Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: dwwO6osaI7xKcQx+cyVs2g1GTn1v6atCaOcVYkLyxn0=
Subject key identifier: F3:06:E6:CC:5C:FA:A3:E5:80:98:B5:8C:82:98:A3:E3:2C:2C:83:27
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019CB7A62CD10C2DB52073B0179ADA345623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 184D
Signing time: Wed 04 Mar 2026 07:00:46 +0000
Manifest this update: Wed 04 Mar 2026 07:00:46 +0000
Manifest next update: Thu 05 Mar 2026 07:00:46 +0000
Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: lGMzUBRWe9ZL9oJWxY9F5CZad2yyFpiptCHMdKCAVbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:a6:2c:d1:0c:2d:b5:20:73:b0:17:9a:da:34:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Mar 4 07:00:46 2026 GMT
Not After : Mar 5 07:00:46 2026 GMT
Subject: CN=f306e6cc5cfaa3e58098b58c8298a3e32c2c8327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:b7:f5:f6:bd:09:2e:9e:72:ff:27:bd:dd:
8a:b9:01:6c:17:fc:f1:5c:a9:5a:01:27:26:48:8d:
08:2b:f9:74:d5:c6:7a:cc:88:35:58:29:56:fb:16:
92:e0:93:5c:15:0c:4e:c3:58:08:48:f7:41:42:ff:
be:11:26:79:4b:13:ab:5b:85:0d:75:72:a4:24:89:
d0:77:e5:15:9a:1e:ee:40:82:a4:7a:4b:a8:d8:56:
5e:bc:3d:b3:4b:68:82:9d:ca:db:e3:37:b3:cd:1a:
dc:dc:bb:52:d3:7b:17:f5:d5:97:d8:67:8d:c1:d2:
91:a5:d6:54:f7:ed:28:4c:47:cf:68:ce:61:9c:87:
53:c6:75:0d:54:65:57:33:f7:87:06:06:fe:01:18:
0f:47:84:3e:a7:a5:d3:8b:37:b1:f4:30:01:ad:5e:
f5:2b:67:b3:11:f5:8e:9a:4a:da:16:57:70:b6:62:
46:76:a7:fb:33:be:70:3a:cf:5f:93:b5:24:38:f5:
36:29:d9:e5:7c:6d:60:c9:35:da:d5:40:49:40:23:
6a:4a:41:cd:aa:1e:26:f4:d3:1a:28:78:a1:55:fd:
ba:bc:53:6d:ff:49:f5:1a:44:a2:e1:49:9a:4b:f4:
62:b4:3c:58:0c:7c:55:a7:27:a2:84:08:01:4c:6e:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:06:E6:CC:5C:FA:A3:E5:80:98:B5:8C:82:98:A3:E3:2C:2C:83:27
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a1:3b:a6:25:ce:37:8a:aa:bc:1c:37:a8:25:42:f0:96:23:
03:50:43:03:ec:cc:d6:79:a8:d0:92:c4:0e:4d:50:9b:1b:1c:
09:77:de:f5:5f:5e:d9:af:b0:bc:4f:a4:4b:b9:71:29:83:d1:
de:3c:e5:a3:5f:c2:86:9f:7a:1b:27:fc:8d:db:0f:50:28:74:
5d:00:c6:9a:3a:5e:4d:d1:ea:e5:75:1c:17:b3:25:12:43:47:
e8:5c:f9:f6:41:e7:12:8b:87:0d:22:75:c0:f2:89:77:ce:80:
a9:52:d7:b1:af:22:28:44:21:e1:c2:0f:75:31:45:b8:be:9c:
ef:7d:cd:ac:25:ee:e8:6f:7e:3a:57:28:d7:5c:d0:1d:1e:0a:
ad:f2:16:1e:ff:e9:c8:fb:65:fa:bd:51:52:0b:c5:71:1a:c8:
34:4c:63:cb:87:0b:d9:b9:62:19:3d:36:23:58:f5:6d:07:fa:
67:bb:b7:22:d1:93:34:68:87:65:f1:a3:61:f7:13:49:f8:f2:
86:9f:c4:29:bb:f9:c8:91:1c:24:29:f4:47:8c:86:17:e1:2b:
e4:44:25:dd:23:6c:bf:d8:85:2b:35:25:94:c6:fc:5c:16:dd:
52:9c:ad:3e:fb:e7:ae:eb:36:7e:51:c0:b1:14:56:18:16:7f:
87:85:c1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy3pizRDC21IHOwF5raNFYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi
NjBkZGEwHhcNMjYwMzA0MDcwMDQ2WhcNMjYwMzA1MDcwMDQ2WjAzMTEwLwYDVQQD
EyhmMzA2ZTZjYzVjZmFhM2U1ODA5OGI1OGM4Mjk4YTNlMzJjMmM4MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX639fa9CS6ecv8nvd2KuQFsF/zx
XKlaAScmSI0IK/l01cZ6zIg1WClW+xaS4JNcFQxOw1gISPdBQv++ESZ5SxOrW4UN
dXKkJInQd+UVmh7uQIKkekuo2FZevD2zS2iCncrb4zezzRrc3LtS03sX9dWX2GeN
wdKRpdZU9+0oTEfPaM5hnIdTxnUNVGVXM/eHBgb+ARgPR4Q+p6XTizex9DABrV71
K2ezEfWOmkraFldwtmJGdqf7M75wOs9fk7UkOPU2KdnlfG1gyTXa1UBJQCNqSkHN
qh4m9NMaKHihVf26vFNt/0n1GkSi4UmaS/RitDxYDHxVpyeihAgBTG7HEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMG5sxc+qPlgJi1jIKYo+MsLIMnMB8GA1UdIwQY
MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt
YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi
LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaE7piXO
N4qqvBw3qCVC8JYjA1BDA+zM1nmo0JLEDk1QmxscCXfe9V9e2a+wvE+kS7lxKYPR
3jzlo1/Chp96Gyf8jdsPUCh0XQDGmjpeTdHq5XUcF7MlEkNH6Fz59kHnEouHDSJ1
wPKJd86AqVLXsa8iKEQh4cIPdTFFuL6c733NrCXu6G9+Olco11zQHR4KrfIWHv/p
yPtl+r1RUgvFcRrINExjy4cL2bliGT02I1j1bQf6Z7u3ItGTNGiHZfGjYfcTSfjy
hp/EKbv5yJEcJCn0R4yGF+Er5EQl3SNsv9iFKzUllMb8XBbdUpytPvvnrus2flHA
sRRWGBZ/h4XBRQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:06:33 2026 by rpki-client