Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: rw/tGjCSG7bHza0qTwm7CtFNvJsdrFvLBXddusRE2rw=
Subject key identifier: 3D:A5:ED:FA:AA:DD:A8:71:19:70:05:97:88:98:95:28:8B:55:7D:24
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 01A18D1D5EEE120248744E4A877EED3D86EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1A9C
Signing time: Fri 30 Oct 2026 14:01:14 +0000
Manifest this update: Fri 30 Oct 2026 14:01:14 +0000
Manifest next update: Sat 31 Oct 2026 14:01:14 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: JAc59chWxnbVj4arm2KxHdYkCsk.roa (hash: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=)
3: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: 4W7WPwnciP9WZt22GBBlvrZKQOiH/W54BqULVoID5z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1d:5e:ee:12:02:48:74:4e:4a:87:7e:ed:3d:86:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Oct 30 14:01:14 2026 GMT
Not After : Oct 31 14:01:14 2026 GMT
Subject: CN=3da5edfaaadda87119700597889895288b557d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:d6:6e:eb:59:39:d5:c2:03:2e:5d:c7:9b:
da:00:43:05:2c:17:a3:62:2f:83:2f:df:f3:46:00:
b4:e0:21:a6:61:17:a6:97:12:28:2a:a1:b6:ac:4d:
85:d0:b7:0d:e5:cc:e7:5b:31:fc:74:40:c4:d9:bd:
c6:07:8a:51:06:d3:b3:4e:75:fd:d5:1c:f3:80:c3:
5b:80:1d:56:00:27:04:6f:01:35:d5:c7:92:4a:08:
f8:72:70:4e:85:20:8e:9b:89:64:ff:6e:f8:b8:d2:
91:9f:1c:17:d8:c0:68:cf:24:43:ee:c4:6a:91:d8:
e8:74:4f:1a:8d:d3:bd:b7:e8:e8:57:6c:ca:69:01:
a5:0a:fe:aa:46:66:62:6a:37:e4:3d:35:ff:25:3f:
08:88:d7:05:37:d4:bd:89:ec:8c:51:85:c7:94:5d:
ae:26:f1:b3:46:75:46:88:d1:fb:6f:b9:ee:a4:e3:
5e:93:aa:0b:10:eb:2c:a8:23:3c:ad:5a:a3:ef:be:
08:89:29:51:83:e9:11:07:17:5a:99:b4:3f:13:ae:
df:3b:da:08:ee:e8:6d:7c:b6:2c:f2:8c:1a:e1:46:
47:ad:22:c1:5b:a6:8d:cc:6c:3f:02:72:47:32:44:
fb:4a:72:43:12:9a:91:7a:95:e9:ed:52:ed:d4:5a:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:ED:FA:AA:DD:A8:71:19:70:05:97:88:98:95:28:8B:55:7D:24
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5f:57:86:82:b5:ca:b1:49:50:cc:86:6d:49:1a:78:80:66:
d1:a3:0f:23:92:18:67:5b:73:5f:68:c8:28:e2:90:43:10:3c:
9b:2c:95:bf:33:81:80:93:74:62:e3:7e:48:55:f2:ac:75:dc:
63:52:38:a6:33:a9:3b:cd:07:33:3b:7a:0f:c3:a4:2a:c7:c3:
36:01:11:f3:fd:cc:27:60:b1:60:b1:02:d4:e9:f3:f0:e5:56:
44:8f:ed:20:43:3c:56:e3:a3:a8:da:e6:1f:5a:57:61:8f:00:
76:bf:11:20:b8:fa:27:be:a8:6c:1f:88:5e:11:09:62:eb:a3:
33:eb:99:8c:5c:7d:d1:78:26:d7:d3:66:10:aa:50:85:51:a1:
46:62:c9:1b:84:bf:60:be:31:11:5c:ef:01:dc:0f:55:69:2b:
41:9b:e4:05:37:b2:2e:5e:a3:f6:cc:b4:6b:11:67:93:ec:f6:
79:e9:75:d5:7e:63:73:e1:3c:c0:79:96:56:7f:45:08:52:6d:
46:0a:1f:18:72:5b:06:52:2b:7b:34:b5:df:52:8d:08:fa:b4:
75:a5:9b:43:b2:bc:0c:e1:9a:28:f1:6c:8d:f5:51:da:fc:9a:
09:1f:a6:98:07:f9:95:58:a7:7d:ab:48:b0:25:1b:07:6f:95:
9f:c9:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:29:32 2026 by rpki-client