Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: p4Tn2pX3dQK0CtOFWp5l5LNlae/ZqphXoSiI7zFetMU=
Subject key identifier: 3C:4F:65:98:32:7F:DC:BE:FD:F6:36:61:80:E2:13:70:77:2C:47:36
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 01A12C8E0AFB67CC8BF47D4B6161C580E7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1A6A
Signing time: Sun 11 Oct 2026 20:01:08 +0000
Manifest this update: Sun 11 Oct 2026 20:01:08 +0000
Manifest next update: Mon 12 Oct 2026 20:01:08 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: JAc59chWxnbVj4arm2KxHdYkCsk.roa (hash: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=)
3: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: xkmiEl7vXuLYHAcVJOJteICT64cqT0mdnWmy5QimgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8e:0a:fb:67:cc:8b:f4:7d:4b:61:61:c5:80:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Oct 11 20:01:08 2026 GMT
Not After : Oct 12 20:01:08 2026 GMT
Subject: CN=3c4f6598327fdcbefdf6366180e21370772c4736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:fd:b6:dd:cc:e4:95:b9:91:65:77:61:a5:
78:08:2e:f7:95:f9:53:50:7a:b4:0c:0b:22:bc:4d:
ad:68:b1:b4:8d:f9:84:1a:5e:02:e8:08:e2:39:5d:
2b:c5:b0:99:9b:56:8d:91:18:2a:cf:7f:17:7f:eb:
bc:c9:06:08:d9:70:4d:db:f6:3f:2a:87:47:6d:1a:
29:21:7a:8f:4e:46:d7:4c:f2:87:e4:01:70:41:85:
0c:97:77:4c:73:af:2c:1e:0f:e9:2a:68:10:01:e0:
02:c5:25:63:95:f1:b7:79:21:ca:60:22:d5:a4:ef:
32:cd:27:00:36:05:42:e4:eb:cf:08:0c:14:95:ad:
80:0e:48:e3:56:96:b1:6e:30:7c:16:ee:b8:a5:c4:
af:bc:9f:14:77:da:db:63:a0:7d:2e:0f:25:c8:74:
87:bc:b3:5f:7f:d3:b4:93:64:49:3b:90:4a:6c:24:
59:40:9a:71:ba:82:e2:10:67:32:a7:fb:7f:7e:fc:
b6:ef:35:38:01:b9:09:91:5c:43:c4:92:fb:e2:1b:
db:8d:d4:af:b7:04:ca:67:d7:d1:a3:24:d4:b0:53:
f6:51:f6:37:65:43:d7:48:5d:9b:d7:e3:ab:91:2c:
0f:22:15:2d:b9:44:ab:7f:2b:d5:31:18:66:48:07:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:65:98:32:7F:DC:BE:FD:F6:36:61:80:E2:13:70:77:2C:47:36
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:81:d3:d7:6e:6f:86:55:15:45:fc:c3:4e:b8:13:98:1a:
4b:e3:17:7c:ac:ac:82:47:f4:4f:ec:8b:0f:23:34:48:7f:90:
e0:54:75:9a:46:62:ec:98:e5:7f:3b:05:db:45:87:a9:dd:aa:
27:54:2d:d9:8a:1b:47:3e:70:5a:91:08:72:f1:07:76:a5:4c:
1e:fb:58:2f:ce:15:cc:52:86:b4:04:12:1f:e0:c1:f7:1a:1c:
db:92:79:76:8d:b0:e8:b9:fb:a0:5f:ae:f3:56:da:34:85:59:
51:79:0c:5d:c9:52:88:f5:ba:21:04:e5:5f:e4:74:e8:f3:93:
58:db:4d:ed:b2:df:9c:47:f1:f5:af:f5:58:f2:43:61:9a:43:
c8:c6:7d:7d:d4:7c:de:b6:ab:e4:47:68:f3:d1:b4:00:de:db:
0c:4d:cc:da:c4:c9:89:95:cd:9b:7d:04:39:8e:69:07:50:75:
a3:67:4a:7c:cc:9e:92:e4:56:40:24:3e:00:2c:77:0a:14:e6:
2b:c2:5c:3b:d2:22:57:32:13:09:1a:16:0b:0e:a3:d0:82:c5:
5b:26:53:7f:7e:43:97:8e:0c:be:45:38:92:98:3c:eb:a7:8b:
29:18:c4:7c:84:f0:fb:e0:28:2e:20:2e:3f:8c:c2:6f:60:6e:
65:20:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:13:30 2026 by rpki-client