Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: uaY/LPyTIV3G0/2q+G6/aXeAlZ+W7h2B7PxBvrz95dA=
Subject key identifier: 0A:50:B1:A6:D5:85:C2:C2:50:8A:82:65:42:FE:10:B6:95:7C:6F:EA
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019D9999298DC9850F4BAD242CCED388CBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:44 +0000
Manifest this update: Fri 17 Apr 2026 04:00:44 +0000
Manifest next update: Sat 18 Apr 2026 04:00:44 +0000
Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: A9TgSjcDg4rusHF1wg0XODDu+qZN21mGGpEBFvLNGwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:29:8d:c9:85:0f:4b:ad:24:2c:ce:d3:88:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Apr 17 04:00:44 2026 GMT
Not After : Apr 18 04:00:44 2026 GMT
Subject: CN=0a50b1a6d585c2c2508a826542fe10b6957c6fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:eb:df:5e:37:7e:b2:8f:c6:f9:b9:d1:e3:5c:
4b:40:dc:50:34:e7:57:32:e9:0c:d7:f0:65:25:85:
f6:28:03:06:f1:24:b7:35:50:b5:12:8a:3d:37:ce:
32:d6:28:45:ab:25:9c:07:0f:24:2a:5e:3c:03:c2:
c8:56:40:bf:f8:cd:e3:5f:d4:7f:df:43:63:75:0a:
06:47:9e:74:a5:b9:56:41:56:3e:b8:24:47:e2:13:
ae:f2:1c:07:83:f9:13:7c:f2:fa:67:d6:47:2b:da:
8a:07:13:b6:47:f9:29:69:e3:7d:b1:51:fa:e8:d7:
65:0a:4e:5c:19:cd:b5:96:12:5f:54:f5:75:40:3f:
32:9e:12:ce:30:06:f4:05:3c:e4:a7:e2:c3:0e:55:
b2:12:85:2f:73:1b:a0:01:bd:67:80:ad:07:ff:bc:
2b:3f:b8:b0:0d:fd:0d:a0:46:d4:0d:e6:19:75:ef:
4e:d8:5a:30:0f:45:90:34:58:3a:76:7c:e5:6f:05:
cd:8b:8a:7f:f9:27:4c:15:8b:bd:9a:76:60:9d:09:
0a:d6:35:cc:cb:5e:bc:d7:07:f0:04:85:b5:24:47:
b0:07:6a:f6:d4:00:24:c5:4d:54:04:e6:60:00:4e:
87:09:4f:f7:9b:f5:80:1d:98:a5:b0:a3:8a:f7:e4:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:50:B1:A6:D5:85:C2:C2:50:8A:82:65:42:FE:10:B6:95:7C:6F:EA
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:4c:b1:a3:f7:1c:a0:6b:8b:a0:d1:76:a3:50:0c:4c:54:
97:f6:f4:9c:7f:24:cd:e8:30:54:38:04:16:19:14:42:40:b7:
f3:1b:c1:6b:5d:54:8c:c2:da:77:92:26:26:f1:aa:f1:42:2d:
b7:6e:11:4a:5a:89:97:81:f2:47:95:fa:8b:02:9d:05:ea:ba:
d8:3c:26:46:94:f8:35:dd:c4:86:d7:88:14:8a:99:74:9a:39:
0b:ac:e5:48:69:49:68:b1:d3:8a:11:02:44:71:0b:b3:f2:fe:
73:c1:3e:1a:b8:3b:1a:7d:a8:af:84:60:fd:09:77:dd:5f:07:
13:d7:12:8f:10:39:e3:e3:02:6f:6d:ba:85:ec:6a:19:dc:f2:
78:46:89:09:26:77:49:e2:1a:8e:90:74:00:ec:ec:25:d7:3f:
3f:f8:22:83:e2:94:df:5e:55:cb:46:b8:59:1f:7d:ae:f8:e9:
40:ed:d9:79:d1:22:e8:6b:eb:cb:59:c1:1a:b0:83:ad:a4:13:
59:f7:4c:6a:d5:80:97:61:59:d3:86:d6:bf:9a:2f:89:8e:e0:
ba:e7:b0:fc:6d:cf:1e:6d:b0:45:ee:1a:d6:06:80:ec:8b:54:
67:31:4d:06:80:c2:bb:ee:ef:53:d4:ba:39:16:2b:4b:3a:46:
82:57:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:26 2026 by rpki-client