Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: 1tmfOalAu7Xunox7qEhspCJ/SXipOexx3JSVAXj0eiA=
Subject key identifier: 3E:DD:A0:AB:2A:E2:B4:13:39:7C:C3:68:EE:C4:13:62:80:A3:F3:98
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 01A12E7C67C9410CB8AD3C1F117B9839996F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1A6B
Signing time: Mon 12 Oct 2026 05:01:07 +0000
Manifest this update: Mon 12 Oct 2026 05:01:07 +0000
Manifest next update: Tue 13 Oct 2026 05:01:07 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: JAc59chWxnbVj4arm2KxHdYkCsk.roa (hash: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=)
3: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: HYSvSpJrXznUrTD2rtveafIkxbDpDju/lG+1UVtPkuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:7c:67:c9:41:0c:b8:ad:3c:1f:11:7b:98:39:99:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Oct 12 05:01:07 2026 GMT
Not After : Oct 13 05:01:07 2026 GMT
Subject: CN=3edda0ab2ae2b413397cc368eec4136280a3f398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:3a:2e:47:59:ec:8b:bd:21:3f:0e:e9:05:
85:3e:44:9f:ea:5d:df:b5:86:59:83:ff:96:6f:45:
8a:f5:65:8c:0f:80:2e:5c:1e:41:36:4e:04:eb:44:
50:48:3c:0f:ce:ad:37:8e:71:e9:6e:0c:4c:30:c1:
49:8d:5f:9a:e6:0c:bb:8e:a8:46:5c:3a:09:3e:7c:
ed:13:59:29:81:10:bb:ce:b0:8b:6d:29:03:08:d1:
af:55:68:e5:d1:e9:a0:75:0a:b0:88:57:30:13:88:
2b:75:64:a2:a1:1d:a0:93:a2:e5:56:79:78:c9:e6:
56:ed:7c:3e:f5:dd:7c:c0:fd:e0:27:9e:cc:e2:41:
06:dc:ae:46:4f:1c:c1:09:5a:6d:98:c8:19:df:2f:
38:08:e0:5e:93:51:b4:dc:36:3e:c5:22:6e:d8:b9:
7f:09:2f:9e:53:9c:2d:6c:56:a9:ef:cc:f6:a0:21:
b7:d8:9e:10:7a:5a:4d:93:96:78:b6:c9:7d:59:4b:
ba:74:79:c5:f8:f5:01:ad:70:e7:42:c2:c5:b8:7e:
40:27:36:d5:d2:89:44:6d:7e:83:4b:1f:4a:24:a3:
fa:2d:15:e2:28:09:77:88:4b:27:4b:fe:dd:80:4d:
7f:08:23:fb:91:8a:a2:46:4d:1a:3f:e2:19:40:8d:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:A0:AB:2A:E2:B4:13:39:7C:C3:68:EE:C4:13:62:80:A3:F3:98
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f3:82:50:d9:56:91:71:ec:d7:6f:55:c6:5d:2a:85:24:b8:
28:d8:dd:dc:c3:39:db:d3:86:56:8d:b9:54:89:d8:23:6f:8e:
29:d7:a2:4b:44:85:0f:c1:57:05:95:db:ce:42:70:1f:44:bf:
e3:a2:9b:a6:c1:da:0c:30:08:7a:61:7d:9f:75:4f:95:7f:7e:
cb:5a:1b:25:c1:6d:42:59:75:bc:ca:aa:b0:2a:ac:5f:b2:a9:
9d:50:6d:5d:2e:83:d4:c7:22:71:3a:70:f3:75:49:de:4f:86:
21:eb:dd:39:a0:55:b0:d0:7d:96:5b:3d:7b:d0:91:0e:8e:82:
27:a6:1d:0d:7e:ef:13:dc:88:29:ed:18:20:36:55:42:4c:26:
80:15:b3:f0:8b:10:f8:6a:54:a0:70:2c:a1:a1:d7:d9:6d:ba:
61:1d:c4:a0:c9:b7:7f:f1:c5:5a:e7:37:82:11:b6:b1:04:7f:
db:fa:d1:bd:ba:22:45:c9:0e:1b:8c:26:75:9b:a3:cf:b3:d0:
25:24:b1:2a:ab:f8:47:96:08:d3:5f:fd:40:74:c8:62:3d:44:
df:7b:1a:1e:e8:e0:13:0f:bb:84:45:c9:be:3b:1a:a1:8c:b8:
ac:60:14:ff:80:b0:a8:01:9f:86:99:79:fe:da:8e:dd:f7:95:
91:ef:35:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEufGfJQQy4rTwfEXuYOZlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1
YjE2OTMwHhcNMjYxMDEyMDUwMTA3WhcNMjYxMDEzMDUwMTA3WjAzMTEwLwYDVQQD
EygzZWRkYTBhYjJhZTJiNDEzMzk3Y2MzNjhlZWM0MTM2MjgwYTNmMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqA6LkdZ7Iu9IT8O6QWFPkSf6l3f
tYZZg/+Wb0WK9WWMD4AuXB5BNk4E60RQSDwPzq03jnHpbgxMMMFJjV+a5gy7jqhG
XDoJPnztE1kpgRC7zrCLbSkDCNGvVWjl0emgdQqwiFcwE4grdWSioR2gk6LlVnl4
yeZW7Xw+9d18wP3gJ57M4kEG3K5GTxzBCVptmMgZ3y84COBek1G03DY+xSJu2Ll/
CS+eU5wtbFap78z2oCG32J4QelpNk5Z4tsl9WUu6dHnF+PUBrXDnQsLFuH5AJzbV
0olEbX6DSx9KJKP6LRXiKAl3iEsnS/7dgE1/CCP7kYqiRk0aP+IZQI0F/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7doKsq4rQTOXzDaO7EE2KAo/OYMB8GA1UdIwQY
MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt
OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl
LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfOCUNlW
kXHs129Vxl0qhSS4KNjd3MM529OGVo25VInYI2+OKdeiS0SFD8FXBZXbzkJwH0S/
46KbpsHaDDAIemF9n3VPlX9+y1obJcFtQll1vMqqsCqsX7KpnVBtXS6D1McicTpw
83VJ3k+GIevdOaBVsNB9lls9e9CRDo6CJ6YdDX7vE9yIKe0YIDZVQkwmgBWz8IsQ
+GpUoHAsoaHX2W26YR3EoMm3f/HFWuc3ghG2sQR/2/rRvboiRckOG4wmdZujz7PQ
JSSxKqv4R5YI01/9QHTIYj1E33saHujgEw+7hEXJvjsaoYy4rGAU/4CwqAGfhpl5
/tqO3feVke81wQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 14:52:56 2026 by rpki-client