Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: RNbbjFHcTnstUZL18MeRe3Fc4qVVr/D3Rwv3rogEo0A=
Subject key identifier: 61:05:03:97:10:0B:EB:F7:DA:4D:8B:21:29:06:14:CC:D4:FC:AA:78
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019F95B6F724EF5B368E4DF87E5202EFC68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 20:00:23 +0000
Manifest this update: Fri 24 Jul 2026 20:00:23 +0000
Manifest next update: Sat 25 Jul 2026 20:00:23 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: wZY4d5bfzc7ZOd3P1eIcXW2ARIWi5bLQbAPOX+zv4a0=)
2: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (hash: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=)
3: rW9bkfJBSEOwz8sE6L555jHnWXM.roa (hash: EJ1za0Mj0Fdw7xeHVN+rGbEtawfKmJZAHzZwacj35RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:f7:24:ef:5b:36:8e:4d:f8:7e:52:02:ef:c6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jul 24 20:00:23 2026 GMT
Not After : Jul 25 20:00:23 2026 GMT
Subject: CN=61050397100bebf7da4d8b21290614ccd4fcaa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:7b:83:29:eb:aa:32:50:6d:c1:3f:87:a7:
3b:6c:b8:c5:a8:73:ac:ab:33:af:d6:2c:e3:27:fb:
ce:fc:0c:ed:61:39:71:69:47:5d:9c:59:e6:f8:46:
1c:3c:f2:d4:9d:e9:ab:77:51:fe:03:29:ee:96:4e:
8a:20:9d:02:ce:85:dd:c2:bd:2a:f0:14:2d:9f:86:
b4:c3:3f:52:8b:0d:57:d2:f9:29:b9:ec:64:b1:3d:
02:9b:a4:7b:3c:43:1d:c9:ff:cd:78:53:d8:52:d2:
ac:0e:9a:b7:fd:f9:7c:74:57:49:33:1d:60:b2:bd:
fd:b0:e1:a1:49:de:d3:5b:3e:5c:0f:09:d4:00:3c:
80:90:88:1a:5d:c9:53:11:b1:52:f1:d3:74:1a:b6:
83:ce:25:1e:d9:cf:22:41:1d:7c:27:b1:8a:c4:73:
9c:82:01:e0:ed:2a:d6:1c:50:a7:8d:7b:78:69:20:
24:95:78:c5:86:5b:81:b8:6f:ef:c0:ca:c5:dc:d1:
4d:09:3b:b7:c3:98:db:19:41:d1:89:99:30:5b:d1:
b7:73:35:77:45:59:90:e8:82:3c:a7:13:06:51:35:
63:3f:58:e2:75:7b:9b:b5:aa:68:ee:11:a7:08:ea:
6e:7c:86:57:08:15:0b:ee:92:56:0f:9d:22:f9:ad:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:03:97:10:0B:EB:F7:DA:4D:8B:21:29:06:14:CC:D4:FC:AA:78
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:66:88:25:92:6d:83:6c:4f:cb:5d:88:ad:79:62:53:c2:b1:
17:f1:5f:ba:7b:33:16:51:fc:53:2b:c9:7f:89:f7:5c:a9:96:
dd:25:9e:f4:6c:d3:13:0e:57:69:2b:54:ca:af:2c:c2:8d:33:
d5:2d:92:0f:fd:bd:2e:b3:74:94:45:0b:bf:dc:0d:4d:08:5d:
d2:96:3c:18:52:67:9d:57:ef:78:eb:69:de:5c:20:ef:0e:3d:
a1:bc:0d:17:e7:83:ce:c5:b9:76:1e:4f:b2:75:69:bd:d0:c3:
2b:74:5d:0e:df:0c:0c:90:56:68:c8:01:6e:af:c7:f2:10:33:
75:36:b3:ac:5d:f0:1a:ac:59:0a:c1:03:7c:54:5a:29:fe:69:
30:98:d6:8c:c3:f6:44:59:ae:c0:5a:cc:39:9d:dc:72:08:97:
d2:e6:28:4a:7d:7c:6f:28:58:55:ca:93:09:c5:4e:42:1a:5e:
fd:d0:3d:42:f8:d5:a0:77:d5:6a:37:9c:50:a3:e0:2a:d8:a3:
10:c9:3d:da:11:e8:33:f1:4e:4e:73:83:df:41:01:c8:8e:cc:
9b:c7:6a:4e:4d:8d:6c:ad:2a:e8:fa:f8:6f:83:7e:be:93:28:
5d:e2:7e:2d:f8:df:f9:bb:20:c1:8b:f0:c5:bf:5e:d0:6a:9a:
82:be:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:31 2026 by rpki-client