Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: i0JF1o2LB4mc4QgJj00ISXblq3a5wS6Z2NLOHVtKnRo=
Subject key identifier: 56:D7:00:64:AF:A5:CB:1A:E7:91:A4:A1:C3:22:27:EF:72:90:94:D6
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019DA152B3C6165DD13274D67FAD405D6AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 18C6
Signing time: Sat 18 Apr 2026 16:00:44 +0000
Manifest this update: Sat 18 Apr 2026 16:00:44 +0000
Manifest next update: Sun 19 Apr 2026 16:00:44 +0000
Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: MAbr2LlbVQkPAFJBqWcYvn187++RSDvhdXiHzQb/3IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:52:b3:c6:16:5d:d1:32:74:d6:7f:ad:40:5d:6a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Apr 18 16:00:44 2026 GMT
Not After : Apr 19 16:00:44 2026 GMT
Subject: CN=56d70064afa5cb1ae791a4a1c32227ef729094d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:a6:67:7c:29:11:d5:63:4c:de:86:2d:a9:
c8:eb:a3:67:6e:aa:c5:7d:64:52:b7:ce:fb:cd:e7:
57:32:dd:57:b5:8e:96:e4:26:09:f9:0b:94:c0:79:
b7:ba:31:f5:73:32:db:61:0c:0a:9f:b8:59:06:0a:
1b:80:dd:bb:0f:02:7d:e9:2b:d7:aa:7d:b3:9b:bb:
94:3f:f9:04:a8:bb:58:40:3a:5e:dc:06:5c:95:0d:
07:a9:42:99:a1:6b:48:91:c9:59:b1:53:3b:30:37:
f8:e4:a5:14:bd:bd:c8:64:0b:eb:a3:07:ac:93:73:
66:cf:f7:79:9b:6f:95:d1:09:af:ce:e9:07:4a:72:
b7:4f:cb:04:3d:a6:5c:29:e8:18:82:02:cb:9a:8b:
e3:97:0b:7f:45:82:05:75:d0:e6:99:d4:4f:df:78:
83:c4:8d:af:2d:82:12:f8:d6:89:b8:f8:4e:5a:ea:
a6:22:ae:ae:93:64:01:aa:3b:45:28:b9:45:f9:e5:
f0:d4:c4:68:b7:f2:9a:f3:ec:71:e6:7b:c7:df:60:
37:1d:89:cd:7d:3a:c4:55:df:97:3e:7d:8b:87:4a:
17:8f:5e:1a:de:84:1b:46:88:0f:cd:05:d6:8a:f3:
64:0c:f4:69:eb:c3:0f:d9:08:ea:db:f1:9d:89:5f:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D7:00:64:AF:A5:CB:1A:E7:91:A4:A1:C3:22:27:EF:72:90:94:D6
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:63:44:31:c9:e0:d1:92:1c:32:97:34:2e:2c:2a:3e:91:59:
3e:94:cf:32:dc:6c:61:11:b4:e7:2b:c8:c6:c8:c7:7d:d0:53:
ae:85:33:1e:d1:58:af:03:9a:16:31:79:6b:90:f2:21:35:d1:
4d:4e:38:da:9c:22:fa:c4:eb:1a:c4:ad:61:75:aa:f8:5a:ea:
3e:9a:3d:4e:ec:0f:0d:5d:05:0d:f5:6c:d6:bf:b7:8d:2d:c6:
c6:8a:f6:46:eb:d5:07:0b:e4:66:97:d4:40:aa:57:e4:3a:96:
58:53:8b:33:ed:cd:db:b0:69:b5:d5:8a:8b:40:09:a4:6e:67:
f5:5c:1a:cb:a9:40:45:12:13:e1:f0:d6:f2:2d:24:f3:01:10:
4c:38:64:f4:c8:52:35:e3:c1:d7:94:f9:c3:a6:63:82:46:53:
1b:0a:44:fe:c2:50:da:6b:55:16:d7:aa:8a:02:b7:e7:cf:dd:
cb:ba:9e:75:f5:f6:55:2a:09:60:da:aa:2d:cb:aa:48:eb:86:
e4:42:1f:1b:5f:83:88:85:88:a8:f2:14:f2:ca:79:ed:2b:0e:
b3:5c:56:e4:de:8c:a2:a4:32:f9:20:e6:9c:86:ba:ba:4f:27:
c1:40:b1:b9:ad:9b:4a:8f:20:06:c9:7c:f5:7b:36:26:07:dc:
f9:b9:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:52 2026 by rpki-client