Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: S7dAQ1/B5aTaEiaKu51IvbLtG/zk7dEmm7ySDS72F9Y=
Subject key identifier: D3:F8:0D:5A:8A:E2:F5:FC:D1:09:50:4A:95:AD:7A:D2:34:A4:2D:4E
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019CAA212DE57E1E661781A78D2ED941A311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:00:26 +0000
Manifest this update: Sun 01 Mar 2026 16:00:26 +0000
Manifest next update: Mon 02 Mar 2026 16:00:26 +0000
Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: mp59VanHxeP3cmal4CtG2SVeYo48AmDt1G9oOx+poDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:2d:e5:7e:1e:66:17:81:a7:8d:2e:d9:41:a3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Mar 1 16:00:26 2026 GMT
Not After : Mar 2 16:00:26 2026 GMT
Subject: CN=d3f80d5a8ae2f5fcd109504a95ad7ad234a42d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:09:d5:cf:08:03:b8:5a:3a:d3:8b:1f:18:
be:33:b4:e2:75:de:c3:9e:30:43:a9:09:d4:6f:60:
36:34:ea:15:ba:38:fd:2b:45:e4:88:3c:a0:bd:3a:
45:28:c4:13:44:36:6f:ac:6c:24:7c:15:aa:d2:9f:
eb:77:5e:90:cc:fa:5b:a2:58:c5:5d:35:40:f0:82:
5d:e0:37:a4:bc:d0:7d:33:a9:c8:38:39:6f:fc:a2:
9c:40:5a:20:99:47:e3:41:50:7f:96:44:ae:28:e7:
7a:65:93:cc:e4:b3:8e:0d:20:8f:04:d1:f3:99:b7:
c2:75:b8:52:ee:6b:e2:99:a0:8f:38:5b:65:91:76:
d2:94:c6:e4:d5:7e:a6:2e:03:01:c0:e4:44:60:d8:
00:74:b7:ef:c7:92:8a:3b:25:71:4d:f2:ad:de:4e:
7d:25:38:75:1e:f2:82:23:f7:66:d6:2c:35:a6:9e:
b9:97:d9:d4:1e:56:5f:7f:a4:37:05:b2:cc:06:a1:
d4:32:af:43:e4:4d:b5:8b:14:a3:82:91:c9:c6:59:
5a:9d:ae:a5:f7:15:cb:39:b6:aa:ab:0e:8f:c2:22:
9e:52:59:64:66:2e:ab:5f:09:c2:73:18:06:d9:59:
b8:43:8a:a8:9a:7e:5a:b3:07:3f:6a:36:e2:da:c3:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:0D:5A:8A:E2:F5:FC:D1:09:50:4A:95:AD:7A:D2:34:A4:2D:4E
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:50:4a:0f:67:84:70:f6:47:33:a0:b8:e0:23:a9:80:e2:af:
b9:8c:06:95:bf:6f:87:a1:a4:12:f6:10:fe:3d:85:95:61:bb:
be:7a:94:57:89:98:3f:95:bd:7e:5e:de:f3:b5:7f:c5:49:5d:
4e:ed:1a:3c:2c:55:8a:5b:84:72:21:72:26:81:7e:59:60:70:
6a:96:73:57:60:e6:2f:7d:67:ab:b6:a2:75:37:3f:48:3a:02:
c4:79:9d:05:86:1a:21:1b:49:db:8f:97:1d:f9:e3:51:34:66:
57:c0:af:a7:ea:1f:03:4e:5a:06:b0:45:34:76:ed:4d:f7:cb:
29:70:e4:af:87:b9:ef:fb:e0:c9:7c:a1:64:b5:b8:1c:4c:ec:
32:8f:5e:27:eb:25:27:aa:98:24:ae:65:ad:9d:73:29:6b:70:
c3:7d:a8:88:ec:7b:61:f1:74:84:1a:91:a1:61:20:f4:4f:a3:
8f:47:6a:55:2e:0d:cb:6a:c5:af:c1:27:1d:38:2c:60:9f:98:
85:99:50:53:bf:6c:b8:e6:c4:26:46:00:c8:c4:4a:7b:e3:b7:
81:eb:98:c6:c5:a7:e0:b4:01:50:cb:42:5e:1e:b3:8e:cf:9a:
d6:2a:77:1b:ac:e0:b5:4a:da:4f:51:7f:da:ec:e8:46:73:31:
f7:d5:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:34 2026 by rpki-client