Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: Qlxw6da4ELxyyYFHDs/VlavooPVZ//Dv7M3gLXrRrSg=
Subject key identifier: 35:6E:06:03:53:B9:CD:C6:2A:E0:61:B5:A7:C6:09:3B:84:85:13:D6
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 01A08E3286DEBC38BC92BCCAC77341539987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1A18
Signing time: Fri 11 Sep 2026 02:01:10 +0000
Manifest this update: Fri 11 Sep 2026 02:01:10 +0000
Manifest next update: Sat 12 Sep 2026 02:01:10 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: JAc59chWxnbVj4arm2KxHdYkCsk.roa (hash: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=)
3: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: D4MIpAzA2GwjBG09/sPtaQWRlV0HPOC1F9UBDkxJtG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:86:de:bc:38:bc:92:bc:ca:c7:73:41:53:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Sep 11 02:01:10 2026 GMT
Not After : Sep 12 02:01:10 2026 GMT
Subject: CN=356e060353b9cdc62ae061b5a7c6093b848513d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:5d:a7:b1:b2:84:9c:68:76:a4:4c:ca:d9:
b8:41:2e:29:73:76:47:d4:2b:01:ca:2c:34:35:d0:
af:c9:c4:af:ae:26:46:a7:1a:08:10:e5:d8:c5:73:
2e:05:1c:2d:a1:6c:9c:ea:b7:93:a4:65:f7:da:85:
e9:e7:ee:9b:20:9b:8a:f6:20:6e:3c:08:b1:7f:5f:
19:d9:10:ca:34:d6:ed:61:9e:11:1b:1b:85:2b:18:
9c:c8:7f:c7:f6:84:00:03:6f:37:fd:b4:5c:45:a6:
c4:a7:dc:19:13:eb:67:4a:be:ba:b4:2f:38:aa:03:
c3:db:7d:a8:c4:7c:48:6e:cc:d0:05:35:aa:d8:16:
14:b2:e8:05:1d:b2:fe:a0:89:03:79:e3:a0:27:c6:
16:c3:36:5e:6c:cc:d5:2b:1c:b7:ba:d4:44:03:6a:
40:f6:bf:a1:fe:7a:ad:0f:6b:af:4e:80:c7:2e:5b:
48:07:87:7a:59:e1:84:b4:29:4c:46:ca:62:48:72:
e3:9b:10:dc:bb:0a:31:8f:1e:41:9b:d5:84:bb:bf:
b5:f1:5e:7b:d3:50:95:53:7d:65:7b:12:f8:13:b3:
78:ed:85:28:a3:65:dd:ef:f8:ad:b1:b3:0e:10:15:
b9:ea:14:fa:e5:ed:40:9e:64:5b:09:8e:0f:41:db:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:06:03:53:B9:CD:C6:2A:E0:61:B5:A7:C6:09:3B:84:85:13:D6
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:76:7f:9f:e9:86:34:62:07:7b:1b:99:62:b8:60:67:3e:e7:
d6:db:e3:ed:73:aa:52:65:27:1b:87:86:ae:45:75:89:d9:78:
1f:08:24:4a:9c:02:f1:c4:73:78:20:33:c8:39:b3:1d:c1:cc:
d6:10:92:0b:b5:c0:94:35:8f:be:e6:27:b2:0d:e5:c9:9b:b1:
b6:6f:55:b1:03:1c:31:0c:ba:e2:5f:2d:bd:f4:f4:b0:87:47:
d0:f9:cb:e5:92:0f:fa:6c:63:0e:fa:a1:64:14:96:72:65:1f:
df:42:6c:b1:8c:7f:e7:f8:25:57:c1:ae:cd:e2:3c:51:34:f5:
aa:37:76:45:40:40:b4:70:3c:45:ed:eb:97:07:84:b9:ba:22:
09:02:af:1a:3e:d9:1f:52:cb:38:a1:5d:10:cd:fd:f8:f3:0e:
6e:0e:b8:bf:fd:6f:ec:58:da:28:d0:4e:5d:79:a0:76:47:d2:
2e:30:0b:bc:7c:ed:c5:7d:61:86:38:5b:ef:f1:97:15:94:3f:
a9:be:54:7b:04:3d:42:26:81:92:a4:8d:5d:7b:d0:ca:14:47:
7b:c4:c5:73:9b:02:38:19:fe:e6:b0:58:e8:2a:df:57:3d:ff:
c2:b9:02:e2:ea:59:75:13:58:8e:c4:58:e9:34:cb:2a:90:61:
e2:c7:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:17:10 2026 by rpki-client