Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: AmsSnCEvN81lhXnpyHcSPbiDjYzZXI91kd5Jd7suMBM=
Subject key identifier: F3:04:A8:F0:D0:FB:5E:B0:6A:D0:84:8C:C8:CC:04:9E:55:AA:B7:AB
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019D38D3C5811A96D4A98DA211D3E85E5D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 185E
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: HWrmqlx8/joa0Ky0ni0xug+1W5AvysWIz2p+mBv/heg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c5:81:1a:96:d4:a9:8d:a2:11:d3:e8:5e:5d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=f304a8f0d0fb5eb06ad0848cc8cc049e55aab7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:c5:d9:29:4a:3f:bc:12:3f:83:43:3a:f3:
3e:e3:af:e7:d7:06:f9:b5:b0:25:40:5f:67:78:55:
1d:76:e9:e1:45:01:51:56:e4:92:fe:8f:fd:a8:96:
09:f1:de:fa:85:9f:b2:24:55:da:c3:00:e9:86:01:
b5:09:af:03:bb:c2:dd:04:72:9a:a7:fe:11:00:71:
9f:e1:56:f9:a9:b3:31:6a:a0:dd:43:ab:d7:8f:02:
a3:69:f7:ec:3b:e4:59:89:5c:0b:df:56:5f:b5:3e:
7d:ae:36:c3:92:09:90:a2:15:4d:d6:66:26:49:4d:
df:08:97:68:25:53:8a:91:bf:00:0a:92:65:41:95:
29:55:c1:42:96:a0:0e:11:51:0b:7b:ee:7f:42:98:
b5:92:41:5d:6e:06:17:49:a6:6a:8a:ef:5f:d9:19:
85:51:ca:9e:cd:9c:b0:a3:7a:f5:5c:a2:6a:12:92:
ce:bb:e2:73:38:8c:cf:48:91:5a:ab:15:24:0d:00:
5c:94:38:72:6a:7e:a6:40:88:27:74:2d:c9:70:31:
62:13:31:c2:20:d9:1c:40:f4:fc:a4:c2:4f:29:6d:
5a:36:49:9c:21:bd:7f:34:9f:0e:3a:a9:35:0c:33:
cc:e8:59:27:a1:c4:b7:dc:11:ca:09:3e:c7:26:ae:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:A8:F0:D0:FB:5E:B0:6A:D0:84:8C:C8:CC:04:9E:55:AA:B7:AB
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:bb:ae:97:ad:8f:ff:cd:b4:6c:17:29:dd:7d:81:49:ae:
dd:4f:ea:42:26:14:66:98:67:ba:20:8e:7f:b5:22:1e:3e:8a:
18:64:b8:3d:e1:33:23:e2:cb:1b:59:db:d6:7b:69:93:e1:78:
73:cf:06:44:d1:6d:f1:ce:a2:bf:85:cd:fd:af:4b:be:e2:2b:
c1:91:2c:09:f1:e8:aa:cb:8d:c6:30:05:f6:61:2c:57:be:86:
6f:47:64:36:bf:3f:1f:af:07:ed:9e:ea:65:36:a2:1f:40:37:
1d:2d:55:41:40:55:d0:f7:4a:b6:e1:1e:e5:25:5d:e7:dd:85:
f6:9a:8d:21:2b:f4:08:d4:99:ab:87:d1:11:e6:f8:6a:04:7d:
04:ab:8f:fd:d1:d3:40:ea:82:05:86:28:74:97:eb:b4:8a:57:
a8:b3:3b:d6:85:8c:35:c0:42:91:b6:81:b0:a0:6e:92:fb:dc:
19:e5:47:13:89:2d:35:88:13:82:85:1d:19:51:04:08:70:d5:
4a:26:09:24:5b:87:31:2e:19:cf:5d:62:f3:01:82:c3:13:5a:
47:7a:31:f4:a4:35:ca:4c:a3:ab:58:0d:94:03:83:0c:5c:bf:
68:2f:f4:09:9a:7d:91:23:7c:8a:a5:66:96:a8:5d:84:bb:bb:
47:9b:52:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408WBGpbUqY2iEdPoXl2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1
YjE2OTMwHhcNMjYwMzI5MDkwMTM1WhcNMjYwMzMwMDkwMTM1WjAzMTEwLwYDVQQD
EyhmMzA0YThmMGQwZmI1ZWIwNmFkMDg0OGNjOGNjMDQ5ZTU1YWFiN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL7F2SlKP7wSP4NDOvM+46/n1wb5
tbAlQF9neFUddunhRQFRVuSS/o/9qJYJ8d76hZ+yJFXawwDphgG1Ca8Du8LdBHKa
p/4RAHGf4Vb5qbMxaqDdQ6vXjwKjaffsO+RZiVwL31ZftT59rjbDkgmQohVN1mYm
SU3fCJdoJVOKkb8ACpJlQZUpVcFClqAOEVELe+5/Qpi1kkFdbgYXSaZqiu9f2RmF
UcqezZywo3r1XKJqEpLOu+JzOIzPSJFaqxUkDQBclDhyan6mQIgndC3JcDFiEzHC
INkcQPT8pMJPKW1aNkmcIb1/NJ8OOqk1DDPM6FknocS33BHKCT7HJq4GDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMEqPDQ+16watCEjMjMBJ5VqrerMB8GA1UdIwQY
MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt
OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl
LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/W7rpet
j//NtGwXKd19gUmu3U/qQiYUZphnuiCOf7UiHj6KGGS4PeEzI+LLG1nb1ntpk+F4
c88GRNFt8c6iv4XN/a9LvuIrwZEsCfHoqsuNxjAF9mEsV76Gb0dkNr8/H68H7Z7q
ZTaiH0A3HS1VQUBV0PdKtuEe5SVd592F9pqNISv0CNSZq4fREeb4agR9BKuP/dHT
QOqCBYYodJfrtIpXqLM71oWMNcBCkbaBsKBukvvcGeVHE4ktNYgTgoUdGVEECHDV
SiYJJFuHMS4Zz11i8wGCwxNaR3ox9KQ1ykyjq1gNlAODDFy/aC/0CZp9kSN8iqVm
lqhdhLu7R5tSJg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:36 2026 by rpki-client