Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: ig7a4/oRguFf1bXtXQOwgEB6X21q0oRxfTgekQW1zLw=
Subject key identifier: 73:66:99:17:E8:53:CC:F4:2D:E5:7F:A0:BA:96:06:07:88:AF:A5:03
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019FAA507CB018BE66304104B575E5943106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0B0C
Signing time: Tue 28 Jul 2026 20:00:29 +0000
Manifest this update: Tue 28 Jul 2026 20:00:29 +0000
Manifest next update: Wed 29 Jul 2026 20:00:29 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: B/jyXXI7B+4mTCwCodUef+1Fz9DOdrOnQa2ZI6TPJbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:7c:b0:18:be:66:30:41:04:b5:75:e5:94:31:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Jul 28 20:00:29 2026 GMT
Not After : Jul 29 20:00:29 2026 GMT
Subject: CN=73669917e853ccf42de57fa0ba96060788afa503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:43:98:00:27:61:8e:18:46:94:8b:80:7c:
f3:d9:d4:da:5f:9f:84:db:00:c8:57:0d:fb:44:0e:
f1:64:8c:4e:9d:72:d1:64:56:09:71:e1:e4:22:3a:
3d:85:c8:b9:ef:c6:d4:1f:e1:0b:9d:5f:25:67:6e:
bb:8e:02:b1:d0:bb:52:1e:ae:dc:e1:68:e2:fd:71:
27:0d:5b:93:87:c1:5c:80:e0:34:6c:0b:d8:a4:ee:
40:57:df:58:12:0b:bb:c4:44:bd:ba:3a:11:2c:0e:
2b:0f:b5:a8:0e:f0:c8:2c:ac:c8:bb:bb:9e:84:53:
04:b5:ab:6e:e5:f3:c8:5c:7d:17:e2:43:79:45:d3:
69:d6:58:93:17:cb:b8:fa:f0:24:89:45:3f:29:cc:
ed:13:52:f0:23:b0:5e:b2:2f:c4:2a:38:2f:17:07:
23:d6:a9:0b:c5:62:57:45:c4:8b:28:16:13:ea:bb:
a3:94:59:14:6d:3e:9b:1f:ab:b0:1c:f2:13:15:00:
2a:64:77:2f:e2:b8:b5:57:4b:41:be:be:24:6c:fc:
de:4c:bc:bd:8c:6d:d8:fb:40:51:3c:b4:34:35:4d:
21:2c:e9:98:4a:83:75:7e:18:d1:c3:19:53:4b:be:
fd:3a:9b:2b:33:a9:29:b1:e0:1c:e1:4f:fd:77:ab:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:99:17:E8:53:CC:F4:2D:E5:7F:A0:BA:96:06:07:88:AF:A5:03
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a2:98:0c:f1:97:92:75:03:38:89:ce:06:d6:27:34:ca:52:
99:bb:36:8d:9a:af:f9:fb:79:25:eb:1c:1e:7f:45:d1:af:44:
b1:c8:c0:3a:6f:bc:71:84:19:b2:24:95:19:3a:60:65:33:ca:
14:6a:32:37:1c:1b:91:66:84:6e:d4:10:7d:e0:bf:5c:44:3f:
f1:b2:07:57:11:10:38:c6:7e:73:1f:1d:94:ee:a1:d5:26:0f:
7b:fe:4a:15:dc:67:bf:ef:b9:b5:82:b5:54:cc:67:51:4a:33:
33:9f:f4:2f:0b:6a:35:b5:c8:ad:38:4f:f3:3e:32:b4:f1:79:
4e:a4:94:aa:bf:a1:d7:68:ea:6c:71:da:00:3b:67:7f:e0:c9:
cf:77:cd:e0:e6:77:8e:6d:46:36:e1:a5:72:12:cd:cb:12:ab:
62:c9:9e:9a:59:4a:c2:44:1c:a9:3c:78:70:db:6e:07:2e:cb:
55:c6:79:bf:7c:6f:a9:46:9e:15:b1:92:f3:2b:99:14:32:f3:
b3:cd:c0:a3:f2:e5:32:c8:e0:d4:66:57:e0:87:a4:65:e6:2f:
01:cc:86:80:ef:7b:05:fa:8b:a3:8d:6b:fe:8d:67:ca:56:ba:
76:46:7c:f2:44:78:2f:b2:f7:f6:6b:96:78:f9:b9:1e:c4:82:
f4:27:17:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUHywGL5mMEEEtXXllDEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm
Y2QwMDYwHhcNMjYwNzI4MjAwMDI5WhcNMjYwNzI5MjAwMDI5WjAzMTEwLwYDVQQD
Eyg3MzY2OTkxN2U4NTNjY2Y0MmRlNTdmYTBiYTk2MDYwNzg4YWZhNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8hDmAAnYY4YRpSLgHzz2dTaX5+E
2wDIVw37RA7xZIxOnXLRZFYJceHkIjo9hci578bUH+ELnV8lZ267jgKx0LtSHq7c
4Wji/XEnDVuTh8FcgOA0bAvYpO5AV99YEgu7xES9ujoRLA4rD7WoDvDILKzIu7ue
hFMEtatu5fPIXH0X4kN5RdNp1liTF8u4+vAkiUU/KcztE1LwI7Besi/EKjgvFwcj
1qkLxWJXRcSLKBYT6rujlFkUbT6bH6uwHPITFQAqZHcv4ri1V0tBvr4kbPzeTLy9
jG3Y+0BRPLQ0NU0hLOmYSoN1fhjRwxlTS779OpsrM6kpseAc4U/9d6uVCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNmmRfoU8z0LeV/oLqWBgeIr6UDMB8GA1UdIwQY
MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt
NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy
LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6KYDPGX
knUDOInOBtYnNMpSmbs2jZqv+ft5JescHn9F0a9EscjAOm+8cYQZsiSVGTpgZTPK
FGoyNxwbkWaEbtQQfeC/XEQ/8bIHVxEQOMZ+cx8dlO6h1SYPe/5KFdxnv++5tYK1
VMxnUUozM5/0LwtqNbXIrThP8z4ytPF5TqSUqr+h12jqbHHaADtnf+DJz3fN4OZ3
jm1GNuGlchLNyxKrYsmemllKwkQcqTx4cNtuBy7LVcZ5v3xvqUaeFbGS8yuZFDLz
s83Ao/LlMsjg1GZX4IekZeYvAcyGgO97BfqLo41r/o1nyla6dkZ88kR4L7L39muW
ePm5HsSC9CcXsQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:50:20 2026 by rpki-client