Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: lTaqMVYFaDN/RgFwUrzatGjcoyWeIiW93yQN/VLTY5w=
Subject key identifier: A7:EB:00:FA:4C:63:1F:53:AA:E7:29:61:2F:2C:6E:52:D0:C3:3B:A8
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 019CAD2315A8534D46DE6840A9FA00032B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 1820
Signing time: Mon 02 Mar 2026 06:01:23 +0000
Manifest this update: Mon 02 Mar 2026 06:01:23 +0000
Manifest next update: Tue 03 Mar 2026 06:01:23 +0000
Files and hashes: 1: 7l9ngUq8Wk1AjbqW9RJtGIRz3P4.roa (hash: EHK3o5AqxXjYT44qxa9/0h4L/zP53EV+yGtFIqeqjtQ=)
2: OthlpIKW7hUIchBLbCot_5hIJko.roa (hash: vgUvfjH6wz4Qgqu/AYNZpzmqdwBY5xgOzUsX2ey8d1U=)
3: YJIaGge0m8Fq2pmvZ3J6_uneU8w.roa (hash: cDj4e1NjDBzdB++QzO9SaAqUD+/Zcuxx5HvIK8XoGME=)
4: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: GHHQ8R47qt9+NroiuoOPCsjrDoAfOaLQb0rikr25BAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:15:a8:53:4d:46:de:68:40:a9:fa:00:03:2b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Mar 2 06:01:23 2026 GMT
Not After : Mar 3 06:01:23 2026 GMT
Subject: CN=a7eb00fa4c631f53aae729612f2c6e52d0c33ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:aa:f0:ff:f4:c4:51:e8:75:ee:f8:67:58:
b0:f5:00:94:1b:3f:50:fc:f5:e7:30:87:18:d6:ae:
a8:a7:15:be:f1:96:88:7c:2f:14:fb:cf:1e:1c:17:
7e:2f:2d:5e:4c:79:f5:fb:97:d5:07:93:0d:a3:24:
5e:2b:9a:b0:f7:ba:2a:80:c2:02:07:f9:7a:00:32:
d6:37:d8:d4:89:87:83:54:bc:be:4e:aa:01:5f:2f:
d3:b1:a7:7c:de:96:ac:69:d0:7b:2c:8c:53:9b:06:
92:ff:46:71:97:82:1e:01:f4:f0:c1:ff:93:0f:ea:
33:6b:cf:cf:45:9f:e1:5a:6a:70:1b:3b:60:31:09:
b6:76:03:c0:a9:47:ae:f4:d3:30:fb:e7:24:62:ee:
52:c2:d3:ed:83:64:4a:7c:e8:89:88:19:9e:c4:a7:
ce:c6:5f:07:59:a0:bc:da:35:84:26:12:12:f9:94:
1d:69:28:09:1d:82:21:71:10:5d:c4:7e:55:56:32:
c5:fe:51:53:f0:3e:d1:34:64:0c:b3:46:63:c9:64:
c3:0c:2f:c9:53:38:9d:07:2c:c5:e6:49:89:91:9e:
d6:f7:1f:74:d0:e4:c1:fd:df:f1:c2:47:ab:4f:5d:
61:5e:a1:88:1b:11:08:aa:c6:5c:a8:4a:c0:8c:6a:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:00:FA:4C:63:1F:53:AA:E7:29:61:2F:2C:6E:52:D0:C3:3B:A8
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:20:72:91:1b:ae:da:ab:7b:4f:b4:1e:92:8c:d8:a0:52:25:
94:65:72:e4:b3:d9:96:48:23:dc:11:ec:40:ef:7f:47:21:82:
e0:8a:5a:aa:97:e5:36:34:53:fc:72:2a:31:15:31:2a:32:9d:
1b:05:c6:2a:1d:38:61:f1:3b:43:78:48:7a:84:b9:be:b0:f9:
00:3b:19:0c:2d:fc:54:5a:d9:0c:1d:d9:19:44:ce:98:8e:f6:
2b:3f:28:96:67:b9:b2:c7:80:c0:52:2d:ba:ff:f2:17:87:8d:
c0:c7:dc:0b:39:3e:f7:c4:63:97:36:55:bc:70:49:40:59:a6:
39:f5:2d:28:e0:9b:06:7b:8d:6c:cb:5a:4d:51:a4:23:22:23:
b8:96:ea:be:fb:c9:c0:bf:00:c7:5a:31:c1:37:e8:03:6d:15:
42:32:fa:b6:7c:73:ee:bd:9d:2c:b9:d0:ce:db:84:de:0d:19:
fd:7e:0b:0b:bf:a5:9f:c4:a9:52:3a:7b:14:4e:96:95:ae:78:
6c:d4:4b:2f:b2:a6:46:5d:07:94:9e:92:ff:00:32:4e:22:1e:
2d:e2:c7:87:93:8f:b0:c6:58:36:49:3e:97:90:b0:4d:aa:3b:
0b:17:22:d6:e8:a3:c2:56:c5:ec:33:10:76:d5:d8:54:76:f6:
73:df:41:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIxWoU01G3mhAqfoAAysOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjY3ZjNlY2ZjYzYxNjY4ZTA1MDFiY2E2MGNlZDZkZDc1
ZDM0N2MwHhcNMjYwMzAyMDYwMTIzWhcNMjYwMzAzMDYwMTIzWjAzMTEwLwYDVQQD
EyhhN2ViMDBmYTRjNjMxZjUzYWFlNzI5NjEyZjJjNmU1MmQwYzMzYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J+q8P/0xFHode74Z1iw9QCUGz9Q
/PXnMIcY1q6opxW+8ZaIfC8U+88eHBd+Ly1eTHn1+5fVB5MNoyReK5qw97oqgMIC
B/l6ADLWN9jUiYeDVLy+TqoBXy/Tsad83pasadB7LIxTmwaS/0Zxl4IeAfTwwf+T
D+oza8/PRZ/hWmpwGztgMQm2dgPAqUeu9NMw++ckYu5SwtPtg2RKfOiJiBmexKfO
xl8HWaC82jWEJhIS+ZQdaSgJHYIhcRBdxH5VVjLF/lFT8D7RNGQMs0ZjyWTDDC/J
UzidByzF5kmJkZ7W9x900OTB/d/xwkerT11hXqGIGxEIqsZcqErAjGo3zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfrAPpMYx9TqucpYS8sblLQwzuoMB8GA1UdIwQY
MBaAFHQmfz7PzGFmjgUBvKYM7W3XXTR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt
NGUzZjRkNjhmNjgyLzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy
LzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSBykRuu
2qt7T7QekozYoFIllGVy5LPZlkgj3BHsQO9/RyGC4IpaqpflNjRT/HIqMRUxKjKd
GwXGKh04YfE7Q3hIeoS5vrD5ADsZDC38VFrZDB3ZGUTOmI72Kz8olme5sseAwFIt
uv/yF4eNwMfcCzk+98RjlzZVvHBJQFmmOfUtKOCbBnuNbMtaTVGkIyIjuJbqvvvJ
wL8Ax1oxwTfoA20VQjL6tnxz7r2dLLnQztuE3g0Z/X4LC7+ln8SpUjp7FE6Wla54
bNRLL7KmRl0HlJ6S/wAyTiIeLeLHh5OPsMZYNkk+l5CwTao7Cxci1uijwlbF7DMQ
dtXYVHb2c99B9g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:04 2026 by rpki-client