Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: hErOUoj45/eVfQEaFxpKDh93c4Jb1ut5SPrAabOajcY=
Subject key identifier: 76:9D:75:B1:FA:CA:1C:81:99:AE:52:65:9E:35:F8:EF:C8:24:30:C9
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 019CAA5831EC5225525CB370A2E31CF30624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 0655
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: Sh7qXobPFGfA5iFQBetp9BhuKg1VjVwaE4YA261cDT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:31:ec:52:25:52:5c:b3:70:a2:e3:1c:f3:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=769d75b1faca1c8199ae52659e35f8efc82430c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:00:17:96:9e:e2:f5:e2:da:06:c5:4b:65:
36:a4:79:f3:a8:dd:39:8d:bf:6e:59:b6:70:82:f7:
3e:03:28:af:b6:15:1f:2c:6d:88:38:e5:80:fc:e0:
29:2e:c8:6d:91:f9:45:4e:42:04:a6:21:a0:c0:82:
8e:20:83:64:01:52:15:68:8b:b8:6d:9e:bb:20:d2:
50:ef:de:2f:d2:ac:1f:01:30:5e:f1:fc:91:ee:39:
37:9a:59:40:a5:42:ae:6c:13:60:18:b0:99:c9:07:
5a:d8:a6:17:aa:8c:8f:b7:f9:98:ae:34:a0:da:8c:
87:6d:78:be:57:f8:18:e8:87:b0:e1:e1:79:eb:de:
bc:4b:a0:fd:4c:8b:0c:4f:a8:4a:c8:c4:89:61:32:
da:c6:f7:95:1f:16:b9:8e:5d:c3:7e:b1:72:81:6f:
5b:7c:46:98:3e:af:69:d5:cf:3a:ca:87:ec:8c:dc:
30:6a:cc:3f:08:79:b4:a6:52:1c:c7:e5:d0:4c:34:
73:d6:8c:a4:f0:d5:4c:99:11:f5:21:a6:5f:0f:c0:
3f:e1:df:30:ef:d7:c0:89:53:97:5c:98:49:ba:92:
72:5d:e4:59:a4:38:fc:2e:32:0d:8c:c9:9a:ba:36:
06:79:94:be:63:26:34:d5:a8:5c:fc:ef:a1:47:a9:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:75:B1:FA:CA:1C:81:99:AE:52:65:9E:35:F8:EF:C8:24:30:C9
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9d:e6:3a:e5:3b:56:ff:f3:4a:a3:68:30:13:ed:16:9f:b7:
c0:04:58:a1:37:27:31:86:91:3c:f5:1e:f7:bd:d7:be:1a:5b:
1c:76:b4:6b:e8:77:24:b0:45:1a:86:f1:80:f7:11:48:80:c8:
df:ee:f9:44:04:d0:a0:e4:86:58:aa:41:2e:de:9c:4c:50:ee:
11:b8:a9:c8:46:bb:07:53:c8:eb:0b:ea:93:22:3a:89:2e:2e:
35:b7:ad:ed:92:2c:e9:fb:0b:dd:50:65:76:91:de:32:91:f7:
9f:92:44:6c:83:8c:ba:9f:3a:b2:58:f7:d3:80:0d:0f:87:72:
7e:f9:a2:4f:d1:f0:b8:b7:19:ef:57:dc:eb:a2:f8:7d:d6:61:
82:21:b0:2b:b4:af:bd:0b:bd:4f:8e:38:fb:ac:ed:57:02:fc:
9c:01:91:1b:13:d5:53:17:52:5e:f9:67:7b:fe:9a:66:fd:17:
c7:67:1b:08:38:ef:0b:a4:95:bf:86:e7:01:60:bc:77:cd:f8:
78:66:ff:de:93:be:62:81:43:54:8f:24:f8:91:8d:40:32:d6:
d7:2d:07:f6:25:89:c2:2b:27:90:6b:63:d9:60:1c:0b:84:81:
83:2d:e2:0f:da:a6:1b:59:03:a7:0d:7d:fc:04:8f:09:6e:33:
43:ab:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:40 2026 by rpki-client