Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: 1I1AP5ixrG8j9NE40Y15aeyLpXWjyxo/bgc9dD2ZWk8=
Subject key identifier: BA:82:F2:C4:CD:5A:A9:C7:13:99:7C:6B:79:BA:A2:24:76:BA:D8:D6
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019D9B5055A77A21940B802DB7C0B424A7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1891
Signing time: Fri 17 Apr 2026 12:00:26 +0000
Manifest this update: Fri 17 Apr 2026 12:00:26 +0000
Manifest next update: Sat 18 Apr 2026 12:00:26 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: wkzG7q0XtSrPgpK5plkoXKPkD/C3q0u4oJUURLUIQ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:55:a7:7a:21:94:0b:80:2d:b7:c0:b4:24:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Apr 17 12:00:26 2026 GMT
Not After : Apr 18 12:00:26 2026 GMT
Subject: CN=ba82f2c4cd5aa9c713997c6b79baa22476bad8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:32:1c:fe:ce:2b:ab:1d:9e:1c:2b:a4:56:
ec:7d:d8:c0:af:52:b5:8a:ba:d2:f2:5d:a4:19:77:
e8:e4:68:60:93:8f:7a:44:ad:0b:62:b5:71:f2:48:
65:cb:f6:de:8b:13:b1:d0:f0:b7:09:9e:f1:8c:73:
39:ec:c7:5f:65:a1:26:6b:e9:73:a6:1f:4b:b1:02:
e5:90:8c:e4:d6:a8:60:11:e9:15:7c:77:07:55:9e:
20:f9:6a:db:88:d4:4c:27:5d:49:5e:1d:c0:3a:15:
18:55:60:bf:5f:02:77:a3:93:71:fb:d4:80:1e:da:
35:77:f2:25:1e:19:91:fd:38:a6:e1:c5:75:b9:c2:
18:fe:92:71:1a:6c:4d:04:28:4b:5d:2d:86:70:5c:
de:2b:68:26:56:40:f7:a4:24:2b:17:d3:72:e4:ed:
85:64:dc:94:80:5b:c9:be:ca:08:d5:21:10:e1:d5:
cd:d5:95:84:bf:70:e1:90:04:8d:1f:f0:f2:cb:db:
d5:23:aa:9a:d8:df:6d:36:95:dc:2a:4b:6b:ea:ac:
84:7d:1d:a0:02:9c:b4:fa:f1:f8:f5:27:1a:bb:8f:
c8:ad:72:51:e0:30:2d:6c:aa:8c:9b:36:48:ed:dc:
c5:cc:ef:f2:d8:a0:9a:fc:64:f7:fa:4b:ba:9c:05:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:82:F2:C4:CD:5A:A9:C7:13:99:7C:6B:79:BA:A2:24:76:BA:D8:D6
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c5:7f:31:6a:dd:95:ca:84:9c:de:dc:3e:cf:35:5b:15:e3:
f9:cf:99:e8:2d:45:37:48:11:97:a7:9f:00:a6:45:4b:85:f1:
e4:b6:be:a9:74:0e:9d:c4:ec:df:95:80:6b:fc:9a:1a:d3:60:
f7:ae:3d:b4:66:b2:d5:0e:3a:09:99:d1:d1:4a:b1:1c:ca:bb:
a7:3d:a6:e0:ea:fc:ee:a2:7b:54:51:a6:97:a9:30:36:3c:c0:
a1:68:1a:02:2a:ec:f9:6a:a8:dd:2a:a3:19:c9:ba:e5:f0:51:
f8:d7:f3:66:7b:ea:9e:5b:70:f5:ca:e0:8d:0e:08:73:3a:b8:
68:ac:3c:3a:1b:90:9a:a4:66:cb:74:6a:59:75:83:f6:5b:4b:
75:2a:43:5a:ef:77:50:a7:e1:4a:84:86:51:81:c5:3f:02:b4:
d9:1e:e4:be:ec:48:93:26:8f:c4:93:ca:f1:fc:ed:1e:fc:32:
53:85:31:41:41:70:7b:c9:26:27:3f:5a:dc:5a:92:e1:fb:52:
35:f6:60:74:b9:c6:42:90:e5:e4:b8:a3:8c:66:c4:9c:16:96:
79:10:ff:df:a5:20:4e:7e:6f:65:99:04:63:7e:b9:46:60:fc:
51:4c:33:37:72:02:28:04:1c:f2:91:a2:54:a7:19:d3:e4:00:
10:20:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:28 2026 by rpki-client