Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: 3IfU5i3ZqAxBWfmFAgqKN3uV5AR7DggZka+2qcq2jf8=
Subject key identifier: FB:97:AE:3F:38:B0:F8:52:2E:0E:2B:C0:CD:48:F4:A2:07:AD:A3:39
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019D382DF0C548B38D74D86F486DBFECC32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 135B
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: cSKDwPxDVXXkk_flq4GHJup7ieU.roa (hash: W0F3HzF5Oug74ick2FDUWrm4omprJ/KY32MOgnvN5+U=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: efgUR2myGEFsy2ocz3BM7rhpO0bvciw2QIGAMUq4lOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f0:c5:48:b3:8d:74:d8:6f:48:6d:bf:ec:c3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=fb97ae3f38b0f8522e0e2bc0cd48f4a207ada339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:92:ec:63:2c:41:7e:23:61:2d:6a:6e:1c:
c3:64:b1:0f:05:46:a9:29:2f:a7:44:40:81:fe:f4:
87:3a:f6:4d:85:0e:fc:56:66:8c:ba:57:42:2b:0b:
7a:4b:5d:10:f5:ae:3c:0d:64:66:8e:3d:df:9f:fe:
1d:ee:e8:cb:0f:ad:77:13:15:9e:4b:e4:b4:a4:26:
8c:62:af:2d:24:0f:a8:f4:95:fe:25:ea:54:b6:f8:
a9:48:3a:ee:0d:1b:16:32:7b:32:69:80:66:44:66:
0e:77:6d:49:23:82:ef:cb:9a:50:99:d3:aa:f2:1f:
93:47:6a:43:9b:ff:ca:7d:6d:22:47:0a:b1:14:71:
37:19:3c:5f:b8:e9:7a:ab:1d:47:9d:e4:78:9d:f8:
42:ab:ef:87:08:97:52:47:8b:3a:c2:74:3e:1c:f2:
36:20:d6:b7:96:fa:9c:b2:04:d4:e1:ef:35:d5:d1:
29:f0:82:8b:20:43:40:62:93:da:dd:5b:3a:12:82:
50:72:96:1b:f6:4f:b1:e1:49:20:14:df:2b:1b:9b:
7e:27:03:2e:7c:5b:6b:e4:9e:23:e9:a6:3d:39:eb:
98:0b:ee:a9:75:65:65:4b:e8:3f:57:81:51:7e:8e:
34:f8:5f:38:fb:c6:0d:d3:4e:03:23:bc:74:15:23:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:AE:3F:38:B0:F8:52:2E:0E:2B:C0:CD:48:F4:A2:07:AD:A3:39
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:54:aa:40:14:5a:00:c6:77:31:f8:99:7f:f8:37:f6:16:ea:
36:f2:37:cf:02:65:c2:7a:8b:93:8e:51:ff:80:3a:66:c8:f6:
6f:a8:35:46:a1:f8:05:8e:0f:76:05:f3:d8:ea:af:01:95:3d:
23:fc:e9:23:f8:ea:c9:20:f1:62:8a:fe:ee:69:55:a5:34:17:
be:d4:a2:31:61:d1:f7:6b:b4:18:ee:a5:98:60:95:d0:32:0a:
e5:5d:42:da:9d:88:e3:61:b4:03:49:ae:8d:a9:06:52:46:67:
51:d8:62:19:5d:3f:f8:f1:25:b6:b5:23:f6:82:0e:8a:b2:f9:
d0:41:9e:2b:01:ee:7e:c4:ff:26:93:4b:51:d4:65:d3:d5:a3:
45:dc:b1:02:7e:9c:fe:6d:c7:6e:f6:f2:e4:5c:35:0a:96:de:
28:88:1d:58:0c:e6:66:83:4b:fb:64:71:05:32:30:b3:bf:4d:
86:5f:fa:bc:77:84:1f:b3:88:fb:7a:ef:35:86:0b:b3:a1:aa:
12:32:3c:50:65:53:90:0f:f0:98:5b:94:a8:f5:10:c9:a9:97:
bb:3a:54:d1:85:db:08:9a:8c:84:7a:f3:e7:68:d1:84:75:a6:
79:cc:47:20:bb:d2:1b:c4:a5:fa:36:32:10:23:1f:db:ca:c5:
d9:e4:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:47 2026 by rpki-client