Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: XDPgxQh5mjtTL5SiD9458j7//LxAbnx8brvHwZN26fM=
Subject key identifier: E9:5D:48:2B:D0:B3:11:E9:AC:84:BA:90:AB:DC:70:71:CF:FB:88:51
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 01A14C1998FE782EBB3AEF21F2B22E4BED6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 23:01:48 +0000
Manifest this update: Sat 17 Oct 2026 23:01:48 +0000
Manifest next update: Sun 18 Oct 2026 23:01:48 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: h3IKlRaEvWvcyTlEo8QuOd9MwFHwlgsUVz4Xj3BIHs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:19:98:fe:78:2e:bb:3a:ef:21:f2:b2:2e:4b:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Oct 17 23:01:48 2026 GMT
Not After : Oct 18 23:01:48 2026 GMT
Subject: CN=e95d482bd0b311e9ac84ba90abdc7071cffb8851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:55:cc:dd:9f:ae:ed:d3:d4:17:31:67:cc:
cf:27:1c:f1:db:67:48:33:08:72:3a:b0:a4:21:b3:
79:f6:ed:5d:48:64:0c:fe:9a:19:71:de:ce:00:01:
80:ae:c7:9c:0f:82:9d:57:a8:3c:38:99:c9:fc:b9:
6f:09:1b:e4:88:26:23:26:07:27:8f:7c:27:bf:ca:
33:b1:29:b1:76:97:20:72:59:90:c9:1f:04:ff:d3:
8e:31:6a:f9:a5:09:ba:ea:30:14:5c:c2:37:f2:c5:
e3:49:30:0b:28:cf:96:14:07:ce:0e:04:e2:d3:81:
1d:ed:53:95:6e:39:6c:75:2a:72:fc:3d:bf:9c:28:
78:d9:20:39:c1:29:7c:af:32:2c:9d:63:82:6a:dd:
6e:14:73:3e:c8:fd:6c:94:1c:ff:16:37:33:6b:42:
7a:45:d2:be:ce:90:00:64:6a:57:dc:e3:1c:c4:a0:
8e:83:11:2f:2a:95:8d:45:d6:c9:99:48:95:2b:58:
11:ab:91:22:a1:d7:d3:da:aa:33:46:11:44:0d:d2:
71:5d:5c:d3:4d:d5:82:c9:04:96:21:7d:ec:c0:07:
5e:7f:bf:c2:ee:dd:34:46:c9:9a:f7:06:f0:1e:db:
c0:46:71:ca:86:8b:62:cd:31:c6:0f:6d:bc:4c:ad:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5D:48:2B:D0:B3:11:E9:AC:84:BA:90:AB:DC:70:71:CF:FB:88:51
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:78:b3:46:74:d9:63:b8:78:11:f2:0e:a8:fa:8a:3c:ca:94:
29:b4:d7:a4:cc:c6:29:5e:e8:7c:04:eb:34:b0:af:49:50:7c:
7d:44:de:7f:41:91:48:17:08:b9:bf:7e:96:4d:36:d0:d4:a4:
37:d6:4d:61:1c:d8:da:14:94:8c:47:26:29:0f:60:de:43:76:
be:72:ed:1f:0c:40:27:f1:54:83:c6:ea:0e:ce:de:87:6b:de:
95:f9:33:c0:bb:d4:7b:cb:27:bf:d1:59:25:73:f6:1f:ad:39:
77:67:b1:cd:a9:bd:b8:b1:a5:27:17:a0:98:0c:b6:a4:c3:5f:
e3:38:9b:05:1a:9b:5c:42:7a:9c:a1:4c:aa:b9:04:17:a9:d4:
4a:92:67:6b:b8:9c:3b:ef:14:9f:e5:a9:56:25:ed:23:c8:76:
58:06:c0:de:9b:7d:69:98:2f:e1:e9:02:c4:b2:55:90:f1:54:
88:8b:3c:82:0f:bd:d8:d0:d9:87:21:b4:9a:9c:b4:98:e8:2b:
1e:f4:2d:de:9e:b9:85:d0:c2:dc:66:c7:be:5c:d7:aa:43:d6:
c8:c1:77:fb:22:5b:e1:25:66:9b:3a:18:28:08:02:5e:89:4e:
e4:1d:3d:e6:a9:c3:26:6f:52:63:5b:55:db:51:b8:ee:22:ed:
c2:c0:42:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMGZj+eC67Ou8h8rIuS+1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk
ZmVjZmEwHhcNMjYxMDE3MjMwMTQ4WhcNMjYxMDE4MjMwMTQ4WjAzMTEwLwYDVQQD
EyhlOTVkNDgyYmQwYjMxMWU5YWM4NGJhOTBhYmRjNzA3MWNmZmI4ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmRVzN2fru3T1BcxZ8zPJxzx22dI
MwhyOrCkIbN59u1dSGQM/poZcd7OAAGArsecD4KdV6g8OJnJ/LlvCRvkiCYjJgcn
j3wnv8ozsSmxdpcgclmQyR8E/9OOMWr5pQm66jAUXMI38sXjSTALKM+WFAfODgTi
04Ed7VOVbjlsdSpy/D2/nCh42SA5wSl8rzIsnWOCat1uFHM+yP1slBz/Fjcza0J6
RdK+zpAAZGpX3OMcxKCOgxEvKpWNRdbJmUiVK1gRq5EiodfT2qozRhFEDdJxXVzT
TdWCyQSWIX3swAdef7/C7t00Rsma9wbwHtvARnHKhotizTHGD228TK1zNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOldSCvQsxHprIS6kKvccHHP+4hRMB8GA1UdIwQY
MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt
MWYxNGVjODA1MzkwLzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw
LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHizRnTZ
Y7h4EfIOqPqKPMqUKbTXpMzGKV7ofATrNLCvSVB8fUTef0GRSBcIub9+lk020NSk
N9ZNYRzY2hSUjEcmKQ9g3kN2vnLtHwxAJ/FUg8bqDs7eh2velfkzwLvUe8snv9FZ
JXP2H605d2exzam9uLGlJxegmAy2pMNf4zibBRqbXEJ6nKFMqrkEF6nUSpJna7ic
O+8Un+WpViXtI8h2WAbA3pt9aZgv4ekCxLJVkPFUiIs8gg+92NDZhyG0mpy0mOgr
HvQt3p65hdDC3GbHvlzXqkPWyMF3+yJb4SVmmzoYKAgCXolO5B095qnDJm9SY1tV
21G47iLtwsBChQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:18:32 2026 by rpki-client