Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: jHLHzjETaW2OIdvsdmkNY3rQMMtBwXQ6ivM6f1tMKyg=
Subject key identifier: C8:52:C2:59:36:99:15:6B:86:36:D7:13:40:E9:B2:88:8C:89:8D:B3
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019FACE3CA839820018E25630DF5160E2754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 08:00:37 +0000
Manifest this update: Wed 29 Jul 2026 08:00:37 +0000
Manifest next update: Thu 30 Jul 2026 08:00:37 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: +JAZWrbJJzEm/MLzFMcU56yZM/tiy3zv//ENeNkOc64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:ca:83:98:20:01:8e:25:63:0d:f5:16:0e:27:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jul 29 08:00:37 2026 GMT
Not After : Jul 30 08:00:37 2026 GMT
Subject: CN=c852c2593699156b8636d71340e9b2888c898db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:46:b1:9e:64:9d:18:41:97:ce:82:f1:a0:
b8:a3:ad:68:02:01:99:37:37:5b:d8:07:8f:f5:4f:
ec:e2:ca:3d:fc:aa:5a:cb:d6:65:bc:67:7e:ac:9a:
aa:28:4d:e3:4e:9d:82:99:35:27:60:c0:eb:e0:11:
db:5a:61:90:3b:a6:9d:c3:96:d0:c9:73:dd:60:42:
67:2c:58:0f:bb:db:c7:5b:22:f3:4d:65:b0:d0:93:
37:19:58:84:7c:0d:35:7e:f0:1a:08:42:5d:18:92:
0c:c9:31:66:09:73:58:53:69:43:a0:e5:e7:4b:2a:
71:68:63:cd:f0:08:03:24:a7:c9:cf:7e:4c:00:19:
49:0e:5a:d4:c8:5c:b5:bf:be:8c:85:4f:ed:72:86:
c2:33:3e:a9:86:25:67:9c:a9:5d:0a:ce:ee:09:09:
98:fb:49:03:8c:89:73:94:8e:40:f7:b6:9d:0d:0c:
c7:2f:4b:ce:37:17:f6:d3:29:5d:48:e6:8c:8a:45:
3e:10:dd:83:e7:6c:dd:9b:28:28:a8:08:1c:b1:ae:
fd:a6:de:9c:f4:e5:34:4b:c6:34:06:fc:e6:fe:c9:
c5:79:63:c8:3a:86:b9:c4:c4:b9:c5:23:de:10:cb:
53:56:5f:fc:3e:5c:dd:15:15:aa:60:5c:29:90:31:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:C2:59:36:99:15:6B:86:36:D7:13:40:E9:B2:88:8C:89:8D:B3
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6b:9b:33:09:cd:f9:74:34:69:56:7e:6f:67:0d:2a:4e:a1:
81:a6:98:d9:21:45:1a:f5:50:6a:1a:70:ad:2c:54:b0:a8:a2:
6e:34:c9:d7:7e:52:b1:69:01:2f:cc:5c:cd:5b:08:46:3b:ad:
46:09:ea:54:3f:75:b8:d8:0f:4a:8c:7e:58:de:4a:f3:c4:c9:
09:26:98:ed:5e:35:d9:9f:b4:7d:78:ad:15:9c:be:79:d0:e7:
43:97:1a:3f:31:e8:16:5d:51:05:57:10:8a:bb:1f:46:aa:f3:
99:4f:60:53:a2:a1:b2:ad:61:97:3a:50:e8:e1:a6:07:3f:24:
cf:f3:c6:87:cf:0d:18:92:2e:37:66:3f:d5:a8:5e:f4:12:cf:
c4:a3:31:ba:00:8b:5b:8d:72:d1:0e:a7:2c:6f:6c:3d:60:5e:
11:05:2e:89:88:44:6f:a9:24:4f:c0:84:1b:9f:fa:11:a1:de:
e7:8c:5b:89:08:83:b0:a0:df:26:1d:5e:83:6e:67:cd:59:82:
f6:ea:78:51:8b:36:51:a7:f7:a0:88:af:25:39:ae:1c:8b:e9:
1c:59:fc:29:49:cc:38:cd:df:f5:a6:3e:f4:57:fa:8b:3e:c1:
8a:b6:7d:38:59:62:ff:09:a2:5d:39:3d:95:30:3e:6e:93:dd:
31:a6:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:51 2026 by rpki-client