4:de:4a:
2a:0e:fb:30:36:1c:18:08:01:3b:e1:94:4b:9d:11:
61:30:c6:dd:be:5c:9c:b5:dc:84:64:e9:8e:21:af:
9f:c3:b8:94:9a:18:44:6e:81:9e:e8:2c:67:b3:40:
53:80:57:d0:bb:3d:9d:d6:f6:b3:c4:89:97:69:e1:
55:88:0f:54:19:fa:d5:57:ce:92:bf:9c:e8:94:7e:
76:6f:ee:a7:0a:a8:8e:2d:4b:01:a3:5b:05:a6:c3:
ef:54:68:bd:84:e1:9a:18:c5:8a:b5:92:00:e4:82:
d1:e3:98:6f:2e:58:71:32:57:4b:8a:07:f7:1e:63:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:1C:B4:7E:C7:02:4F:B1:CA:09:D3:40:30:A7:EF:61:60:9A:9D
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:38:a6:be:34:ba:6e:e6:c8:91:f6:52:f2:0b:00:5f:b7:96:
bd:b4:43:1d:93:09:fc:9a:9c:fe:00:9a:50:6d:3e:68:7a:69:
34:ad:80:f8:e0:27:14:78:7e:41:26:c8:98:69:b3:f1:4a:f6:
5d:35:e6:80:8f:6e:6e:e5:72:ee:03:63:d2:e7:24:a2:22:bc:
04:8c:50:63:e4:7f:4d:7d:7f:64:36:7b:39:2e:8f:8c:e4:1e:
8a:24:05:55:8d:ad:ce:22:72:8f:8d:e6:e8:76:87:f8:33:65:
43:61:05:8f:0f:6f:ed:da:67:c1:2d:b8:9f:67:ce:80:67:25:
f6:fb:f1:fb:27:e7:bc:66:13:ae:f1:f3:d5:1d:fa:bd:04:53:
d1:2e:3a:73:83:2e:66:f1:f7:2e:bb:2f:e1:d9:00:17:db:a2:
ba:64:cb:c1:56:15:d2:67:f4:6c:00:9c:cd:46:42:7c:3f:c0:
0f:ee:90:18:e9:70:25:96:42:55:fb:52:63:84:d2:52:c5:a6:
fa:2e:c3:7e:00:4b:3b:56:fe:6a:f8:09:ab:cf:3c:14:9f:d2:
73:6e:53:be:76:ce:aa:63:ed:e6:74:fc:cc:99:e6:28:8d:b9:
75:c1:2f:2d:1a:d7:e5:a4:9f:3d:d3:20:44:c9:52:9c:aa:dd:
53:d5:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:42 2026 by rpki-client