
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: /zeamfOMMD1B5hNfDWwgA7uXLlFvcwCRbA+pIfGIwvc=
Subject key identifier: 74:71:4B:6C:30:BC:5E:4E:58:6F:34:28:CC:BC:22:E6:B1:7C:A4:96
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 01A08A555D4745A577C79EFA065454BB501B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0B80
Signing time: Thu 10 Sep 2026 08:00:45 +0000
Manifest this update: Thu 10 Sep 2026 08:00:45 +0000
Manifest next update: Fri 11 Sep 2026 08:00:45 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: bfl9KpFoWvtcxoWGiIeelUhg44ttagmRssbUuz++70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:5d:47:45:a5:77:c7:9e:fa:06:54:54:bb:50:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Sep 10 08:00:45 2026 GMT
Not After : Sep 11 08:00:45 2026 GMT
Subject: CN=74714b6c30bc5e4e586f3428ccbc22e6b17ca496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:46:95:0d:cb:64:a0:2f:c6:6b:28:5f:67:
8b:f3:4b:d1:cf:f7:da:f0:4a:ef:1c:26:09:13:15:
17:00:4b:ba:42:ca:14:4c:6b:5c:06:85:57:f8:dd:
e8:77:11:4b:c2:3d:86:61:64:3e:b8:95:02:a8:ca:
17:b0:47:37:14:7c:e1:dc:8c:22:bb:aa:9c:17:97:
d5:53:7a:a7:3a:46:8e:3d:ef:9d:bd:63:db:51:9f:
dc:87:80:d0:1d:ad:ff:75:f1:d3:74:fe:69:d4:7e:
67:96:97:57:65:e1:63:34:03:05:58:bc:b3:11:dd:
93:bc:b7:a8:cd:e2:b6:d2:de:89:9a:79:95:21:20:
e1:62:a2:3b:47:ed:dc:b8:b9:2c:fd:64:c2:ce:7f:
e5:79:ff:42:db:c0:aa:a1:57:08:a7:05:42:00:28:
74:06:6f:74:29:ac:18:0c:e4:89:d5:eb:65:90:c3:
f0:7a:a8:b6:a1:07:88:f6:fd:9f:38:ca:92:b6:b8:
16:00:48:4f:37:8c:2d:92:6d:02:7f:d3:a4:ec:44:
90:2a:d9:97:89:46:be:f8:f3:c5:b5:86:1e:7f:3c:
01:77:fa:34:bb:8f:45:11:b2:5a:fe:47:a3:55:60:
f1:8e:85:40:cf:68:cb:ae:e2:58:95:14:c6:9c:0e:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:4B:6C:30:BC:5E:4E:58:6F:34:28:CC:BC:22:E6:B1:7C:A4:96
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:39:50:95:d8:8a:14:ae:91:a0:c6:90:63:74:38:46:d5:44:
07:55:69:04:a0:80:f0:aa:66:cc:60:1a:28:4a:81:82:a3:1f:
98:58:00:92:ef:08:eb:b8:c8:33:ed:d8:25:30:1e:c5:37:c0:
eb:64:b2:86:2d:7e:5c:e3:0d:f6:42:ac:4b:5c:3a:f9:5c:3e:
8a:ad:24:e4:75:79:ac:53:22:81:3d:a1:de:ae:68:10:51:3b:
c2:e3:f9:17:10:97:5d:62:09:c6:b3:42:9a:b0:2a:2b:6b:1b:
52:66:70:9c:dc:22:08:5e:4d:b8:57:c6:6e:c6:75:bb:3d:9b:
c2:bb:93:82:6e:9d:d5:dc:9a:c7:c2:fe:fa:6e:23:d2:b1:b4:
5e:f6:38:95:68:d8:4c:2b:5f:eb:39:7d:ae:31:c7:50:5f:90:
0d:c4:41:7a:bb:d7:cb:c9:f7:8b:e6:45:c7:44:96:95:62:d4:
fb:91:e0:94:ba:88:94:b1:f7:68:94:24:ce:66:53:6a:d2:e1:
1d:5c:a5:f2:38:22:98:96:1c:e0:ed:6c:07:46:cd:3f:7e:49:
bd:cb:45:01:79:b8:dd:65:c6:33:4a:83:93:41:b8:a8:a3:46:
b4:80:01:b1:ca:e0:2c:10:bb:88:5e:e5:cc:9f:d3:c8:6d:b9:
d1:4e:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:38:51 2026 by rpki-client