Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json)
Hash identifier: /9bCyXn0MelEZdGABgDeHnTwD424UIKGl2pceXb3k20=
Subject key identifier: 1E:4B:1E:45:BE:F5:A5:46:21:69:8B:B9:E6:4E:B2:23:95:1B:55:98
Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b
Certificate serial: 019EC224BC86D5A8F804E6A84F9C72E69027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
Manifest number: 0279
Signing time: Sat 13 Jun 2026 18:00:47 +0000
Manifest this update: Sat 13 Jun 2026 18:00:47 +0000
Manifest next update: Sun 14 Jun 2026 18:00:47 +0000
Files and hashes: 1: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: WrQ4s1J/d6Agr/sZPBm7X6XNCU22nB9hbKEaJI3NAvo=)
2: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (hash: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:bc:86:d5:a8:f8:04:e6:a8:4f:9c:72:e6:90:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b
Validity
Not Before: Jun 13 18:00:47 2026 GMT
Not After : Jun 14 18:00:47 2026 GMT
Subject: CN=1e4b1e45bef5a54621698bb9e64eb223951b5598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:f2:6d:d9:3f:ef:01:51:47:4a:46:8a:99:
e7:10:a0:a1:9d:94:e8:f1:24:b4:da:aa:18:d2:65:
59:4d:f9:81:21:70:c6:2e:a4:f6:bf:4f:42:98:45:
95:c0:7e:4e:6d:31:3f:fc:4c:ca:e6:44:47:ee:8e:
3f:4b:dc:c7:e0:03:e8:8e:34:1d:14:ee:81:c3:2b:
42:e0:54:0b:e0:5a:ab:fc:4f:b5:74:6f:ef:2b:d3:
26:65:55:2a:c2:64:a2:08:ae:59:47:07:13:b0:d3:
80:59:3e:e9:5e:34:c5:01:49:f8:ce:be:1f:b0:58:
53:ad:d2:f9:18:7b:4b:e9:d1:81:b6:21:ca:33:b8:
93:c8:03:8e:11:43:da:ba:70:50:06:83:e2:0a:d3:
a3:c6:cd:a1:32:67:4b:c5:04:06:9b:c0:a5:7d:f6:
68:2d:a4:ab:2d:12:fc:a4:f1:31:52:97:ae:12:cc:
4b:9a:37:56:ba:9e:64:6b:7c:e9:88:db:29:a0:72:
8d:4b:56:fa:5b:0f:5b:a3:90:c2:34:23:ea:70:0c:
54:e7:08:f6:66:e9:7b:9f:08:c8:6f:45:d3:1a:30:
d9:0e:8b:17:75:c2:48:4b:d6:76:3f:a5:4b:25:31:
7e:0b:7f:eb:72:c9:a4:1c:a0:44:94:4c:5c:ce:db:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4B:1E:45:BE:F5:A5:46:21:69:8B:B9:E6:4E:B2:23:95:1B:55:98
X509v3 Authority Key Identifier:
keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d3:ea:41:33:57:e6:91:22:45:20:ff:b0:57:d9:c7:cc:cb:
e7:53:c5:c4:ab:61:ae:9d:f5:70:ee:e5:d6:b9:c7:68:1a:32:
03:00:13:f4:af:60:3e:17:38:ba:c8:21:5f:4f:e3:0a:2d:2c:
21:20:d6:1d:0f:64:b3:91:70:ba:66:2c:86:74:76:8f:39:14:
5a:92:f4:c9:1f:4d:b3:64:8a:93:2a:51:b4:34:0e:a0:06:a0:
f0:b7:45:75:a6:b3:c6:4f:6d:d0:45:69:b5:e0:79:ee:f1:e6:
be:c1:3d:cd:5a:d9:d1:bd:59:b4:de:7d:88:e2:d9:6d:d7:b7:
79:c0:c6:8c:8e:d9:a2:b0:53:20:63:11:32:52:22:d4:04:fc:
7a:f4:69:64:75:71:61:b2:97:b6:32:2d:30:05:f4:05:17:ca:
69:06:72:0e:a8:da:94:74:b0:57:d0:63:c1:57:e6:28:09:b6:
ef:99:55:4e:bf:13:02:e4:6c:0c:74:ab:1b:85:56:02:f2:c0:
bd:8c:54:95:33:50:43:8a:f2:80:79:54:14:7f:ba:7e:2d:60:
09:5b:fe:ea:2c:d6:65:99:12:78:74:94:e6:c0:ae:48:9f:6c:
c6:f9:15:af:d4:38:ae:63:1f:63:fa:ba:9b:92:55:76:6b:84:
e9:b9:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:50 2026 by rpki-client