Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: qEt0uROMautyI4aMSVhfZM2Ub4+U23dOE15HErQZ/rQ=
Subject key identifier: 8A:1E:50:72:33:84:B9:79:6F:F1:DE:6E:9A:9F:A8:EC:1C:2C:C6:36
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 01A0CAB4CA3ED38DC5BD33E83E9B0C6524AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 20:00:40 +0000
Manifest this update: Tue 22 Sep 2026 20:00:40 +0000
Manifest next update: Wed 23 Sep 2026 20:00:40 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: //rtNIt5ULVA/CCk7rflDRDnOvEkBQrnKMGzRawk4tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:ca:3e:d3:8d:c5:bd:33:e8:3e:9b:0c:65:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Sep 22 20:00:40 2026 GMT
Not After : Sep 23 20:00:40 2026 GMT
Subject: CN=8a1e50723384b9796ff1de6e9a9fa8ec1c2cc636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:6d:16:48:04:07:03:24:6e:ba:90:ff:88:
2c:ef:ec:3c:6d:c5:5a:dd:96:be:95:27:72:b7:ed:
00:b7:7b:87:35:65:5d:9d:bb:34:67:c7:c2:71:6a:
45:5a:24:94:d8:b3:be:60:50:c2:67:60:cd:cf:3c:
29:1e:25:5e:a0:38:13:d1:8a:ba:9b:52:dd:bc:48:
3d:84:66:23:55:1d:35:b0:04:4e:f5:d9:f1:8e:e9:
dc:10:f9:67:0f:2f:51:79:f6:f1:6e:0f:fb:54:06:
f1:d6:c4:6d:1e:9b:4c:c7:c5:5e:0f:c8:b0:b9:b9:
53:d2:be:83:35:c9:40:41:26:6e:c8:56:92:7a:d8:
6e:aa:0d:f2:a0:ce:54:1e:69:af:a4:9e:ed:c1:06:
b3:ab:58:e6:a8:bb:0c:19:fd:e6:4c:0a:2b:00:2c:
84:96:7a:9c:a5:c6:8e:73:6e:bb:32:b7:4a:68:be:
1c:f3:69:a9:a0:65:e1:92:48:78:e3:a6:fb:67:02:
40:76:9d:d9:0f:d6:3c:27:1a:4f:77:7e:10:07:40:
4d:fb:c4:05:87:f0:96:f2:60:46:b8:2d:68:6e:7e:
c1:c4:5c:47:82:11:ee:d6:c6:af:26:57:d2:52:ae:
4f:08:6c:60:8d:22:47:58:38:85:44:55:58:e7:9d:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:50:72:33:84:B9:79:6F:F1:DE:6E:9A:9F:A8:EC:1C:2C:C6:36
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b9:1f:fe:93:5b:95:72:69:4a:ea:68:82:ca:76:1c:c8:fd:
9c:49:b1:77:45:92:8b:75:73:39:fd:de:5d:47:f8:d8:33:dd:
6f:f6:ed:18:8d:bb:7d:97:2d:f3:a1:f7:b6:d1:5d:5d:d2:07:
b2:d6:ab:e2:c1:06:ed:31:12:b6:af:9f:67:f2:9b:08:76:ac:
23:cc:65:6e:57:e9:2d:ec:67:e3:cb:80:91:0f:1a:1b:aa:be:
90:5b:41:f7:4f:73:86:7b:cd:d4:6b:98:ee:0e:42:59:c2:d8:
34:2b:46:63:23:ff:fa:0d:19:2d:79:40:24:b0:e7:89:95:d2:
61:5f:8f:4e:0d:a7:68:9a:30:99:f7:dd:41:a7:51:38:27:2c:
ef:af:b3:83:77:fe:2a:b0:53:83:ad:46:29:1b:f6:cd:8b:37:
82:ce:b7:28:fa:6a:88:7d:36:43:10:62:89:cd:13:31:21:c6:
03:4e:f3:ca:56:e4:38:21:55:4b:22:b5:98:5c:8f:8b:c4:7f:
f7:09:ed:43:33:07:a2:6e:3b:64:99:6d:cf:f3:63:18:ed:ed:
ab:12:c6:0e:1a:84:62:1d:d2:55:c5:ad:12:8b:de:ab:7d:e5:
03:61:2a:70:0f:51:19:a7:a1:d2:c2:99:ac:ec:68:e7:71:4c:
53:40:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:56:17 2026 by rpki-client