Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: BPQG+Q0nVgYi97sw/6H+WtT60Tw9dGGvIo1BkuWbo6c=
Subject key identifier: D0:68:A6:0A:19:8B:A6:4C:F2:EC:A4:58:64:D0:85:E4:71:BB:E2:15
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019E2C5ECA4E8555F3CC213F7863057536DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 188B
Signing time: Fri 15 May 2026 16:01:09 +0000
Manifest this update: Fri 15 May 2026 16:01:09 +0000
Manifest next update: Sat 16 May 2026 16:01:09 +0000
Files and hashes: 1: 3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa (hash: uxPCNHXytdKge/y9iSVGprZRSTdqYPtpMRkCD655H48=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: ssHVo89fBLCJJcK3b/5S4slROtgAd0vlEsps/rVrZ/0=)
3: vnUbkq6bdOtokGGa949yxYTNWcY.roa (hash: 2ikmtms5uup4On475kEH1Q4kXh5i0qOSIcl3pBoLYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:5e:ca:4e:85:55:f3:cc:21:3f:78:63:05:75:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: May 15 16:01:09 2026 GMT
Not After : May 16 16:01:09 2026 GMT
Subject: CN=d068a60a198ba64cf2eca45864d085e471bbe215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:7b:ad:69:52:0c:58:a3:06:62:0d:5f:ea:
4b:46:c8:ca:7c:18:5b:37:c6:e2:9e:dd:e6:3d:eb:
0b:1a:a6:9f:40:4f:cd:31:0b:9e:af:0e:1e:ad:13:
98:ee:f1:39:d7:b8:2d:05:4a:29:5b:7e:99:5b:6c:
ba:13:6f:13:10:ba:f6:00:dd:9a:cc:25:ee:2d:20:
87:6b:6b:f5:a3:4d:95:78:7e:60:35:c5:85:df:6a:
74:81:fd:57:46:a8:16:55:53:1e:f6:d6:4b:80:de:
67:13:d7:0e:2d:7f:0d:73:e6:4f:d5:d7:7e:f0:8e:
d2:f1:8f:5e:b6:ae:99:63:75:78:8e:e9:0d:58:f6:
97:aa:5d:8c:bd:63:de:54:10:89:b0:9b:45:f5:74:
da:dd:86:3c:95:76:02:8e:71:c6:37:07:89:6c:fb:
3d:cd:72:83:4b:e3:0f:4c:be:ea:4b:5a:7d:e7:2c:
7e:a3:3e:d0:5b:3e:9d:8a:fb:aa:3b:c6:e8:37:e3:
17:9d:e5:5d:41:4b:17:3f:07:43:0d:c0:c3:5c:4e:
6e:ca:bd:67:cb:ae:a8:c9:5b:14:e9:7a:b9:2a:db:
7c:9d:69:26:cb:89:12:0b:5c:ac:19:36:48:13:4a:
0d:8b:27:67:95:96:30:1c:c4:85:d2:03:e9:a1:b3:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:A6:0A:19:8B:A6:4C:F2:EC:A4:58:64:D0:85:E4:71:BB:E2:15
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:c2:16:36:89:b1:cc:05:82:9a:db:c1:d8:6b:f9:53:ae:
89:74:85:9c:7d:66:f0:dd:32:b6:89:e0:e3:e3:c3:39:50:66:
25:71:b4:b5:54:62:32:ba:e6:04:b1:ad:15:b0:9b:27:fe:25:
30:4a:a6:0f:63:9b:b3:c8:11:0b:c4:83:25:70:56:56:c7:d1:
4d:b5:be:cc:d8:2f:22:bc:a3:08:7d:bd:14:c2:e7:24:b4:84:
40:05:fe:b0:c1:60:ad:44:d7:0c:fe:bb:ba:6a:8e:66:08:41:
ce:aa:6e:21:5d:46:cd:d8:db:63:55:f0:6d:ef:d2:77:3d:fe:
2c:9b:9c:1d:11:39:1d:51:ef:be:78:83:b9:12:66:4d:96:4b:
0f:23:64:e7:d0:97:d2:e1:14:8c:b0:39:2b:12:f9:e5:b4:c1:
be:86:5f:99:5b:5f:c5:52:ac:2d:4d:90:d9:7a:ff:ec:af:d0:
25:ac:ec:c3:27:35:d1:9a:e2:4f:47:00:c3:c2:1f:ec:79:d2:
03:55:5f:66:e5:d0:e3:e1:95:0e:e4:c9:cc:06:26:3c:52:33:
82:72:64:62:45:04:1f:90:26:a8:31:75:c8:7f:df:fa:bb:09:
16:14:65:76:2e:30:08:fb:fa:06:d0:bf:5b:7c:04:59:9a:2a:
67:13:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:47 2026 by rpki-client