
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: 8Wty/yqBSTufLHG8SdOUcBzkaScop3ATuRokHLeYCws=
Subject key identifier: C5:62:E9:59:EC:1B:79:5C:5F:2E:1C:44:06:38:54:F2:9C:3C:9B:65
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 01A0BE7948EEDF997045C3967C9A0E668158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0B9B
Signing time: Sun 20 Sep 2026 11:00:14 +0000
Manifest this update: Sun 20 Sep 2026 11:00:14 +0000
Manifest next update: Mon 21 Sep 2026 11:00:14 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: tuGVfWE9HYasKnssJA1Au2VsQCzXKFYlKZpp+BfcAyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:48:ee:df:99:70:45:c3:96:7c:9a:0e:66:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Sep 20 11:00:14 2026 GMT
Not After : Sep 21 11:00:14 2026 GMT
Subject: CN=c562e959ec1b795c5f2e1c44063854f29c3c9b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:45:9e:a0:76:b7:8d:0d:15:46:d7:e2:92:
27:5a:e7:7e:17:fc:b1:5e:80:1f:a9:80:e5:58:0d:
5f:9c:d3:a9:49:92:b1:43:e4:7a:f5:9b:c7:da:dd:
ef:44:5b:45:c9:eb:4e:ee:b3:29:44:38:b5:02:05:
56:ba:97:01:47:9a:98:c6:4f:3e:c5:c6:86:ef:75:
b3:1e:32:d6:d2:3d:f6:50:44:9d:2b:c9:01:5d:3a:
b0:a8:56:25:06:b4:72:51:dc:ac:b2:ca:39:12:e2:
61:70:19:fb:74:c9:7c:dd:cb:b6:ad:15:54:f3:af:
5b:71:b0:dc:55:f1:40:56:2c:46:70:71:42:da:1b:
5d:dc:2f:28:86:b4:e2:28:33:3a:e4:37:5f:6b:e0:
46:2f:0d:77:f0:a7:52:f6:78:e5:bf:ba:e5:f3:a6:
95:fa:6a:af:bd:1c:51:0a:0a:5f:a6:c6:e0:c4:f3:
91:94:92:f9:7d:f2:6a:95:62:15:3c:97:25:07:81:
e6:ec:c0:a7:71:88:84:94:e7:41:44:bd:07:65:24:
35:17:53:89:22:ac:3d:fc:df:9a:53:fc:43:8d:15:
6d:d3:0a:b5:dd:45:95:5d:86:68:74:12:d5:a9:7a:
2d:0e:45:e1:b9:d8:e6:eb:70:87:2f:bf:c4:92:18:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:E9:59:EC:1B:79:5C:5F:2E:1C:44:06:38:54:F2:9C:3C:9B:65
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:11:d9:a8:ea:41:c4:be:60:52:1e:7e:9e:a5:2c:57:fd:83:
f6:50:fc:f1:57:3b:1d:7b:b9:b1:73:d5:f9:a9:69:c9:8e:a9:
ec:97:5a:48:c8:ec:9f:18:2c:b4:b4:cb:35:62:80:e5:c7:be:
e6:d5:7a:1f:5a:f3:2e:9d:e3:a7:a2:72:77:f5:4e:ae:7a:42:
e4:fe:6d:82:9b:6e:ce:6a:9f:2e:82:f5:91:30:11:6b:8e:e4:
e9:7a:2a:95:dd:34:e7:3a:38:0d:d6:d5:73:e0:4c:b0:bb:0a:
23:dd:36:6e:89:d9:d0:42:e7:b0:42:ea:ef:19:ff:8c:1a:73:
22:d5:ad:67:df:7c:3b:58:1b:34:64:df:79:3b:ca:79:cd:32:
e0:9b:d1:4a:44:7e:a9:fa:02:f8:e7:15:fe:5c:91:9e:f0:3c:
36:eb:60:0b:e7:42:0d:bc:f0:9e:39:9e:56:15:9f:42:99:9e:
06:f2:9d:25:a9:12:a2:d5:ee:de:91:1d:7f:8a:a1:41:2e:c0:
34:9a:34:02:c7:0a:71:5b:3b:48:3d:9e:c1:f6:e3:04:68:20:
92:75:21:cc:e8:46:ec:ec:4e:8f:41:70:4d:f9:12:eb:d1:c0:
b1:70:5f:4f:6d:c3:3a:44:10:a8:db:52:7b:ba:7a:6d:6d:2b:
43:2d:5c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+eUju35lwRcOWfJoOZoFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm
Y2QwMDYwHhcNMjYwOTIwMTEwMDE0WhcNMjYwOTIxMTEwMDE0WjAzMTEwLwYDVQQD
EyhjNTYyZTk1OWVjMWI3OTVjNWYyZTFjNDQwNjM4NTRmMjljM2M5YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLlFnqB2t40NFUbX4pInWud+F/yx
XoAfqYDlWA1fnNOpSZKxQ+R69ZvH2t3vRFtFyetO7rMpRDi1AgVWupcBR5qYxk8+
xcaG73WzHjLW0j32UESdK8kBXTqwqFYlBrRyUdyssso5EuJhcBn7dMl83cu2rRVU
869bcbDcVfFAVixGcHFC2htd3C8ohrTiKDM65Ddfa+BGLw138KdS9njlv7rl86aV
+mqvvRxRCgpfpsbgxPORlJL5ffJqlWIVPJclB4Hm7MCncYiElOdBRL0HZSQ1F1OJ
Iqw9/N+aU/xDjRVt0wq13UWVXYZodBLVqXotDkXhudjm63CHL7/EkhguCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVi6VnsG3lcXy4cRAY4VPKcPJtlMB8GA1UdIwQY
MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt
NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy
LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBHZqOpB
xL5gUh5+nqUsV/2D9lD88Vc7HXu5sXPV+alpyY6p7JdaSMjsnxgstLTLNWKA5ce+
5tV6H1rzLp3jp6Jyd/VOrnpC5P5tgptuzmqfLoL1kTARa47k6Xoqld005zo4DdbV
c+BMsLsKI902bonZ0ELnsELq7xn/jBpzItWtZ998O1gbNGTfeTvKec0y4JvRSkR+
qfoC+OcV/lyRnvA8NutgC+dCDbzwnjmeVhWfQpmeBvKdJakSotXu3pEdf4qhQS7A
NJo0AscKcVs7SD2ewfbjBGggknUhzOhG7OxOj0FwTfkS69HAsXBfT23DOkQQqNtS
e7p6bW0rQy1cxQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:21:56 2026 by rpki-client