Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: dAAY4eOZzaqMBLXv+WCr0dEKHanFe9RywuXw2cLBSpw=
Subject key identifier: 0E:B1:70:D8:43:13:1A:78:AC:FA:CF:4F:E6:36:B6:C2:C4:B2:3E:3E
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019CE5916F7445AF06B8B148C1BF0CA7B0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 099D
Signing time: Fri 13 Mar 2026 05:00:39 +0000
Manifest this update: Fri 13 Mar 2026 05:00:39 +0000
Manifest next update: Sat 14 Mar 2026 05:00:39 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: AJXvnNFE5tiJZDgNyisU+R7R0jL+yes3g88r6sPA1FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:6f:74:45:af:06:b8:b1:48:c1:bf:0c:a7:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Mar 13 05:00:39 2026 GMT
Not After : Mar 14 05:00:39 2026 GMT
Subject: CN=0eb170d843131a78acfacf4fe636b6c2c4b23e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:0a:8f:d8:aa:d5:d0:ec:d4:fc:c3:bc:2a:
b5:d7:d5:97:ae:1e:4e:18:aa:3d:ea:a1:43:c3:aa:
23:06:db:84:2c:90:34:60:e1:23:80:f6:e2:a4:80:
69:5c:80:bd:25:9a:56:5b:36:f7:3f:b0:e4:01:61:
a8:fa:ad:a3:3a:e2:01:b8:2b:cb:96:00:dc:e3:b2:
46:24:42:08:1e:d4:e8:2d:40:4b:6a:e8:90:1c:5e:
d5:db:88:1a:ad:89:f9:e3:a8:2f:40:6a:e3:d4:ac:
d7:cc:f1:4f:32:eb:8a:01:ac:eb:c4:f5:bf:44:da:
a2:d6:24:92:4f:57:e9:40:f3:a4:b2:d4:55:6d:47:
6a:b3:27:aa:2d:ea:74:67:7d:66:59:a3:ff:ba:6c:
09:7b:2b:39:8b:44:0e:dd:05:5d:67:95:1e:44:aa:
ef:f1:fe:b7:ae:4d:91:df:9f:36:ff:b0:78:08:1b:
10:20:da:10:30:18:04:64:f3:6d:ef:4e:b7:fd:36:
3c:7d:49:28:f8:b3:e9:13:ef:d3:08:df:59:11:47:
b0:27:31:fd:68:a2:35:b5:e0:4a:11:6f:ee:02:e9:
cf:77:f3:ca:8a:11:b0:2e:85:66:e2:99:75:3d:55:
55:53:0d:44:a8:75:ad:7f:2c:a5:f3:36:4d:fb:a8:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B1:70:D8:43:13:1A:78:AC:FA:CF:4F:E6:36:B6:C2:C4:B2:3E:3E
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:a9:df:e1:c0:51:24:ec:b9:64:6c:dc:06:7e:64:82:5a:
77:fa:64:ac:94:20:25:01:f3:1a:d8:6a:9b:4f:09:e4:bd:1e:
57:2f:e2:d0:e9:f2:4b:5c:86:ae:06:47:85:a5:f4:8c:1c:fd:
7e:56:c0:84:6a:e8:1c:09:12:1e:91:86:54:d5:52:61:2c:b8:
91:45:32:bd:6a:8e:47:fd:ad:68:7f:31:6a:d9:d8:dc:f3:7d:
ce:71:41:ff:f3:22:0e:ec:fd:66:78:2a:db:14:4f:97:04:95:
88:86:81:39:35:f3:35:50:10:aa:19:91:2e:41:69:ee:cb:53:
41:92:bc:8a:08:34:71:98:e5:86:7d:42:72:9f:a5:59:4d:91:
ea:cc:aa:11:32:5b:79:45:a0:4c:73:cc:1b:19:59:15:f8:e7:
1f:cd:2e:2d:a7:63:5f:e2:8a:b2:f3:38:62:cf:3c:c8:be:4f:
32:50:5f:34:68:36:be:ae:58:8c:19:76:9a:27:a0:2c:a7:ba:
6e:aa:47:3e:cb:50:3c:28:02:6e:00:b3:11:ae:f5:e9:7f:60:
c1:d6:f3:21:f7:c4:e1:8f:1a:d5:d1:6e:0c:66:27:8d:72:66:
ba:33:71:65:2a:5c:20:bc:fd:ad:46:8a:e0:3e:ae:e4:f3:cd:
9d:80:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:52:38 2026 by rpki-client