Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: hjqbzU7G5ZHW3aDFY3nIjBc3F8brFtd+GXLNxCJA128=
Subject key identifier: 8C:7A:AC:5F:15:1A:69:7B:50:57:98:B3:9F:E8:B3:3D:14:13:48:0C
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019DA2D3527B8C01BF80F3BFAE4DF093E70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 09FF
Signing time: Sat 18 Apr 2026 23:00:51 +0000
Manifest this update: Sat 18 Apr 2026 23:00:51 +0000
Manifest next update: Sun 19 Apr 2026 23:00:51 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: Qm/SKwiUlqSr29L6b9zMpIVnVEfSCyScUQT+I68GeVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:52:7b:8c:01:bf:80:f3:bf:ae:4d:f0:93:e7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Apr 18 23:00:51 2026 GMT
Not After : Apr 19 23:00:51 2026 GMT
Subject: CN=8c7aac5f151a697b505798b39fe8b33d1413480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:77:df:0c:8e:ff:a4:51:d8:d2:91:35:32:
f6:02:b3:42:0c:50:26:71:a9:33:70:7a:ee:59:eb:
e1:c8:7d:7c:af:8f:50:46:ed:25:1d:67:c6:c7:9e:
81:2c:44:0d:d8:91:a3:21:80:81:bd:b2:6f:82:0e:
5c:a9:2e:b9:d6:83:08:93:bd:06:14:91:f4:19:8d:
b8:72:46:33:28:fe:8f:28:91:d3:0f:2e:02:c3:7c:
4c:37:62:52:5c:fe:c1:8c:89:9d:b4:a9:8b:32:4d:
90:37:3d:f1:e2:64:eb:2d:94:83:3d:f3:2f:4b:ce:
24:b4:27:45:91:36:48:91:30:31:41:ea:ca:0d:57:
9c:43:d5:6c:ac:37:0d:96:c0:a7:65:82:d9:53:c5:
35:5d:f2:bd:a6:99:51:fd:8c:f3:95:47:98:c9:ce:
78:e2:89:b4:9c:ae:53:ac:46:60:c5:df:16:ba:cc:
e2:17:ab:1d:b2:c1:e8:23:41:51:f5:c5:4a:f3:7f:
71:54:a5:1f:89:6e:38:db:72:cc:0f:53:5a:2a:62:
5d:86:80:b9:24:1c:dd:b3:08:f7:55:e8:c0:17:d4:
97:b0:81:8a:ec:82:8f:5c:2e:9c:f4:da:4d:25:b1:
68:2a:a3:04:63:12:80:dd:8a:42:47:a1:ec:bd:74:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:AC:5F:15:1A:69:7B:50:57:98:B3:9F:E8:B3:3D:14:13:48:0C
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e2:18:3e:cf:11:41:38:fd:0f:d9:70:69:97:c8:fd:84:ac:
89:32:43:86:b4:eb:83:10:6a:04:8d:8b:17:12:64:95:9b:e7:
92:c2:2e:43:60:47:0c:79:69:c1:0b:d0:b0:d4:ba:44:b5:ea:
bd:4f:47:ad:e6:2f:7f:da:40:b6:49:93:43:ac:18:e2:29:09:
68:bc:8e:dd:21:8a:0f:91:58:00:80:89:f6:5b:61:68:53:e4:
02:56:09:d2:a0:8a:b9:49:c7:93:1e:cb:a4:f9:04:21:52:41:
7a:ea:38:e5:fa:24:27:89:c0:c0:80:76:08:b6:a5:c2:53:be:
09:2e:a4:c9:76:35:8b:20:85:ce:ac:47:b5:a2:30:7d:30:44:
38:8b:f8:b7:44:c9:77:db:6a:4c:25:4b:e8:a0:18:2d:3c:9f:
a1:bd:95:a0:3c:f5:83:ea:7f:40:f6:d1:54:f7:59:e1:a8:30:
d2:1f:32:55:2c:a8:53:85:d2:c4:d0:45:7b:ec:0b:34:90:1a:
69:9f:e6:67:b1:c5:fd:81:98:4e:1b:2b:5b:96:d3:7f:6f:08:
b5:8b:8e:e2:1a:54:ca:09:01:d6:cd:ea:e5:c9:75:a4:4b:11:
e6:78:1d:03:e3:3a:a9:ce:a3:15:cf:72:2b:df:51:4d:80:59:
7f:4f:e3:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i01J7jAG/gPO/rk3wk+cNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm
Y2QwMDYwHhcNMjYwNDE4MjMwMDUxWhcNMjYwNDE5MjMwMDUxWjAzMTEwLwYDVQQD
Eyg4YzdhYWM1ZjE1MWE2OTdiNTA1Nzk4YjM5ZmU4YjMzZDE0MTM0ODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqh33wyO/6RR2NKRNTL2ArNCDFAm
cakzcHruWevhyH18r49QRu0lHWfGx56BLEQN2JGjIYCBvbJvgg5cqS651oMIk70G
FJH0GY24ckYzKP6PKJHTDy4Cw3xMN2JSXP7BjImdtKmLMk2QNz3x4mTrLZSDPfMv
S84ktCdFkTZIkTAxQerKDVecQ9VsrDcNlsCnZYLZU8U1XfK9pplR/YzzlUeYyc54
4om0nK5TrEZgxd8WusziF6sdssHoI0FR9cVK839xVKUfiW4423LMD1NaKmJdhoC5
JBzdswj3VejAF9SXsIGK7IKPXC6c9NpNJbFoKqMEYxKA3YpCR6HsvXSqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx6rF8VGml7UFeYs5/osz0UE0gMMB8GA1UdIwQY
MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt
NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy
LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseIYPs8R
QTj9D9lwaZfI/YSsiTJDhrTrgxBqBI2LFxJklZvnksIuQ2BHDHlpwQvQsNS6RLXq
vU9HreYvf9pAtkmTQ6wY4ikJaLyO3SGKD5FYAICJ9lthaFPkAlYJ0qCKuUnHkx7L
pPkEIVJBeuo45fokJ4nAwIB2CLalwlO+CS6kyXY1iyCFzqxHtaIwfTBEOIv4t0TJ
d9tqTCVL6KAYLTyfob2VoDz1g+p/QPbRVPdZ4agw0h8yVSyoU4XSxNBFe+wLNJAa
aZ/mZ7HF/YGYThsrW5bTf28ItYuO4hpUygkB1s3q5cl1pEsR5ngdA+M6qc6jFc9y
K99RTYBZf0/jHw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:07 2026 by rpki-client