Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json)
Hash identifier: zEjEvIytlNLRp41LJyWXeJe9EsEPLtRml23Qy2TdWBg=
Subject key identifier: B2:9A:04:05:E2:0C:EF:2F:74:72:FA:55:AE:CE:33:A8:85:E1:7C:4A
Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b
Certificate serial: 019CAB34853B0FAAAE49AB3A60E8103D0951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
Manifest number: 0164
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: f7Gs43JTaQUdQipgsFm1DFX9hcP9OdUi7Zcm7+vZUJY=)
2: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (hash: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:85:3b:0f:aa:ae:49:ab:3a:60:e8:10:3d:09:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=b29a0405e20cef2f7472fa55aece33a885e17c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:8f:fe:6a:46:21:53:cc:11:35:67:1e:78:
47:e9:45:da:81:a7:87:1e:aa:77:0e:be:7a:80:00:
1a:b1:b1:75:46:42:2f:00:bf:98:fa:7b:ff:f0:7d:
07:46:33:cf:4d:c8:95:af:41:9e:aa:e7:d8:3f:1c:
bd:71:5a:e7:2c:a0:77:ac:8c:97:91:4a:80:4c:68:
5b:29:b6:55:27:a5:1d:ac:63:5c:c5:de:1c:05:a2:
95:0e:f9:ba:30:3d:2a:cd:e0:b1:8d:18:e9:ed:72:
c1:87:20:ae:85:b0:e4:09:fa:70:85:83:f5:06:8d:
d6:b6:c0:fc:cd:87:20:82:be:c8:1e:ff:08:d0:56:
ab:66:ca:d2:5d:91:91:1d:a8:85:97:56:eb:4f:22:
e9:1c:c7:c5:df:ab:58:01:31:2a:54:cc:19:2d:71:
91:e3:09:08:77:0c:d6:4d:c3:8f:7c:5e:e1:8c:f1:
6f:18:54:d9:51:ad:ef:a6:67:02:79:aa:08:9b:91:
96:51:dc:bd:56:d1:8a:0d:18:42:43:ee:65:bf:7a:
42:dd:a3:b9:73:50:a0:ff:66:13:0f:65:98:d6:19:
c3:bb:c1:a7:0e:9b:14:a4:a7:e4:e1:c0:d3:ba:50:
9b:43:6a:92:49:88:d5:8d:ec:cb:8f:1a:fb:64:65:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:04:05:E2:0C:EF:2F:74:72:FA:55:AE:CE:33:A8:85:E1:7C:4A
X509v3 Authority Key Identifier:
keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:61:3f:4e:47:43:77:72:9f:43:33:48:b8:95:1a:0c:c5:6e:
b1:6e:3a:5b:a8:3a:03:72:81:9e:e7:e9:f2:9c:07:a0:27:cd:
86:f6:d0:57:7c:c8:7e:c9:90:25:83:f3:7a:e5:ba:30:2f:0b:
9e:9e:48:a9:a9:70:18:4d:93:6e:1e:e2:24:af:7b:3f:91:8d:
5f:c4:61:02:89:31:15:f2:f1:1d:66:f8:9a:66:ca:00:65:ae:
83:3b:45:67:5a:0b:8e:0b:29:76:d4:58:32:8d:d3:26:f9:b6:
fd:89:ca:87:90:e0:be:1f:2c:98:61:8e:fc:e5:bb:ec:31:74:
c4:36:8a:5e:90:48:d5:c5:ea:14:c2:74:15:9e:f8:4a:c4:8c:
57:3e:8e:83:e2:c4:fd:e8:df:9f:30:9c:bf:8f:72:58:8a:7b:
68:81:6f:e3:f5:81:ca:02:3f:d9:74:9a:ca:98:4f:08:c4:6e:
5b:46:dd:5a:e4:ec:80:00:06:f3:fd:fb:81:fb:a8:76:95:f6:
a8:b6:6f:46:26:46:ae:5f:fa:36:46:04:6c:0a:2c:fc:87:4f:
b4:92:29:13:0a:3a:a4:cc:ee:0d:85:21:9e:43:af:00:d3:63:
e4:93:ff:67:6d:20:ca:51:79:cd:3d:90:4c:e8:1c:a6:f5:b6:
50:04:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:02 2026 by rpki-client