Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json)
Hash identifier: mPuWEwTyMaJz6U4KHMk9zidX2N7XOqbC53eHP10II5c=
Subject key identifier: 1C:B7:BC:51:23:66:3A:87:3C:E5:C0:D1:50:24:23:EC:FC:2D:05:DB
Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b
Certificate serial: 019FABD11143038266B02D6836DC4FC88098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
Manifest number: 02F2
Signing time: Wed 29 Jul 2026 03:00:33 +0000
Manifest this update: Wed 29 Jul 2026 03:00:33 +0000
Manifest next update: Thu 30 Jul 2026 03:00:33 +0000
Files and hashes: 1: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: Ee+masL3wwJjt4gqJqzI6tJFVnYl4lvrZnlrTnb2SI0=)
2: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (hash: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:11:43:03:82:66:b0:2d:68:36:dc:4f:c8:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b
Validity
Not Before: Jul 29 03:00:33 2026 GMT
Not After : Jul 30 03:00:33 2026 GMT
Subject: CN=1cb7bc5123663a873ce5c0d1502423ecfc2d05db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:37:69:05:f6:39:88:82:94:f4:ac:c9:2d:
60:d1:92:98:52:5d:b4:31:e1:6f:8d:36:74:69:63:
81:10:b6:36:5d:34:d6:4e:de:a1:5a:02:93:14:15:
e4:63:f0:77:62:73:8b:59:5f:c5:5c:e0:95:43:2c:
f3:29:23:9a:db:7f:3b:7d:d8:7a:d8:b2:5e:ca:15:
11:aa:03:3e:c9:0b:dc:4b:2d:c1:d8:8c:ce:ea:4b:
3a:55:36:b3:e9:55:aa:b6:0e:1b:19:88:d2:90:72:
ea:af:84:13:10:63:78:75:0d:5a:e2:52:38:50:f4:
19:10:0c:e1:9a:98:cc:67:67:4a:f9:aa:3c:ea:73:
81:d6:fc:22:c7:04:03:da:7b:14:4b:2b:98:a6:4b:
4a:05:89:ea:0f:67:70:35:ac:1c:42:d7:ad:bd:e5:
10:f4:6b:f7:56:12:47:fa:bd:5e:7a:8c:9b:10:8c:
77:aa:e1:89:b6:8c:26:e7:b7:ba:76:f7:74:56:b2:
f2:a6:5f:c7:ab:76:71:4e:4f:ad:1f:07:de:6e:27:
74:37:d6:cf:a6:5b:bb:ef:7e:f1:c8:27:4f:ab:8e:
57:29:18:c9:65:70:26:5b:a7:db:77:39:c8:70:ac:
b7:e4:56:39:d4:69:37:de:27:49:f1:1e:9b:58:4d:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:BC:51:23:66:3A:87:3C:E5:C0:D1:50:24:23:EC:FC:2D:05:DB
X509v3 Authority Key Identifier:
keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:b3:9e:34:0a:f5:ad:94:1e:73:b8:8f:8c:08:d4:48:8f:
5d:40:15:b5:2b:a0:1c:84:ef:95:92:d0:7b:e5:cc:04:94:b5:
26:2a:e7:9b:cf:f7:54:ba:9c:26:72:c1:0d:c3:66:dd:26:31:
41:a9:94:b4:4d:5d:ac:0a:32:cc:9e:0c:3a:79:c5:2f:f2:d0:
d9:af:9e:9e:5a:f4:23:a4:4f:48:2a:38:3e:b4:d7:55:e7:5f:
d9:06:3d:f0:71:89:94:a8:cb:97:47:c8:85:93:78:57:b4:d0:
e3:b8:07:cb:0b:95:9a:ef:bd:bc:39:7e:fc:16:b1:db:a6:d7:
cc:bc:1b:08:07:23:50:e5:54:8b:bf:e6:c7:9d:99:05:23:fe:
98:ca:26:e8:23:b8:4b:7b:46:db:62:30:1b:43:b3:06:40:90:
61:50:c9:4c:71:b4:9d:c2:ea:bb:e5:72:18:c6:fc:c4:f5:02:
f7:99:f9:bf:67:11:38:26:6d:54:78:c3:79:7f:eb:e2:70:66:
df:5d:f0:03:74:60:7c:05:c3:07:97:79:90:86:dd:3b:c7:65:
24:4a:49:bd:c1:eb:74:75:2c:7e:ee:b2:5f:6f:48:13:b7:0e:
c5:5c:6e:9a:ed:32:b5:1d:74:51:72:c2:0d:0c:68:51:e9:5f:
ce:f7:9a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:10 2026 by rpki-client