Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: r4KGsyAm/ZQHB1j9+Cs8uVB+zlaFzSaISBQkQDHER4w=
Subject key identifier: F5:9D:27:1A:75:BE:65:70:12:95:83:89:A6:65:49:DB:72:05:34:16
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019EC14938040302A1B6F6C0430CF9B97E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 14:01:01 +0000
Manifest this update: Sat 13 Jun 2026 14:01:01 +0000
Manifest next update: Sun 14 Jun 2026 14:01:01 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: RDK6GHNN/hxEv6JGvZPKbyIrEyWVcnv43+Vy/qqeuuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:38:04:03:02:a1:b6:f6:c0:43:0c:f9:b9:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jun 13 14:01:01 2026 GMT
Not After : Jun 14 14:01:01 2026 GMT
Subject: CN=f59d271a75be657012958389a66549db72053416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:46:75:e3:9e:47:4d:13:81:a9:5b:3c:f8:
15:51:de:f3:03:b8:dd:b5:49:ae:90:9b:36:a3:5b:
22:13:f5:be:3f:b7:ed:c5:c9:df:02:cb:b4:d4:24:
c8:4d:30:4e:75:bf:7c:f9:d5:4f:2c:07:fa:06:8e:
e0:7a:eb:84:57:6d:09:14:aa:28:66:55:84:bd:6a:
62:2b:56:73:65:56:4b:bc:1f:1d:3f:07:4d:fd:ec:
2b:0c:9b:2e:46:d9:99:c7:a0:5f:04:a7:44:90:84:
df:d1:6f:b6:d2:cf:75:5d:be:bb:fd:48:ae:88:00:
b9:f8:0a:45:4b:a1:45:36:fb:08:4f:3a:a7:b3:31:
57:48:10:1a:c6:f3:4c:07:53:0e:cb:2c:26:b9:0e:
cf:b7:de:c5:96:b5:6a:e6:6c:ea:e4:c0:b6:d7:e1:
04:20:bf:d9:da:40:80:46:f5:bc:55:f0:d5:96:c4:
ab:7f:b8:da:b5:4c:38:41:ee:23:a8:35:da:1a:b7:
fd:9d:5f:6d:e0:82:67:ea:47:ef:16:6e:05:07:67:
e8:fa:07:88:56:9a:de:90:43:53:15:aa:59:72:0f:
0e:15:38:de:f6:d5:ca:79:37:3a:fb:fd:0b:3e:fc:
9f:d8:94:85:fe:8f:db:71:5c:8a:a3:cd:53:22:0f:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9D:27:1A:75:BE:65:70:12:95:83:89:A6:65:49:DB:72:05:34:16
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f6:0e:60:33:31:e4:c5:5a:05:92:cf:5c:c2:79:0c:5d:97:
10:24:35:bf:92:e7:74:34:ee:d6:02:40:56:46:8c:17:cd:40:
73:87:f7:55:1d:5a:b6:e5:3f:ce:68:d6:ff:2e:59:b8:43:25:
da:d6:c0:32:e0:d4:bc:72:6a:86:b1:3d:02:80:b0:8c:99:f9:
a7:16:9a:c8:92:d8:2b:1a:6e:ec:5e:52:a9:ef:59:7b:20:0a:
10:6e:d3:fd:d6:30:93:66:d3:0e:b1:f7:94:32:30:78:64:7f:
bf:4b:69:c3:5e:76:ba:7a:02:12:cb:67:e0:71:3d:f7:14:6a:
74:f5:e4:00:e6:87:ee:3c:97:7d:5e:c1:99:e5:b3:aa:4f:20:
db:bb:fb:70:52:7f:08:ba:f0:9e:dc:69:57:f0:e5:a7:7c:2a:
ed:c2:a7:2f:fd:d6:58:df:42:bd:f5:41:46:d5:e9:6b:39:f3:
39:c7:be:44:d2:8c:53:7d:7c:b2:f4:4b:d4:b1:90:9e:9b:bb:
f6:c3:0b:c2:47:e4:01:d6:98:d1:b2:04:2c:a4:63:d5:ab:f4:
ab:59:f8:d1:2e:9c:35:de:cf:c2:f4:68:a0:a0:aa:42:74:ee:
d3:19:56:ca:56:03:98:16:87:78:88:6d:d3:0c:11:91:f8:00:
d6:80:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:43 2026 by rpki-client