Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: /EWoT7E/nbueeQ1TxIXBuU2vMJR9Sd2/4P7XPS8sOF4=
Subject key identifier: F2:9B:7E:C7:B2:06:9B:BD:E9:4C:91:9D:DC:C8:7C:4D:93:86:1C:FE
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019CADC7C1D0B01031FD33196A4C6D8EF731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1816
Signing time: Mon 02 Mar 2026 09:01:15 +0000
Manifest this update: Mon 02 Mar 2026 09:01:15 +0000
Manifest next update: Tue 03 Mar 2026 09:01:15 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: X6j7om4JftV75SMdlCWRLpsOhgb9wOstTUczCma8zGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:c1:d0:b0:10:31:fd:33:19:6a:4c:6d:8e:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Mar 2 09:01:15 2026 GMT
Not After : Mar 3 09:01:15 2026 GMT
Subject: CN=f29b7ec7b2069bbde94c919ddcc87c4d93861cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:ad:36:d4:4b:61:7e:e8:9a:53:45:a3:9e:
98:87:3f:35:df:93:65:d1:0a:31:bf:34:97:92:5f:
e3:4d:33:cd:86:15:4e:62:13:6b:bc:c4:9d:f7:86:
43:23:5c:d6:df:b0:8e:5b:f9:f3:0a:f4:70:e7:97:
54:4e:8d:2d:bd:e0:c9:ca:f5:42:e2:af:47:ce:a2:
aa:69:27:84:2f:3d:d4:63:a8:0f:62:85:ae:26:53:
25:4a:ff:50:cb:b6:39:41:39:57:33:66:7c:f8:48:
21:52:de:46:d5:58:d4:8c:f6:27:55:25:d4:77:5d:
c6:00:08:35:24:fa:e8:c3:12:f2:f7:44:17:b5:11:
29:d3:0b:6f:61:c4:a7:65:c5:67:82:dc:4c:6e:ae:
b9:df:a6:cd:45:2e:03:10:bd:36:d5:6e:f6:c0:f7:
5d:c7:0b:92:f8:de:77:0e:47:61:70:91:b1:17:fb:
14:99:2d:ee:f7:2e:47:a8:1e:79:f2:cc:17:19:a5:
9d:81:d8:42:3f:30:e6:91:38:57:f7:6d:d7:84:a7:
84:28:4c:a8:e4:c1:b1:c1:7f:a2:e7:be:8b:69:30:
b4:b9:41:43:79:7f:7c:e2:14:72:ca:cd:c9:22:eb:
fc:e7:74:1c:12:0a:ec:a5:55:ea:09:7c:55:20:49:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:7E:C7:B2:06:9B:BD:E9:4C:91:9D:DC:C8:7C:4D:93:86:1C:FE
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f9:8f:eb:62:59:02:76:65:4c:47:09:63:fa:65:5c:5c:79:
f2:ee:8b:98:da:9e:e1:67:d2:dc:f2:f5:54:77:20:2b:30:b4:
50:72:a4:78:ca:94:d4:55:fe:cf:b9:54:41:42:01:fa:8c:81:
09:cc:3c:ad:a8:9c:ef:05:b6:a1:eb:72:22:82:43:85:ec:2c:
73:8f:6f:36:ad:da:70:0d:79:b8:59:4f:00:7d:27:26:c3:36:
05:78:d0:f0:d9:45:26:22:91:c2:58:5d:7f:87:6c:46:1e:e4:
b9:65:af:6e:a6:19:a5:1e:4e:d1:62:a3:c5:48:1c:05:de:de:
c3:59:00:7b:75:ed:76:77:4f:56:af:fb:1f:da:8f:66:59:b3:
ce:a7:ac:22:6e:af:0e:68:d9:38:28:1b:02:09:f8:5a:1b:b7:
38:13:55:10:59:5a:60:ca:c9:8b:de:a3:8b:1e:d5:d7:fa:0a:
35:6b:71:ab:45:c2:49:9d:8f:e9:5d:4e:43:0d:e0:76:93:07:
50:a6:f4:49:da:5d:43:2e:4e:32:5a:b4:2a:54:3b:f0:af:cb:
2c:9c:58:df:53:1b:1d:69:a8:35:51:0c:3e:ba:98:1d:30:ff:
4c:26:a8:e3:98:02:5b:f8:20:fb:de:63:71:7d:db:05:99:f8:
30:72:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:50 2026 by rpki-client