Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: 2taAj4NpgbTWVFR66lyDBYRO+Uz2+8WMUQ7Z/2UqFEM=
Subject key identifier: C3:6A:D3:DD:01:18:2E:E9:A6:A6:EB:E8:87:AB:37:2D:9B:85:08:CD
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019D25F1939F1CAE4288DA59213E8F6BB32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:22 +0000
Manifest this update: Wed 25 Mar 2026 17:01:22 +0000
Manifest next update: Thu 26 Mar 2026 17:01:22 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: QEgldSZZlIjc+q6PNW/+E6WPgckv2Pg7HK0DAKdYCRA=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:93:9f:1c:ae:42:88:da:59:21:3e:8f:6b:b3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Mar 25 17:01:22 2026 GMT
Not After : Mar 26 17:01:22 2026 GMT
Subject: CN=c36ad3dd01182ee9a6a6ebe887ab372d9b8508cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:34:9a:6e:e0:7f:03:dc:5d:62:2f:ec:34:
f3:38:2d:4d:7c:b4:f1:c3:f5:bc:12:40:fb:2d:1f:
bd:9a:c8:33:c8:1a:2d:3f:af:fc:f9:96:53:26:91:
a8:d2:66:7e:18:7e:fc:27:90:b3:db:07:56:d3:16:
58:1e:ff:9c:58:7a:e9:a6:9e:f8:ea:6d:41:2b:18:
95:8e:9b:d6:e9:08:60:d4:83:ae:6b:85:f2:37:fe:
72:d9:af:56:ba:2b:dc:2d:71:de:65:f4:c3:6d:7d:
03:d2:ce:32:a3:75:a4:99:9f:05:db:70:5a:e7:83:
1e:61:e1:ef:70:8e:71:be:7a:de:1f:a5:38:72:69:
2c:9a:be:c5:4d:6b:dc:9f:84:b8:70:7d:4f:80:1b:
8f:f4:3d:76:27:a8:46:03:e3:cc:93:fa:70:4a:17:
ef:2d:02:27:ea:f9:18:91:6a:b6:90:14:3f:46:f8:
2c:a5:7b:eb:40:18:1c:92:07:57:d0:3f:61:34:09:
12:3a:78:d2:95:7c:d9:51:d9:a4:1a:e4:7f:1f:5e:
4c:43:70:06:2c:47:24:25:b6:0f:03:32:6a:f4:e9:
10:30:15:39:69:62:75:54:d3:fe:ef:fb:cc:ba:59:
19:c0:9f:4a:4d:41:13:09:cc:98:07:68:59:75:1f:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6A:D3:DD:01:18:2E:E9:A6:A6:EB:E8:87:AB:37:2D:9B:85:08:CD
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7a:c4:f1:1f:ca:73:79:69:d0:dd:ea:5d:6c:9f:e6:39:54:
6d:57:1a:0a:6e:1f:3c:ff:c2:cc:4f:a0:c8:07:91:cf:44:18:
95:b2:7a:12:f1:c5:52:7c:7a:11:c0:e5:17:03:6e:9a:04:8c:
45:b2:7e:cc:f1:c8:26:c9:22:39:55:68:d7:e9:36:27:24:99:
5f:92:09:2a:f9:e9:ad:cc:42:18:28:9d:7e:21:0a:b5:8e:95:
15:6a:68:f2:2d:d0:81:8e:ce:a4:8f:a2:c9:a6:e0:ba:c6:5e:
5d:c9:2b:d2:90:2b:42:bf:66:4d:b3:8e:ff:67:c3:94:ca:04:
39:cd:62:f4:24:ea:3c:d2:7d:ff:24:c3:d2:de:a9:28:68:d8:
fd:d2:07:70:de:44:43:32:5c:66:c2:47:ff:92:c9:65:06:c6:
08:42:b5:97:2d:53:70:bb:90:34:2a:ae:f7:16:f4:a8:c8:07:
c3:56:9b:3a:ab:07:80:28:9c:8e:12:91:e7:ca:5c:c2:cf:24:
4a:20:7e:18:72:b1:02:cf:e3:79:47:19:01:5d:1d:7d:be:6a:
c7:d7:ba:fb:eb:44:81:77:85:cd:61:26:5c:04:e8:58:f0:a5:
c8:cb:a7:f9:74:1a:0e:02:5b:db:67:bf:e4:9f:d4:d1:ff:d2:
07:7c:0a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8ZOfHK5CiNpZIT6Pa7MsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz
MTE1OWMwHhcNMjYwMzI1MTcwMTIyWhcNMjYwMzI2MTcwMTIyWjAzMTEwLwYDVQQD
EyhjMzZhZDNkZDAxMTgyZWU5YTZhNmViZTg4N2FiMzcyZDliODUwOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm80mm7gfwPcXWIv7DTzOC1NfLTx
w/W8EkD7LR+9msgzyBotP6/8+ZZTJpGo0mZ+GH78J5Cz2wdW0xZYHv+cWHrppp74
6m1BKxiVjpvW6Qhg1IOua4XyN/5y2a9WuivcLXHeZfTDbX0D0s4yo3WkmZ8F23Ba
54MeYeHvcI5xvnreH6U4cmksmr7FTWvcn4S4cH1PgBuP9D12J6hGA+PMk/pwShfv
LQIn6vkYkWq2kBQ/RvgspXvrQBgckgdX0D9hNAkSOnjSlXzZUdmkGuR/H15MQ3AG
LEckJbYPAzJq9OkQMBU5aWJ1VNP+7/vMulkZwJ9KTUETCcyYB2hZdR+6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNq090BGC7ppqbr6IerNy2bhQjNMB8GA1UdIwQY
MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt
NjlkODA5MmI1NGUxLzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx
LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnrE8R/K
c3lp0N3qXWyf5jlUbVcaCm4fPP/CzE+gyAeRz0QYlbJ6EvHFUnx6EcDlFwNumgSM
RbJ+zPHIJskiOVVo1+k2JySZX5IJKvnprcxCGCidfiEKtY6VFWpo8i3QgY7OpI+i
yabgusZeXckr0pArQr9mTbOO/2fDlMoEOc1i9CTqPNJ9/yTD0t6pKGjY/dIHcN5E
QzJcZsJH/5LJZQbGCEK1ly1TcLuQNCqu9xb0qMgHw1abOqsHgCicjhKR58pcws8k
SiB+GHKxAs/jeUcZAV0dfb5qx9e6++tEgXeFzWEmXAToWPClyMun+XQaDgJb22e/
5J/U0f/SB3wKEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:19 2026 by rpki-client