Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: LIVO6NQ8u9Amee77xXzh1C26mTF07BGfJulvmDuFEmQ=
Subject key identifier: 8F:14:EB:A7:3D:76:C1:38:7F:35:9F:4B:AE:CE:6F:70:DC:65:D8:04
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019FA8627CCC79DD9B10D9D683AC5C72D771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0B0B
Signing time: Tue 28 Jul 2026 11:00:54 +0000
Manifest this update: Tue 28 Jul 2026 11:00:54 +0000
Manifest next update: Wed 29 Jul 2026 11:00:54 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: iqFjvdDf+lu20WSpgRql3sEsIUlROjsh3a7O4qs+rdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:7c:cc:79:dd:9b:10:d9:d6:83:ac:5c:72:d7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Jul 28 11:00:54 2026 GMT
Not After : Jul 29 11:00:54 2026 GMT
Subject: CN=8f14eba73d76c1387f359f4baece6f70dc65d804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:b1:4f:ae:47:e6:17:10:0c:3a:64:57:4d:
3f:56:c8:fd:85:7a:e6:63:d0:29:94:a3:76:73:3a:
2a:07:29:34:2c:60:0d:bf:9b:b9:d7:c6:d5:2c:94:
22:e9:57:f0:73:11:47:1d:81:69:47:6c:77:e5:0d:
d0:4c:2c:31:a6:38:eb:d0:7e:18:28:83:c0:63:9a:
35:25:41:26:8a:14:e4:49:29:09:1e:2d:bf:b2:97:
cc:71:bf:c5:10:f4:5b:ae:9f:a8:81:1d:fb:6a:88:
38:00:f9:85:57:e0:ff:b2:86:8c:40:50:b2:fa:f1:
24:c4:cf:72:0e:f4:0d:cf:23:74:92:5f:be:1d:f5:
0a:6e:7f:12:52:54:0d:69:33:44:ec:8f:fa:d0:d8:
e6:18:7c:8b:1e:2d:4d:57:40:97:fb:16:4e:13:ca:
90:0f:43:c6:3a:a0:71:ff:61:e9:47:c2:a2:0b:0e:
ab:39:76:69:0a:0d:6f:e7:89:b7:6c:46:25:f2:5e:
78:a9:0e:89:a3:28:60:66:9e:aa:41:2f:28:a6:a1:
27:f8:12:cb:2d:6c:3a:e2:a4:2a:9f:80:0e:d3:76:
e6:51:ff:2f:cf:04:3d:06:ca:3e:99:24:33:13:92:
84:df:b2:91:a3:f4:5e:9f:1b:29:c2:6b:ac:06:c4:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:EB:A7:3D:76:C1:38:7F:35:9F:4B:AE:CE:6F:70:DC:65:D8:04
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:39:2f:01:c3:5c:78:47:45:84:03:84:4a:4f:be:67:09:df:
61:d4:17:fa:83:fa:5d:80:62:2b:dc:cc:16:73:85:08:8b:5a:
8b:72:11:e9:ce:a3:54:7e:b3:06:13:f0:d3:7a:cc:02:93:8b:
18:99:4a:9e:22:72:9d:31:17:6f:e6:e3:14:6d:15:5e:ed:1d:
8a:4a:45:38:17:ee:d1:da:55:fc:6a:2a:fb:db:1f:fb:3f:64:
0b:e9:3c:eb:c4:56:5b:d7:7c:d8:5c:b9:76:77:a9:5d:44:c0:
64:01:cb:99:17:06:3f:fc:e3:89:b3:b5:7a:53:69:f3:f4:0e:
ea:b7:e3:04:db:3b:28:45:ae:a2:6a:70:7a:54:47:08:3f:e7:
7b:43:31:d3:62:62:58:a4:29:9c:dd:fc:17:92:07:d9:27:f0:
99:4e:13:80:0d:c0:ce:46:92:cf:9c:1b:ee:6c:fb:c3:85:a1:
89:2f:aa:57:1a:9c:86:0c:e4:13:69:ad:f1:07:b9:09:00:9e:
3f:9e:46:f6:01:44:c3:a2:b6:f3:39:3d:0f:fc:89:e9:b0:f1:
26:79:f3:5a:65:6c:73:a9:d3:c9:c0:c5:c4:05:bb:5e:09:45:
a6:f9:de:ed:20:cb:ae:b2:24:41:14:b6:cf:1a:3a:eb:1e:c8:
cc:78:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:52:58 2026 by rpki-client