Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: 8vb5BsxSDrE0IgzNVJ0Ta4JuYT5cvhpTVG9FPe5D1EU=
Subject key identifier: 47:25:84:73:73:F1:8E:81:B1:68:DF:C2:62:CE:6D:4A:F4:D2:7B:2F
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 019D99CFFAF1FBAD71318BC894FB82959696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 06D1
Signing time: Fri 17 Apr 2026 05:00:37 +0000
Manifest this update: Fri 17 Apr 2026 05:00:37 +0000
Manifest next update: Sat 18 Apr 2026 05:00:37 +0000
Files and hashes: 1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: JXW8GR5KlyzmMHGSN9Kdq7PeIeUIcteBaQJ4TAtP5eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:fa:f1:fb:ad:71:31:8b:c8:94:fb:82:95:96:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Apr 17 05:00:37 2026 GMT
Not After : Apr 18 05:00:37 2026 GMT
Subject: CN=4725847373f18e81b168dfc262ce6d4af4d27b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:dc:cc:65:f2:9a:72:0f:0c:be:b9:ba:01:
a0:49:95:2b:de:00:10:81:66:92:5e:d7:5f:3f:83:
4f:c2:76:70:2f:a4:a7:ec:9f:7c:01:1c:68:66:1e:
ee:d6:a7:8f:48:a1:ed:1c:a3:77:26:7f:f7:93:6e:
27:9c:18:dc:43:c9:8f:c1:a5:96:25:bd:2f:c0:eb:
e7:c0:c8:ac:b8:67:24:39:7a:29:4d:94:2d:39:c9:
7e:87:21:79:60:d9:a7:87:32:16:f2:86:26:99:e2:
5d:0c:c6:d2:03:3b:18:b2:81:a1:3c:e6:57:bb:d5:
b3:33:2a:6f:24:ad:f3:d8:19:b1:e5:c9:e9:d5:1b:
af:0c:9f:47:f3:c3:12:e0:79:00:18:06:56:3d:df:
b0:f3:03:18:f1:15:14:6e:59:c9:d8:ec:a6:6c:b3:
08:57:e2:fa:11:05:da:27:42:82:b9:5d:7a:87:d0:
8a:b3:3e:29:33:2d:00:95:ad:5f:09:a5:3a:86:e3:
94:cb:af:51:ab:6b:00:a5:32:3c:29:fc:55:30:b3:
23:db:9c:22:32:6d:f0:5f:3e:f1:8f:e1:4d:19:87:
ac:5f:d2:aa:29:4b:bc:ce:f8:f8:b1:7e:b5:f8:16:
25:bc:0a:c3:b6:5d:a4:a2:b4:6b:79:5d:1f:1c:82:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:25:84:73:73:F1:8E:81:B1:68:DF:C2:62:CE:6D:4A:F4:D2:7B:2F
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:fd:69:fb:67:2d:0d:5b:2e:f4:04:10:e4:29:30:e2:0c:
48:67:a1:82:c7:d6:ec:b8:2e:83:cc:c8:57:87:22:ce:1a:5b:
d0:32:ac:f7:6a:ce:90:c0:de:3d:51:e6:07:54:22:7f:e6:99:
5a:2f:13:00:a6:39:0f:2e:65:d5:71:8c:d7:4e:f6:0b:c7:4c:
7a:b8:75:3b:e5:f9:f5:dc:e9:37:e1:00:19:d5:bb:5f:5e:35:
18:a2:f2:1e:25:1a:53:53:69:50:7e:13:ee:bb:00:5b:10:7e:
a1:c8:c0:4a:21:dc:7b:c5:74:70:9a:4d:17:3e:13:20:dd:2f:
de:9b:d5:ef:b7:5f:93:49:a3:95:76:74:8f:bf:0f:2d:95:55:
ab:19:bf:16:ab:68:07:a6:da:c3:51:69:fd:76:9d:27:1c:76:
cc:dc:35:bf:d6:25:c2:14:2e:da:6c:96:e2:91:f0:ef:47:c5:
2d:3d:ce:8d:05:e1:7f:8e:31:2c:86:be:bc:33:1b:ef:fd:ec:
a2:b9:2b:f9:e1:7a:43:97:02:fa:cb:65:7a:a7:31:fb:f0:2c:
87:6b:17:13:49:4a:7e:f3:3e:b6:71:6c:4f:ca:35:1c:bf:57:
3c:9d:c2:ac:96:ad:9e:83:1d:54:31:1b:8f:55:b6:e3:13:a9:
c9:ce:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:16 2026 by rpki-client