Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier: u8eskYgUjUNr/VmtqKWK1PkW9p+Bxys2r6+Bxhxt/6A=
Subject key identifier: 01:F6:A4:E0:04:CF:72:75:E4:6A:60:12:9E:CB:69:19:6B:EB:08:33
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 019DA30A48C4151AAAC815167E498F59CB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number: 18D1
Signing time: Sun 19 Apr 2026 00:00:53 +0000
Manifest this update: Sun 19 Apr 2026 00:00:53 +0000
Manifest next update: Mon 20 Apr 2026 00:00:53 +0000
Files and hashes: 1: 7zdL4YQGJFDUNgolkXTpwhIf2Fw.roa (hash: ZFZpl3XDKuuhGmPsndE03Wv8sKTzQDPR9YKcisjI36I=)
2: F-CmXISe8_wy3eRoL0KRLsrxsXE.roa (hash: UCcyvZA9JM0sa9RbXSB/RJ7CyrNNZcFxjhxeu1LfJcA=)
3: PAja4hjsJ8MQANg3sK1YfTlvaJQ.roa (hash: FIbqd2XK2BTIGA9oFREaVlM92WRa45cXlUCU71SKJfk=)
4: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: ZrpGEu6qTRWdiI31bWyYiQ0t9RRSPPamOKRwwv29Nno=)
5: gYsdgAs4KIaJroqJZMhZmwRNn38.roa (hash: t90AwEAZ729TPglZyxHbnIWUY3pMyQTtaWuzn+iV9DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:48:c4:15:1a:aa:c8:15:16:7e:49:8f:59:cb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Apr 19 00:00:53 2026 GMT
Not After : Apr 20 00:00:53 2026 GMT
Subject: CN=01f6a4e004cf7275e46a60129ecb69196beb0833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:9d:7d:be:57:44:82:7c:69:9a:49:ed:74:
3b:6b:70:d7:95:29:38:93:9b:51:c6:92:94:22:8f:
81:8e:29:3b:b0:9d:a6:46:e4:da:33:36:13:6b:80:
e1:fc:53:75:ab:9e:20:5c:c4:a5:03:1f:bf:e3:b7:
bf:94:69:d7:7e:35:0b:af:ab:1d:e1:81:10:71:22:
3b:18:99:7a:8c:fb:7b:61:7a:d4:8e:45:6e:12:47:
84:8f:9a:88:fa:3f:c6:9d:07:f0:e7:04:62:19:5b:
e7:01:4d:47:fb:5a:9a:98:e7:51:17:a9:dc:71:24:
4d:47:0b:3a:31:a1:af:d6:48:51:20:21:ce:36:8d:
8b:59:b3:a8:b1:c0:c5:2c:53:86:e3:06:6a:c3:8c:
30:24:c6:88:60:9e:c0:a2:d0:d5:bd:39:61:09:26:
46:d2:cf:d4:ea:8d:0a:68:f8:86:24:3c:ce:0b:f9:
2f:db:13:21:4d:0e:37:20:89:36:cb:5b:04:d9:03:
3a:4b:48:eb:40:a9:93:b9:6d:a1:77:6d:12:31:17:
c1:10:d3:ab:ef:68:ec:58:a7:d6:5c:84:be:65:f0:
36:78:09:8c:79:6f:cc:ab:ba:f7:d9:d6:84:1d:4a:
c0:55:c3:30:b2:d1:48:aa:4b:1b:3d:1e:f1:16:a4:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:A4:E0:04:CF:72:75:E4:6A:60:12:9E:CB:69:19:6B:EB:08:33
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b1:ee:2c:ac:8d:02:94:ec:61:42:b2:8d:49:c9:13:01:80:
48:d9:a6:7e:03:fb:b0:30:95:31:36:e4:79:ac:90:0b:66:97:
91:16:5d:8f:b3:a0:61:bb:27:35:a1:29:9b:be:11:de:20:69:
ac:17:eb:d7:93:2f:f3:90:58:45:b4:bf:74:7f:62:12:4a:4e:
f8:ba:86:c0:1d:bc:d1:14:51:ae:e4:0e:cb:94:2d:a3:73:7e:
f3:7a:ef:cb:34:4c:5f:3c:9c:b4:24:72:44:44:42:78:ca:62:
fe:67:fe:23:3c:32:0f:b3:aa:cd:d2:b3:02:3d:0b:49:c7:6e:
04:da:c7:28:97:74:f8:06:7a:c0:69:59:e0:eb:2d:1b:1e:2f:
99:11:76:dc:58:2d:53:f4:a1:3c:2a:66:8c:73:6f:ee:2f:3f:
bb:c2:03:3c:d9:9b:24:3f:cb:aa:bb:b5:3b:de:3e:45:7b:ba:
ee:eb:ec:97:ec:73:f8:cc:94:3e:fe:19:7f:73:a3:90:5c:18:
a7:79:31:3e:a6:1d:ba:a9:e1:ae:13:cf:de:6e:ea:15:f8:c8:
e3:35:3e:17:9a:a4:3d:68:24:6a:b8:b8:50:00:ec:3e:ce:3d:
54:c2:07:4a:77:ad:09:fc:8e:f1:d4:09:00:08:b0:69:91:77:
91:38:58:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCkjEFRqqyBUWfkmPWcubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1
ODliYTgwHhcNMjYwNDE5MDAwMDUzWhcNMjYwNDIwMDAwMDUzWjAzMTEwLwYDVQQD
EygwMWY2YTRlMDA0Y2Y3Mjc1ZTQ2YTYwMTI5ZWNiNjkxOTZiZWIwODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+2dfb5XRIJ8aZpJ7XQ7a3DXlSk4
k5tRxpKUIo+Bjik7sJ2mRuTaMzYTa4Dh/FN1q54gXMSlAx+/47e/lGnXfjULr6sd
4YEQcSI7GJl6jPt7YXrUjkVuEkeEj5qI+j/GnQfw5wRiGVvnAU1H+1qamOdRF6nc
cSRNRws6MaGv1khRICHONo2LWbOoscDFLFOG4wZqw4wwJMaIYJ7AotDVvTlhCSZG
0s/U6o0KaPiGJDzOC/kv2xMhTQ43IIk2y1sE2QM6S0jrQKmTuW2hd20SMRfBENOr
72jsWKfWXIS+ZfA2eAmMeW/Mq7r32daEHUrAVcMwstFIqksbPR7xFqQVsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH2pOAEz3J15GpgEp7LaRlr6wgzMB8GA1UdIwQY
MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt
Y2YxZjRjN2M5MjIyLzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy
LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbHuLKyN
ApTsYUKyjUnJEwGASNmmfgP7sDCVMTbkeayQC2aXkRZdj7OgYbsnNaEpm74R3iBp
rBfr15Mv85BYRbS/dH9iEkpO+LqGwB280RRRruQOy5Qto3N+83rvyzRMXzyctCRy
RERCeMpi/mf+IzwyD7OqzdKzAj0LScduBNrHKJd0+AZ6wGlZ4OstGx4vmRF23Fgt
U/ShPCpmjHNv7i8/u8IDPNmbJD/Lqru1O94+RXu67uvsl+xz+MyUPv4Zf3OjkFwY
p3kxPqYduqnhrhPP3m7qFfjI4zU+F5qkPWgkari4UADsPs49VMIHSnetCfyO8dQJ
AAiwaZF3kThYlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:14 2026 by rpki-client