Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: D6vFmMLmZChgfjchndZxcgO/UNq9ztMqlBJENv50khE=
Subject key identifier: 7B:E3:4C:42:FC:BE:9D:16:AE:16:92:1A:93:DB:C4:EB:E6:7A:46:D6
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 01A001DD832A351D74B128F46FE4A80B662B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 20:01:29 +0000
Manifest this update: Fri 14 Aug 2026 20:01:29 +0000
Manifest next update: Sat 15 Aug 2026 20:01:29 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: fXaOVEXpVy8BzT3IkHonMlVZV6OG+qWVRNHH2AGeFiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:83:2a:35:1d:74:b1:28:f4:6f:e4:a8:0b:66:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Aug 14 20:01:29 2026 GMT
Not After : Aug 15 20:01:29 2026 GMT
Subject: CN=7be34c42fcbe9d16ae16921a93dbc4ebe67a46d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:f1:a5:e0:5d:a2:07:12:ee:70:83:85:e8:
1d:d8:6f:30:2f:e4:02:b5:c9:e5:14:5b:6c:f6:eb:
f5:ba:f4:58:5a:9b:f7:7b:cb:6b:26:9d:ba:9d:73:
3a:43:67:11:62:68:e8:ea:f3:5c:92:c5:d6:f3:c4:
08:ee:64:52:7c:90:ea:45:27:f5:58:c2:46:d0:2e:
f6:55:11:f2:be:b0:41:a6:9c:ee:22:9a:69:38:58:
e9:9c:5d:3e:41:f7:d9:59:c3:af:e2:77:bf:83:cc:
99:60:7f:9a:66:b5:c6:b1:07:91:d7:41:d7:93:b1:
36:0f:00:d6:f7:6d:e5:cd:6a:58:de:0f:55:57:a5:
50:76:2c:ec:f0:ed:89:42:8d:5a:d0:8a:8f:4e:15:
c5:6e:1a:7e:99:ed:c2:34:14:27:72:86:89:51:82:
05:3b:10:a1:4f:3e:1e:52:9a:87:01:fb:26:9f:1d:
e8:30:73:d7:39:35:c6:af:86:c5:26:9e:62:e0:d7:
01:d6:d6:9f:a5:a5:0c:5e:aa:c1:e3:d6:0a:47:9a:
9d:be:bf:83:17:02:0d:d3:8d:01:47:c7:57:03:e0:
ec:e6:99:a8:dd:76:4f:be:4e:30:b7:d7:5e:10:8f:
c8:91:84:cd:cd:d0:3f:36:5a:58:bd:79:19:c7:86:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:4C:42:FC:BE:9D:16:AE:16:92:1A:93:DB:C4:EB:E6:7A:46:D6
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a0:60:e6:ae:e2:00:53:a3:de:db:a3:77:ab:1b:75:8c:be:
70:37:49:90:93:18:a5:58:d2:3a:ef:da:57:dd:80:f2:21:95:
df:0c:8b:fd:fc:d7:56:2d:02:83:1f:c3:22:42:64:ec:aa:66:
33:ae:2a:2f:81:c8:c1:bf:45:87:cb:76:7e:da:97:ac:e3:5b:
93:df:9d:45:30:3c:a2:e1:e0:2c:3a:4b:d2:8e:e4:11:52:7a:
43:a9:fe:36:5b:96:c9:6a:a5:c7:3f:14:2e:0d:4b:4b:8f:c1:
6a:34:b9:8c:27:6b:e2:7a:86:f5:85:b2:63:eb:d2:54:66:49:
98:8c:47:ee:9d:6c:71:28:80:18:fb:48:b2:65:fe:e7:bb:73:
68:2c:9c:aa:86:07:58:b1:43:69:27:c7:b0:85:d9:b6:0d:c2:
e2:43:ef:62:5d:32:de:38:d8:4b:d7:cc:66:9f:74:15:54:21:
62:19:09:ac:15:cb:70:7d:b1:85:c3:e2:3c:89:1c:49:8a:95:
81:7a:d7:dd:ed:af:a3:97:ea:34:34:6b:44:bc:34:85:3b:d7:
99:28:41:3e:ae:9f:cf:0c:b9:9a:6c:b3:cd:fa:0d:5c:1a:43:
8b:69:27:72:ab:fc:af:d2:b9:40:d2:e8:5a:3b:a1:a6:14:48:
a5:a9:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:15 2026 by rpki-client