Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: 8ulclElY+uBC+cNIv5k6nXcZ47dzYoj5zRJkWscVP2k=
Subject key identifier: 3D:8D:C6:00:59:A2:69:A8:C9:4E:03:50:A4:68:D3:85:CE:1F:E0:2D
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019FAC3ED274DD835506F64F04CC8248A2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 19A3
Signing time: Wed 29 Jul 2026 05:00:25 +0000
Manifest this update: Wed 29 Jul 2026 05:00:25 +0000
Manifest next update: Thu 30 Jul 2026 05:00:25 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: JAc59chWxnbVj4arm2KxHdYkCsk.roa (hash: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=)
3: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: JhDjnnOpKBTE8rhGYCbSulSSLfr7WBKTg3dMEL+pIsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:d2:74:dd:83:55:06:f6:4f:04:cc:82:48:a2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Jul 29 05:00:25 2026 GMT
Not After : Jul 30 05:00:25 2026 GMT
Subject: CN=3d8dc60059a269a8c94e0350a468d385ce1fe02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9e:fb:67:d7:4a:8f:c8:9c:08:34:58:43:90:
73:25:58:c1:74:f1:2e:e3:e2:a2:86:6e:a8:cf:bb:
45:19:6c:49:41:78:28:e9:f1:fb:ed:d6:1f:89:bb:
fa:2d:e1:cd:0f:98:71:d7:c8:26:e3:6b:a2:b8:58:
6d:69:3c:f7:44:1e:38:33:70:8a:dc:dd:42:d8:44:
df:90:46:10:13:45:05:6c:9e:47:e1:55:9a:81:fc:
7c:f7:19:c0:17:09:88:52:b2:63:19:30:b6:79:4d:
85:67:04:67:9e:e1:5c:66:67:50:a9:6a:8d:c3:f9:
4c:40:e3:96:9c:40:fc:44:bd:f7:02:09:d8:75:53:
85:11:df:b8:ee:e3:65:78:0b:18:aa:77:14:c2:5c:
8e:02:f2:81:9e:71:a0:c8:38:ca:41:2e:19:8f:05:
da:f7:01:ba:58:50:3d:6f:76:11:b5:1a:d2:9e:c0:
5e:92:dd:5d:18:8a:10:d1:07:32:ab:c1:ce:9d:1d:
56:30:cd:e2:f5:bf:e6:3f:be:33:c0:e1:d3:fd:f4:
a9:e7:72:a7:62:0c:38:e9:63:f1:2c:ad:68:24:b3:
15:03:74:4c:c0:e9:2e:8b:dd:46:ec:10:11:88:fe:
64:fc:76:d8:15:15:e4:a3:bb:dd:a9:09:14:b9:40:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:C6:00:59:A2:69:A8:C9:4E:03:50:A4:68:D3:85:CE:1F:E0:2D
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:71:c6:5d:56:df:0d:23:47:71:e1:d2:54:ea:aa:8b:76:da:
35:ec:b1:12:ec:4c:39:b5:cc:4c:9a:c7:e4:3e:84:8d:6f:3e:
6b:aa:18:70:28:55:63:3b:ee:1a:63:53:b3:97:9e:62:ac:95:
20:17:7e:f6:a4:71:fa:cf:b7:61:26:de:86:03:55:8d:ca:74:
d7:30:47:5e:de:90:b0:01:26:9d:cb:b5:d0:64:47:fd:19:a1:
98:dd:55:c4:c6:87:05:03:e6:58:ae:53:61:17:b6:b4:55:cb:
1f:8b:d0:fc:63:74:33:09:9b:e1:78:d8:c9:78:99:fd:71:1f:
e2:ce:df:36:d5:ad:ef:f8:fa:be:15:93:bd:0d:00:f0:75:43:
8f:9b:5e:b7:c0:29:f0:4e:61:06:71:c7:78:3d:80:63:4e:1f:
b2:64:b1:5b:99:ff:5b:2d:a5:1f:2c:6b:70:68:b6:51:21:fa:
aa:15:65:4b:52:79:74:78:11:ce:95:cc:09:ca:e0:f1:0d:99:
96:e9:48:44:5d:fa:80:21:68:d0:1c:02:2b:00:73:8a:4b:39:
9d:34:3a:ad:dd:cb:77:39:31:be:f1:1f:13:3c:1e:67:83:92:
a3:77:5f:58:8f:85:a6:13:6f:a8:b5:7c:db:ab:5c:2d:a2:db:
fa:89:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:21:52 2026 by rpki-client