Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: WUMZhvuiWTyXGaTlMuaR7gO/xSI0PK+brqkVPO+P9fQ=
Subject key identifier: 55:11:39:AE:E4:E9:E2:A0:C1:F5:F0:B8:0D:C5:E1:3B:B9:12:2D:EC
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019CAC46F6537F89039273C5716B9CED1D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:57 +0000
Manifest this update: Mon 02 Mar 2026 02:00:57 +0000
Manifest next update: Tue 03 Mar 2026 02:00:57 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: vwX/QG0L1tQ935Dzd6eQxqhUbfBLEyN3ImbC+xcl1U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f6:53:7f:89:03:92:73:c5:71:6b:9c:ed:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Mar 2 02:00:57 2026 GMT
Not After : Mar 3 02:00:57 2026 GMT
Subject: CN=551139aee4e9e2a0c1f5f0b80dc5e13bb9122dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:ce:18:5c:1d:fd:ef:ab:35:88:b0:fa:17:
e2:d2:84:aa:bb:4c:0e:cb:7b:63:cb:b7:41:b3:80:
66:b3:06:1b:fc:30:6e:9c:5b:18:7a:49:27:2a:39:
aa:59:08:88:59:8a:64:2e:c5:22:4f:18:79:b5:92:
db:ef:b5:1e:ef:e7:a1:33:93:13:fc:00:7f:3c:c0:
e6:36:98:b1:6f:c0:11:47:4f:72:22:c9:2f:44:c0:
45:98:20:0e:ae:7e:d9:8d:81:40:3a:8b:64:e9:1f:
de:33:4d:c6:a8:9d:fb:ce:54:31:4a:87:a0:ca:ee:
5c:0c:63:b7:9c:f7:a1:da:47:e3:50:7a:35:49:af:
6b:01:1d:ca:93:a3:12:b1:21:94:a7:58:58:b9:51:
58:fa:68:e8:79:f0:36:1b:22:b3:bd:c0:2a:a9:7b:
71:08:60:2a:5d:ea:ce:d2:71:b5:ac:26:b8:e2:a1:
3b:4c:c2:d1:64:be:1b:f8:35:95:15:f3:f3:f5:02:
52:51:27:7e:8d:c0:b8:02:80:46:ec:16:07:f2:eb:
d9:42:4c:e5:56:a7:f3:eb:a4:94:7b:82:66:b6:a9:
5f:d2:d0:64:cf:7c:59:87:5a:28:50:b8:3f:31:e8:
88:83:99:72:2d:6b:91:96:95:a1:14:93:27:de:e2:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:11:39:AE:E4:E9:E2:A0:C1:F5:F0:B8:0D:C5:E1:3B:B9:12:2D:EC
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:52:d7:b2:99:fe:c7:50:df:67:ce:c2:91:f8:e0:56:08:5e:
38:b4:8c:88:33:e0:95:8f:c1:27:d6:a9:0a:83:02:3e:66:5e:
c3:73:c9:3a:59:87:41:60:b7:ca:c3:79:83:3d:0a:7e:aa:be:
bf:b9:9d:17:0b:d7:cd:2b:24:0a:58:29:ea:3f:71:ec:23:0b:
bb:79:a8:93:96:d6:0c:49:02:18:43:b7:1c:11:a5:84:96:4c:
e6:94:3e:7e:eb:f2:4b:48:8f:84:f3:7e:3e:9b:d1:3a:6b:38:
0e:2e:84:7a:27:bc:ef:00:9a:7e:6a:a8:69:d7:32:9f:9d:02:
e6:e9:c0:f9:1a:9c:cb:16:1b:35:22:6b:40:91:3c:06:71:96:
59:77:87:32:77:ce:a0:ae:7d:51:40:75:28:bb:7c:52:e1:f8:
63:d6:12:71:7d:7d:a8:8e:dd:f7:5e:b9:a3:88:7c:29:96:9f:
e3:82:b8:b4:b7:0d:87:16:8a:91:86:6a:17:d5:9e:92:24:6e:
3c:3f:b8:ec:92:fb:01:fa:a3:70:61:41:d4:11:99:e9:9f:5a:
86:94:2c:48:aa:d1:8c:a9:4c:da:52:6c:55:eb:86:b7:1d:7d:
51:89:4f:46:19:38:e1:20:44:da:33:43:ef:be:8f:37:fa:7e:
5a:55:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:29 2026 by rpki-client