Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: yrCFrWQf627Wy/tBFGIQ1aqDYK2lvtqllIirQFUA1mg=
Subject key identifier: 0E:64:5D:CC:8E:82:5F:94:FF:37:D0:64:DE:B7:49:29:90:2C:9A:07
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019D3752AE15A566EBCD4DEBA732B831B861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: yHIrsUGVrLdDbNjuySf8q71ZZHte6H1jduG5sFyVQwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ae:15:a5:66:eb:cd:4d:eb:a7:32:b8:31:b8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=0e645dcc8e825f94ff37d064deb74929902c9a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:b4:c4:ef:4e:d7:c3:59:70:1c:c8:e2:bd:
e7:c6:4d:b1:09:8f:af:71:6e:3c:6b:e9:ec:66:48:
6f:3b:25:54:08:b3:8e:f8:21:d6:9f:e5:5c:74:62:
fd:57:50:fc:a0:2e:d9:5d:4e:fe:8e:bf:24:5e:aa:
d1:9d:97:94:c2:b3:2b:48:40:4f:5d:16:94:b6:d9:
a0:71:0a:bf:c9:07:90:78:23:50:b1:08:40:81:84:
ec:18:09:84:98:a9:f2:d2:51:8d:c0:79:79:ff:88:
6d:a7:a2:5c:dc:28:29:a2:19:56:62:34:0d:fd:3d:
d4:1e:9e:21:3b:13:f2:92:af:a4:13:81:43:8f:0e:
45:af:bd:ea:94:24:00:f4:ae:22:16:cd:a2:ed:75:
ca:8c:ca:aa:72:95:78:3e:70:6c:8e:e6:0c:6a:55:
cf:c3:d4:69:e7:67:d1:a3:10:b4:e0:75:3a:27:75:
2a:85:8a:e9:63:fb:83:cb:df:d9:2d:e2:20:fb:6f:
87:fe:09:31:66:f6:a5:bd:aa:51:2c:dc:2d:b2:41:
01:38:87:06:a9:49:ae:ba:7e:a3:36:4e:6a:ef:4c:
50:10:28:fc:7e:b7:b7:e2:26:a2:6a:76:96:12:12:
34:20:a3:82:85:56:61:8d:0c:78:5e:47:77:d4:4c:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:5D:CC:8E:82:5F:94:FF:37:D0:64:DE:B7:49:29:90:2C:9A:07
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7c:26:70:b1:db:5d:6a:19:fb:59:6c:1c:73:f4:e5:5a:f9:
3f:44:c3:70:83:a4:e6:0e:be:dc:43:bf:72:0b:41:07:e7:15:
1e:0f:54:9a:1c:07:34:97:60:aa:50:0a:cb:91:5b:79:5f:f5:
01:a6:54:af:0d:ae:ca:2c:6c:ed:1f:70:5d:a0:e9:87:06:28:
07:56:a5:0f:1c:1c:40:fa:4e:4e:c5:ea:4f:c9:51:ad:26:39:
fd:dc:08:9c:ac:3b:e2:45:50:df:a2:49:f2:20:68:9f:86:34:
f4:57:25:3e:1f:78:94:ca:ee:35:04:a3:62:65:67:fb:8c:57:
06:a7:fe:f9:24:22:b7:e2:07:c2:ec:25:7e:7e:7b:df:71:91:
9d:42:86:48:c2:c1:05:03:9f:82:4c:b4:4a:b3:d9:ab:5e:81:
bd:fb:b9:fd:2b:d0:1a:40:4c:1f:18:1b:8e:4e:c9:3d:d6:4a:
57:01:ac:a2:e2:c0:d8:25:f3:79:36:d9:ba:b6:90:eb:5a:70:
9b:2f:21:b2:10:8a:b1:bb:60:f4:91:46:6d:46:16:7a:28:8d:
0c:fe:7e:74:de:33:28:f3:c8:d1:bb:b4:6d:2f:22:21:ff:b5:
74:e0:6f:98:16:fa:ff:63:bb:02:b4:a9:b8:d2:d3:1d:33:b5:
70:b8:af:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uq4VpWbrzU3rpzK4MbhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk
ZmVjZmEwHhcNMjYwMzI5MDIwMDU4WhcNMjYwMzMwMDIwMDU4WjAzMTEwLwYDVQQD
EygwZTY0NWRjYzhlODI1Zjk0ZmYzN2QwNjRkZWI3NDkyOTkwMmM5YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5i0xO9O18NZcBzI4r3nxk2xCY+v
cW48a+nsZkhvOyVUCLOO+CHWn+VcdGL9V1D8oC7ZXU7+jr8kXqrRnZeUwrMrSEBP
XRaUttmgcQq/yQeQeCNQsQhAgYTsGAmEmKny0lGNwHl5/4htp6Jc3CgpohlWYjQN
/T3UHp4hOxPykq+kE4FDjw5Fr73qlCQA9K4iFs2i7XXKjMqqcpV4PnBsjuYMalXP
w9Rp52fRoxC04HU6J3UqhYrpY/uDy9/ZLeIg+2+H/gkxZvalvapRLNwtskEBOIcG
qUmuun6jNk5q70xQECj8fre34iaianaWEhI0IKOChVZhjQx4Xkd31EyWAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5kXcyOgl+U/zfQZN63SSmQLJoHMB8GA1UdIwQY
MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt
MWYxNGVjODA1MzkwLzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw
LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3wmcLHb
XWoZ+1lsHHP05Vr5P0TDcIOk5g6+3EO/cgtBB+cVHg9UmhwHNJdgqlAKy5FbeV/1
AaZUrw2uyixs7R9wXaDphwYoB1alDxwcQPpOTsXqT8lRrSY5/dwInKw74kVQ36JJ
8iBon4Y09FclPh94lMruNQSjYmVn+4xXBqf++SQit+IHwuwlfn5733GRnUKGSMLB
BQOfgky0SrPZq16Bvfu5/SvQGkBMHxgbjk7JPdZKVwGsouLA2CXzeTbZuraQ61pw
my8hshCKsbtg9JFGbUYWeiiNDP5+dN4zKPPI0bu0bS8iIf+1dOBvmBb6/2O7ArSp
uNLTHTO1cLivbw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:32 2026 by rpki-client