Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: O9JG9YE0qyGmk9A+ncd3IObsTSm+TmSU27L7gJnPdxI=
Subject key identifier: 95:89:D2:56:8E:88:7E:03:95:BF:A5:34:15:54:1F:64:5B:7B:0A:87
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019DCD4F7A6A691B754742954BF677274503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0A15
Signing time: Mon 27 Apr 2026 05:00:31 +0000
Manifest this update: Mon 27 Apr 2026 05:00:31 +0000
Manifest next update: Tue 28 Apr 2026 05:00:31 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: Kg6X4B+FJSRLXKem2ZVr/o89tnpTiOZgIK4ljyTw7cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:7a:6a:69:1b:75:47:42:95:4b:f6:77:27:45:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Apr 27 05:00:31 2026 GMT
Not After : Apr 28 05:00:31 2026 GMT
Subject: CN=9589d2568e887e0395bfa53415541f645b7b0a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:0c:02:eb:fe:d9:86:fa:34:c9:14:87:6e:
6f:99:a5:2f:78:4e:9f:53:6d:b4:49:40:7e:3e:ae:
57:92:d6:c9:6e:24:e1:8c:89:44:10:3a:61:20:3d:
8c:ff:d3:aa:bd:40:af:31:bf:8f:2c:2a:87:26:f8:
73:0a:42:22:df:0e:cf:6f:da:2d:63:ad:1a:32:12:
d7:e7:92:2d:1f:70:c8:57:a0:fc:87:7d:eb:d1:0d:
f2:eb:16:11:29:2f:27:16:d8:f2:55:f9:9a:d7:a0:
a4:6f:af:f5:c3:18:a3:ba:36:e3:3e:76:57:45:a3:
63:a4:77:f2:86:6a:36:4b:cd:9b:50:d3:74:a0:02:
75:32:67:bd:04:12:b7:f2:32:26:5b:e2:28:ff:5f:
33:a6:f2:01:20:fe:a4:84:8a:c1:3f:80:16:2d:f8:
3a:c5:af:6e:3a:91:11:52:05:47:d4:1c:0d:26:8b:
e5:05:63:a7:f0:91:1e:af:8b:0d:28:13:b6:2f:62:
dd:49:df:5f:26:5f:fb:71:a1:1c:bb:04:1a:0e:ef:
31:21:09:fa:49:01:7f:31:05:95:14:20:27:80:ad:
af:7f:8a:c0:e7:f5:87:d1:d6:e5:0d:7a:aa:d8:8d:
20:aa:65:66:2b:4a:45:ab:b3:5b:82:10:d0:50:0a:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:89:D2:56:8E:88:7E:03:95:BF:A5:34:15:54:1F:64:5B:7B:0A:87
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:17:54:0c:4d:31:cb:f1:38:46:e0:c3:5c:8e:8d:46:7e:b8:
8b:37:f0:fc:de:b4:aa:ba:a6:6a:36:b1:8b:03:ad:6b:79:9b:
66:9a:0b:57:75:8f:b4:40:20:1b:90:16:08:f4:cc:79:5b:28:
7b:37:91:5b:1e:0b:fd:71:57:28:c9:77:ff:a6:d4:84:6e:84:
ca:0c:73:ff:62:a2:9e:92:2a:a2:cb:5e:be:98:ca:ab:2b:db:
64:cb:41:8c:97:0a:97:31:fd:af:72:2a:cd:3c:45:bd:c0:de:
9b:11:55:15:a7:b6:96:05:7d:04:52:58:3e:51:8f:64:03:ef:
05:d4:a0:0f:f4:a2:5c:66:35:21:60:d1:a7:91:a5:25:6d:c8:
c9:fc:ec:d7:18:0a:98:7f:3c:2d:61:35:3a:36:e9:62:ec:73:
2c:f6:33:9d:4d:92:d0:d8:4d:f1:6d:f7:5b:15:c7:cd:8a:a3:
68:08:5b:55:5e:be:72:d3:bf:fe:89:61:74:04:23:3e:10:29:
aa:7d:d9:dd:c1:ce:99:5a:d5:bd:3c:b8:2c:1a:ad:7c:48:30:
24:68:6c:8f:51:4c:05:9b:0d:da:91:bb:af:81:0b:9f:e7:f6:
c2:7d:f5:d4:f2:20:c0:40:46:58:07:1c:23:3a:58:c5:ee:25:
20:1d:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:33:56 2026 by rpki-client