Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: zOy1uI3oTQrmj05RfsLLVvPzNLG/uXzf6uYIxtSVDxQ=
Subject key identifier: 4A:CC:DB:B0:16:B9:13:5B:19:4F:D7:51:1C:05:89:26:EF:77:92:02
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 019CAC7E3A35CFCAE84972364A8323A8261A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0E34
Signing time: Mon 02 Mar 2026 03:01:19 +0000
Manifest this update: Mon 02 Mar 2026 03:01:19 +0000
Manifest next update: Tue 03 Mar 2026 03:01:19 +0000
Files and hashes: 1: Tk-54jiMCl3pRob8Ol0GyqafcTo.roa (hash: ogGPBYJpK3ICA3MgJGI7aFtZAb3lcTgOcAes1dNC4Q8=)
2: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: mfG24fHNYod+hJXOnJEUoWObjDVwfC4O0xz4MSM3UuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3a:35:cf:ca:e8:49:72:36:4a:83:23:a8:26:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Mar 2 03:01:19 2026 GMT
Not After : Mar 3 03:01:19 2026 GMT
Subject: CN=4accdbb016b9135b194fd7511c058926ef779202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:c3:93:8b:35:bd:08:37:dd:11:95:3a:5d:
81:e7:e1:8d:7d:ee:c7:05:c4:ae:1d:49:93:19:1a:
57:68:96:60:58:ab:9a:35:59:1a:f8:61:05:b1:23:
12:51:84:ce:95:ff:fa:85:a7:28:3a:e2:6f:17:10:
57:83:d2:87:8a:00:5e:a1:0d:bb:56:84:24:ce:5c:
ec:24:0c:ee:0b:fe:66:d7:83:cb:cd:7c:65:77:97:
0c:a6:63:fc:b0:cb:b4:ee:ed:8f:d1:cc:d6:dd:bc:
57:71:98:07:fc:59:d1:40:bb:67:52:b8:0a:89:0d:
21:94:4b:cb:19:4f:2d:ed:d6:20:8d:8c:01:c0:d7:
13:0b:ed:2d:cd:56:92:eb:a1:ed:ac:6a:cd:9a:b5:
70:eb:88:07:26:6a:29:4d:1e:2b:86:15:7a:8b:cf:
3b:8d:86:84:b6:18:cc:d8:d1:b2:5a:21:7b:bd:46:
a6:c7:1f:1a:16:67:12:fc:5a:76:dc:f7:32:0a:09:
b4:60:a1:f9:76:aa:8a:dc:33:40:f7:b4:22:c3:d0:
11:88:7a:16:7e:15:d3:3c:89:b7:b0:da:dd:1f:0c:
4b:87:bf:34:4f:6f:96:56:81:90:8d:e8:ad:8a:b4:
6a:12:00:4a:9f:f3:48:34:da:b4:ce:4b:9d:1c:00:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:DB:B0:16:B9:13:5B:19:4F:D7:51:1C:05:89:26:EF:77:92:02
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f1:40:82:cf:c6:68:1c:c9:4e:4a:07:9c:78:bd:96:e2:74:
98:f1:b6:75:82:91:75:e4:18:fa:02:a5:cb:7b:15:70:84:07:
ec:06:87:8d:40:c4:fe:0f:de:b1:f7:53:36:19:83:75:11:f7:
d5:0c:a9:ab:88:67:c9:1c:b0:eb:bf:f0:ed:fc:f6:f4:c5:39:
a5:ca:e8:e2:dd:fa:a3:37:ff:cf:73:b3:b0:dd:31:22:02:12:
bd:0d:e1:0d:25:b0:e8:e1:3b:4f:21:32:00:1f:81:18:96:60:
6e:d3:55:c4:4c:89:66:2d:11:51:d9:99:ff:ec:6f:07:79:91:
01:ac:42:45:98:7b:f8:35:be:a5:b5:c9:9d:b4:3b:51:24:a0:
dc:86:ac:b7:fb:ed:fb:30:f6:4a:d7:4a:d8:e4:65:e7:7b:50:
06:aa:a1:0f:59:47:fc:b2:ef:33:0f:ac:61:bb:08:7b:bb:34:
1e:d6:f8:bc:c2:f7:09:02:d6:c9:79:01:14:ce:08:c2:0c:e8:
39:ec:b8:38:49:b5:a3:ac:f7:fd:36:55:3f:d4:41:bd:18:5a:
f1:9f:55:2a:e5:4e:50:99:fb:f8:7b:98:2f:53:51:1d:5a:72:
3e:95:f4:0f:63:af:0d:04:1a:ea:bd:66:75:2d:1e:35:01:0c:
e4:85:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:29 2026 by rpki-client