Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: qoZpygtByTtdayt0aicl9/gnM7Lxp0t463mgCjnaMfU=
Subject key identifier: 63:0D:88:C6:A7:17:CE:7B:19:F5:15:37:F9:F1:6F:EC:8B:FC:CF:0A
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 01A18186F4FD1A6B942FBAA92CD4F8A88F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0C00
Signing time: Wed 28 Oct 2026 08:01:07 +0000
Manifest this update: Wed 28 Oct 2026 08:01:07 +0000
Manifest next update: Thu 29 Oct 2026 08:01:07 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: yjC6hIBzwpth3pLJnpl4cL6GCMbeKKLRww9Dh5N7GdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:f4:fd:1a:6b:94:2f:ba:a9:2c:d4:f8:a8:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Oct 28 08:01:07 2026 GMT
Not After : Oct 29 08:01:07 2026 GMT
Subject: CN=630d88c6a717ce7b19f51537f9f16fec8bfccf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:d2:92:cd:22:a4:a7:c7:4b:24:d5:8a:9b:
a2:08:71:45:61:8e:21:f6:a7:56:cd:4a:19:60:65:
71:1e:29:af:81:9b:db:a7:a1:92:bf:20:7b:90:86:
49:a2:55:14:e7:25:96:c6:e6:40:08:8d:70:10:73:
86:79:c0:56:3e:7a:e7:30:6b:7e:f8:3a:47:65:55:
7f:9d:9c:27:c5:94:fa:88:b0:a0:16:1d:95:2c:d1:
61:5c:28:a3:34:62:8f:f5:a2:be:96:73:2a:9c:1a:
e8:27:1e:af:93:3b:a2:f1:64:0f:fe:33:03:bf:6d:
37:fe:35:d0:d8:fe:c2:f4:e1:0e:fd:30:79:2f:92:
f0:ce:ca:32:6e:54:0c:21:38:c2:e0:33:7e:f7:e6:
0b:db:72:69:bd:12:e1:90:16:e3:7b:e3:aa:b6:cb:
c4:b7:a3:77:ac:10:ab:1a:b8:0f:9e:01:48:08:d4:
06:09:50:7c:52:cc:9d:3b:2f:76:24:ff:3a:db:4f:
04:70:8f:a3:03:b6:27:85:d0:06:29:34:16:59:83:
fe:ff:f9:b9:8f:56:3c:79:1f:40:2f:0a:c6:18:a0:
3a:1f:6c:a1:c4:09:97:bb:a6:b0:86:f9:8c:64:2d:
4f:96:e6:4f:e0:f8:e3:08:fc:13:64:35:d1:b3:9f:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0D:88:C6:A7:17:CE:7B:19:F5:15:37:F9:F1:6F:EC:8B:FC:CF:0A
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4b:d4:5d:24:54:06:e5:8c:02:e4:8b:f2:1b:45:e2:b9:0b:
35:8b:45:d8:b9:ea:5d:20:82:cb:6d:e3:a8:27:63:cf:44:19:
40:2c:5f:25:c4:e7:8d:d8:d8:68:26:72:aa:e9:14:e3:fa:dc:
a2:62:91:63:93:ac:e6:5a:34:f0:38:f2:49:86:09:1e:3d:a9:
82:15:3b:49:bc:56:65:85:05:46:41:11:35:24:f8:25:a4:7b:
51:be:fa:c7:da:39:12:8d:9b:81:de:77:e4:ca:bc:47:56:6a:
dd:29:aa:72:6e:1e:a8:23:8d:70:89:d0:33:d6:7f:2d:22:67:
ed:a3:72:d7:73:cc:d3:57:8f:1f:fd:b5:2c:35:31:75:80:b0:
5d:f8:61:63:06:ac:cb:83:37:bc:22:87:81:07:4e:6b:87:bd:
e6:8c:8e:bf:05:60:43:80:0c:15:99:d6:4c:13:4e:38:e0:d5:
bb:5c:28:75:63:0f:1f:db:67:52:59:3a:50:b1:7b:63:70:6d:
73:f8:97:d6:d0:af:c9:82:e0:e8:aa:3b:4d:27:f5:ca:ff:cd:
80:a7:a8:1e:fe:87:f2:bb:09:fc:cc:89:f6:f0:a6:76:52:c6:
6b:a1:54:8b:84:c8:be:14:9d:c6:28:5a:03:f8:0e:64:e7:ba:
19:ef:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:28:53 2026 by rpki-client