Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier: +GRc9tOvhe1vZGplZCriHDgBxKl8RK2yNRs8TQinY7g=
Subject key identifier: 4F:F8:5E:F2:F8:46:8E:A8:67:CF:D9:A2:4D:5E:4C:53:17:27:1E:D3
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial: 019CACB4F25A8D950BB3B3E0CDC07EB98D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number: 1516
Signing time: Mon 02 Mar 2026 04:01:05 +0000
Manifest this update: Mon 02 Mar 2026 04:01:05 +0000
Manifest next update: Tue 03 Mar 2026 04:01:05 +0000
Files and hashes: 1: UqOGG4c7n0ejuJEiFx7KGDz_Wqs.roa (hash: q8p+2Wkdt6lzjJzM6L+Kae+pIXekdc1IH56/fHFs0fA=)
2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: INKA/WnD4nN56LCpsUPyBP6ED1GeMGavSZraK5IIOzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f2:5a:8d:95:0b:b3:b3:e0:cd:c0:7e:b9:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Validity
Not Before: Mar 2 04:01:05 2026 GMT
Not After : Mar 3 04:01:05 2026 GMT
Subject: CN=4ff85ef2f8468ea867cfd9a24d5e4c5317271ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:9d:24:99:3d:6c:6b:4f:05:22:9a:a9:fa:
16:16:5d:df:66:2e:83:5a:26:d2:42:d3:79:18:1b:
17:da:93:0e:11:69:da:1d:78:1e:45:dd:72:8d:55:
8a:5d:cc:74:3b:2e:5d:d0:c9:1f:6c:a1:04:cb:8d:
4c:6f:3a:d1:7c:0e:a4:56:52:1e:c3:f5:b1:0c:e5:
f6:9c:84:e9:d4:22:80:06:ca:69:e3:8d:f6:04:32:
16:0b:02:f7:49:a2:8c:2c:df:f3:2c:1d:33:13:1e:
39:0f:87:7f:a2:75:64:de:43:e0:e4:65:f0:01:69:
10:06:f8:4e:1e:46:df:da:ef:8a:97:e7:bb:f7:51:
f3:a2:00:37:e7:7c:ed:13:48:b1:71:9d:42:59:52:
a0:df:ff:90:35:5e:67:34:92:bd:e4:08:02:bc:1d:
02:f0:f0:1f:34:ec:2c:5a:1c:64:ae:10:7d:9b:16:
c1:50:ac:98:df:d2:a1:24:80:b9:ee:0e:cb:19:b0:
11:cb:cd:22:9e:49:0d:54:b6:9c:c0:0d:14:fe:56:
43:f0:a6:b5:53:87:d2:3a:09:83:71:6d:2c:23:1c:
49:1d:e7:15:89:4e:2e:66:f2:ea:6b:c1:a9:d4:5a:
d9:8a:2c:5f:c7:6e:03:70:0e:4b:b5:81:36:64:6c:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:5E:F2:F8:46:8E:A8:67:CF:D9:A2:4D:5E:4C:53:17:27:1E:D3
X509v3 Authority Key Identifier:
keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4a:78:37:c8:65:34:d8:c1:f6:94:54:3e:09:b4:bd:04:7e:
be:45:ca:5c:d0:57:f3:9a:21:14:c5:e5:4d:88:07:73:8b:0d:
4e:4e:73:b8:b0:45:83:9f:00:53:e3:c0:4d:8f:2f:5f:fd:35:
52:62:da:7f:cf:0d:de:38:a2:8a:c6:7c:c1:48:45:42:71:84:
9e:06:d8:28:33:1a:a4:05:f2:ba:de:94:7f:b8:48:90:94:3a:
79:ed:04:38:91:89:51:b7:f1:6d:89:46:dd:5c:41:b4:87:83:
db:9d:4f:45:6d:7b:53:a7:20:16:fd:80:11:62:fd:80:89:9f:
49:60:d5:ea:3e:93:7b:16:36:f8:78:ce:80:8b:d2:34:be:52:
ba:3f:de:31:28:46:e2:04:a7:22:3b:5d:87:90:b4:3f:56:26:
f3:eb:1d:df:a8:ce:a2:49:80:dc:2f:4b:a4:33:a5:a0:ce:c3:
67:98:e6:c3:e9:06:e5:1d:9f:d1:4c:f5:e1:9f:81:1b:50:dd:
8f:72:9c:6c:e8:17:c0:a2:27:25:5f:e7:76:b0:e2:b1:7b:75:
fa:11:96:1f:c5:4e:45:a4:e1:24:3c:06:17:00:cf:f9:39:1f:
e1:05:f7:e2:35:ca:1f:38:85:87:92:94:bc:ea:a5:ac:e5:bf:
58:b1:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:32 2026 by rpki-client