Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: VmIbzkeXC+4ZUs3xf/x6EtL8T9j4qS14M9744S8Da2o=
Subject key identifier: 7B:C8:7F:56:42:32:DA:21:02:E4:0F:A0:B9:9E:E2:81:8E:62:59:C9
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 01A003942771324CCC07CEBD683C63A0880A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 197F
Signing time: Sat 15 Aug 2026 04:00:36 +0000
Manifest this update: Sat 15 Aug 2026 04:00:36 +0000
Manifest next update: Sun 16 Aug 2026 04:00:36 +0000
Files and hashes: 1: 3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa (hash: uxPCNHXytdKge/y9iSVGprZRSTdqYPtpMRkCD655H48=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: C11+xvIZ7FlR3tiiDER/vVCXADD176m+XTNRaQ4sw50=)
3: vnUbkq6bdOtokGGa949yxYTNWcY.roa (hash: 2ikmtms5uup4On475kEH1Q4kXh5i0qOSIcl3pBoLYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:27:71:32:4c:cc:07:ce:bd:68:3c:63:a0:88:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Aug 15 04:00:36 2026 GMT
Not After : Aug 16 04:00:36 2026 GMT
Subject: CN=7bc87f564232da2102e40fa0b99ee2818e6259c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:47:e2:30:a7:fb:84:f1:be:b5:44:44:36:e3:
c8:19:de:98:fe:5e:26:a4:32:eb:87:b7:4c:7f:80:
26:37:55:b2:2d:25:b8:0a:19:d3:93:69:1e:84:2f:
b6:6d:aa:52:ac:37:24:4f:22:e7:ec:fd:b0:c5:a8:
59:c7:18:62:0a:65:e7:e3:4e:7b:45:29:0e:f1:4c:
31:78:c8:a2:8d:40:49:eb:65:05:a3:6a:19:54:7f:
c4:0c:08:33:60:53:2f:a1:91:52:fb:b9:83:61:f5:
e9:1e:91:92:3b:81:bf:c9:2f:31:8b:1f:7b:77:3b:
e1:31:16:bc:b8:79:4f:0f:b8:84:bb:e5:8d:e7:5f:
f6:48:f2:e9:b9:48:78:f3:41:10:e7:50:ef:89:28:
65:ca:e7:fd:a1:e3:1d:25:11:a5:87:51:2d:25:56:
cd:6b:a5:59:91:70:c6:a6:39:83:66:2a:cd:18:96:
f0:80:0d:93:87:79:94:2b:83:c0:7d:b8:17:93:d3:
c7:61:86:f7:a2:81:9a:60:86:7e:21:4f:23:84:b2:
46:8f:a8:be:b7:e8:f8:3d:9c:c9:37:29:75:ce:32:
ae:22:09:d4:c0:2d:0f:a6:f3:55:a3:66:98:0c:e3:
0a:f7:93:ac:cc:ef:d5:db:a3:b3:db:fd:7f:9e:80:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:7F:56:42:32:DA:21:02:E4:0F:A0:B9:9E:E2:81:8E:62:59:C9
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:15:ff:ff:67:39:9f:15:cd:aa:18:a9:7f:f6:e8:44:5b:6d:
fc:eb:e6:0b:e9:b1:53:55:dd:1d:67:70:5a:b8:1e:a4:59:d3:
02:1f:d6:2a:e2:b7:2b:ff:e2:c2:8f:a6:1a:d9:91:88:14:89:
6a:a3:f8:f1:ce:35:58:d0:69:ee:4d:85:f4:cb:0f:f5:96:ad:
5b:a5:fc:c7:5a:b6:fd:48:52:91:ed:8b:8b:39:f4:df:b1:33:
50:ef:93:33:55:0a:92:3e:60:5a:c6:24:2d:98:3c:f7:b8:d3:
02:46:d5:2d:fc:94:3f:70:33:37:9a:98:5c:6c:e0:24:cf:ea:
df:fe:72:ab:d0:cb:d5:3c:90:86:bf:8d:66:e8:33:43:f0:78:
7b:81:43:fe:82:85:ad:6c:fb:28:99:54:38:84:6f:75:34:b6:
73:d6:61:a5:a6:7f:02:1d:06:b7:ce:9f:0b:7e:11:ae:d4:c2:
88:2e:4f:ca:a7:6a:e9:68:c4:b7:ab:74:5d:ac:7f:73:4a:d6:
98:50:24:dd:7a:de:aa:2a:d3:f8:c6:23:91:64:99:82:6e:0b:
eb:89:4b:ee:bc:0a:2d:28:9d:67:c9:cf:5a:6b:81:60:5b:ac:
79:bb:4c:c5:fd:3b:93:45:60:0d:47:09:b9:e1:c1:ef:f6:9a:
bd:5b:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:46:45 2026 by rpki-client