Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: hGUDL0CGcZ4xNFlsp6EbkXGEum1p0IXGRnpzKNz3aKs=
Subject key identifier: D0:0B:31:FB:C3:2D:2D:0B:D7:93:81:1A:3D:8A:84:E0:08:57:54:25
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019CA9B3C2214479D85E577DFF7520678A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 097E
Signing time: Sun 01 Mar 2026 14:00:55 +0000
Manifest this update: Sun 01 Mar 2026 14:00:55 +0000
Manifest next update: Mon 02 Mar 2026 14:00:55 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: TNZOs4qOLajxw2bPQooA71IdHDm3nb3vGTfH1iT5w/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c2:21:44:79:d8:5e:57:7d:ff:75:20:67:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Mar 1 14:00:55 2026 GMT
Not After : Mar 2 14:00:55 2026 GMT
Subject: CN=d00b31fbc32d2d0bd793811a3d8a84e008575425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:83:76:27:2d:5d:19:bf:6e:d1:d5:6f:d6:
e0:7d:d0:d0:f7:2f:e0:ed:22:6e:23:73:36:dd:c8:
00:03:3d:58:c6:5d:60:0f:dd:3b:c2:bf:b0:41:e1:
a3:71:ff:1c:d7:a8:17:b9:74:d1:66:3f:24:15:6a:
a5:af:8e:ce:fd:a7:b0:a1:1a:5c:ba:89:e2:79:f4:
72:3b:44:7a:a3:ee:dd:e5:ae:4d:f4:1f:e8:f2:9a:
93:f6:12:ee:53:05:13:75:4e:39:51:3e:43:02:c4:
26:c3:84:29:a6:0c:c7:f2:b9:ea:ae:44:1a:6c:d3:
d3:73:a0:a5:35:f0:b0:9a:42:00:a1:07:2c:fd:9e:
cf:ca:93:eb:f1:fa:ac:b9:3a:e0:8d:a0:58:53:99:
3d:71:c7:e2:df:d4:62:d2:f7:9b:ee:bc:53:50:9a:
d5:a5:dc:9c:bd:57:86:32:c0:3d:28:2e:a9:31:c0:
c6:03:7d:56:fa:89:63:0c:03:47:7e:30:42:f4:3d:
54:80:f2:3e:df:7f:b5:87:b5:ba:8e:13:1e:ba:34:
a1:2d:27:9c:a1:df:15:5d:b8:77:c6:e4:ea:74:73:
3c:31:8d:13:07:11:98:3c:58:18:d9:9d:b2:42:dc:
6c:84:a6:86:e4:57:fc:ee:ce:9c:f7:a2:cd:35:c8:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:31:FB:C3:2D:2D:0B:D7:93:81:1A:3D:8A:84:E0:08:57:54:25
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9c:80:7f:30:55:b1:9a:ef:23:14:3a:cb:6d:4a:94:02:18:
6c:16:40:0b:df:f6:fc:7d:e1:64:73:ee:eb:fc:d3:4c:b1:25:
2b:0a:dd:2d:e3:f1:0e:f5:4b:47:80:42:0d:f3:9f:a3:4e:f4:
8b:07:26:4f:49:25:d0:48:8a:ad:cd:a1:b4:18:d6:e6:20:bd:
43:73:33:42:fc:fb:e5:da:d7:0c:71:82:07:de:40:6d:ec:95:
e2:d6:03:c4:1b:b8:10:1f:4b:8a:e5:a0:67:d0:f1:62:99:38:
79:fb:f2:d0:dd:50:a2:df:83:6d:96:ac:33:c2:9d:52:d7:e0:
9a:d1:4f:9e:e8:c8:0d:27:5a:a0:ff:f1:4a:e7:ff:eb:b3:97:
02:a8:5b:4b:15:0e:20:85:3e:e1:42:be:08:5f:a0:37:b1:9a:
a4:29:32:90:e1:26:dc:f4:79:f3:01:02:ab:61:90:7d:36:8b:
f2:e9:72:c6:cb:5c:30:1c:aa:86:34:b3:a2:85:c4:59:06:1b:
fb:2e:41:d3:f9:f3:f7:5e:5d:d1:fd:96:48:0d:eb:9b:27:be:
2d:a1:04:45:d5:ac:0f:2c:d1:3c:01:a3:47:a5:cf:15:b4:81:
12:bd:bd:18:53:f3:e6:d5:ae:f5:0c:60:50:1f:41:33:ac:89:
15:5e:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:48 2026 by rpki-client