Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: UPKHsONoDyAdqo2wcT1Rk7EwMm2NwOvFpYlHJ6tReOQ=
Subject key identifier: D7:7B:04:EC:F7:D2:46:03:DA:46:66:0C:29:F5:4D:0E:A2:D8:79:6A
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019FAA5077B5E44775E65340D03893812F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 19A2
Signing time: Tue 28 Jul 2026 20:00:27 +0000
Manifest this update: Tue 28 Jul 2026 20:00:27 +0000
Manifest next update: Wed 29 Jul 2026 20:00:27 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: JAc59chWxnbVj4arm2KxHdYkCsk.roa (hash: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=)
3: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: yIvK3sKIotGUdWTfRW+6w/Tjg5ZyAy86GjwxjINBMoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:77:b5:e4:47:75:e6:53:40:d0:38:93:81:2f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Jul 28 20:00:27 2026 GMT
Not After : Jul 29 20:00:27 2026 GMT
Subject: CN=d77b04ecf7d24603da46660c29f54d0ea2d8796a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:c9:8a:b4:01:58:6b:ce:dc:d8:44:39:53:
30:32:f0:43:81:01:84:1d:be:b8:61:c5:24:3f:0b:
b6:8a:df:9e:af:51:f3:c5:34:1e:c5:81:c9:fa:ec:
da:33:0c:71:71:15:3d:ad:49:eb:af:c4:cc:24:21:
e9:dc:26:76:22:d0:e4:e3:08:54:1f:05:78:f5:50:
08:5c:49:34:b9:bd:ed:26:44:47:8a:b4:95:27:0a:
7b:4f:eb:0b:34:c3:c2:fa:32:b1:7c:94:17:24:93:
cd:e3:dd:1c:da:0d:da:1b:af:a2:05:1b:35:e8:29:
5f:22:53:40:a6:ef:ff:8c:66:b1:75:3f:58:45:0e:
94:12:c9:16:0d:bf:7a:d4:91:d6:b6:31:6e:fe:d0:
a0:0d:9f:d3:91:84:48:14:17:4c:f6:16:1c:84:a0:
89:77:e2:25:46:7f:ba:78:b3:19:a2:a8:75:60:d7:
8b:e5:2a:3a:cf:e2:00:50:a4:19:68:7a:c1:41:7f:
9e:f5:51:62:0b:fc:59:a1:1d:7f:c9:11:ad:33:5a:
34:3b:f6:20:24:7d:fe:02:bb:02:a2:d8:0e:b0:3d:
df:dc:09:fe:81:c7:45:b4:15:f7:ac:fe:f5:d0:fc:
57:58:11:bc:0f:84:03:b6:cc:7e:d3:01:83:db:de:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:04:EC:F7:D2:46:03:DA:46:66:0C:29:F5:4D:0E:A2:D8:79:6A
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1f:08:28:ea:2f:97:e4:18:f4:a1:83:2a:3e:09:d9:5f:43:
3f:6d:78:0c:8a:39:04:f6:0d:41:71:51:00:c2:b5:d7:c9:1e:
e7:61:08:1d:2a:17:bc:b1:78:d7:69:b5:3d:0d:07:31:7d:5e:
b8:3d:d5:4b:bc:ad:ec:58:78:2e:bc:3a:1f:36:24:52:c5:50:
d5:df:f6:fa:4f:11:c0:23:93:54:0f:df:7c:c6:64:ef:b4:7c:
af:b4:44:92:87:ae:df:97:76:d9:67:5c:b9:c0:b9:d1:16:ef:
5a:ad:b6:0a:37:d2:88:ac:01:13:79:ed:9e:a9:74:00:bf:91:
e0:b5:4c:da:90:ff:84:a1:bc:5b:16:0f:71:1f:f7:8f:5f:73:
9b:7a:95:2c:a1:8c:03:d4:e0:77:e0:e4:52:44:85:26:55:07:
2e:ec:57:86:55:6d:bd:68:67:3d:ce:ff:73:5c:57:15:1a:3e:
df:71:e5:75:c8:ec:a3:ce:0a:72:ef:09:30:a2:a3:a3:6b:52:
e0:a1:a3:73:b9:35:7b:7a:4a:b1:9e:f3:c8:1d:a3:71:28:cc:
fa:9f:71:74:ca:53:c6:5e:45:8e:c2:d8:88:c2:5d:ae:8b:7f:
e0:81:5a:9c:bf:6c:c0:d5:6a:a6:e2:7e:75:24:2b:b1:14:26:
63:4a:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:20 2026 by rpki-client