Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: w2iD5jx89mpwNAdRajQEUROHFkbluTH7NQZmNXOBqhw=
Subject key identifier: CB:A4:5A:16:9C:04:94:0D:1F:74:A7:7B:4D:55:A4:06:CE:F1:8E:70
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019D9E88928259C58321B3D288B387DE0038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 1390
Signing time: Sat 18 Apr 2026 03:00:43 +0000
Manifest this update: Sat 18 Apr 2026 03:00:43 +0000
Manifest next update: Sun 19 Apr 2026 03:00:43 +0000
Files and hashes: 1: cSKDwPxDVXXkk_flq4GHJup7ieU.roa (hash: W0F3HzF5Oug74ick2FDUWrm4omprJ/KY32MOgnvN5+U=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: cdn2iDwktrwGC/kavRynlperLyce+V/vykDcYLPt4xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:92:82:59:c5:83:21:b3:d2:88:b3:87:de:00:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Apr 18 03:00:43 2026 GMT
Not After : Apr 19 03:00:43 2026 GMT
Subject: CN=cba45a169c04940d1f74a77b4d55a406cef18e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:cd:ab:b4:c0:e0:de:06:8c:a2:d9:61:94:
53:45:b1:6c:41:8f:00:b7:e1:47:4c:80:34:95:43:
9e:9c:16:85:97:c5:8b:60:0e:7f:da:67:d1:03:99:
43:7f:12:45:1d:77:b2:f5:32:db:59:4b:5f:65:f5:
b4:ff:80:aa:e4:a6:ae:60:25:55:8a:47:67:69:0c:
2a:54:34:7c:3c:e7:f6:09:6b:80:9d:8b:89:9d:46:
eb:5c:40:fb:e2:ac:07:f6:a7:09:b5:ed:9b:24:fb:
7e:8f:b0:b7:66:9b:fd:18:06:7b:03:f3:5f:1a:5e:
b7:a5:84:2f:ce:7c:ba:87:2c:15:de:59:f3:37:7e:
54:22:c2:f8:6d:57:d4:45:90:3d:fe:ce:88:a7:51:
aa:ce:5c:7e:49:1e:c0:b8:0a:f2:c6:42:b8:cc:3f:
1c:59:bf:14:6e:cd:4f:8a:84:f4:1e:4a:d4:75:9b:
c5:1d:66:8c:f9:9e:d5:a0:04:f6:de:e5:fa:0c:f1:
17:11:fc:54:d3:e9:5d:70:2d:22:f4:e5:b1:cc:ef:
1c:df:e6:db:54:69:3f:6d:c6:02:cc:a6:a0:84:c2:
5c:e6:58:04:fb:07:d1:a8:50:6f:9b:87:58:bf:76:
9a:45:cd:1b:c5:00:25:5d:c5:d4:01:d2:c2:2f:d0:
3f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:5A:16:9C:04:94:0D:1F:74:A7:7B:4D:55:A4:06:CE:F1:8E:70
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:c1:02:ba:08:63:0c:2d:72:a1:b9:47:ef:92:01:32:e4:
79:74:85:bc:3a:76:15:51:26:e5:f5:71:ba:f5:f5:27:cb:66:
a6:c6:65:a8:5a:81:38:88:0e:08:fb:c2:a9:63:3a:bd:5c:25:
82:ad:35:b4:e7:0d:b8:bb:be:a3:98:35:f0:c9:cd:2b:08:1e:
93:4a:7a:40:6e:d1:25:89:c1:86:4c:53:1f:99:e4:12:4a:82:
16:50:68:b2:fb:63:3e:a7:30:40:0e:be:65:be:bc:72:ed:19:
12:ba:0a:8d:18:52:5d:7c:bc:34:2f:7c:78:2b:b8:a9:a1:47:
94:4e:63:9f:dc:6d:8c:46:b5:79:ff:b3:e6:29:b9:4f:6c:d7:
97:cf:cd:e6:d7:2b:4e:25:dc:70:79:fa:f6:c9:8b:21:d6:4b:
fd:46:84:26:3a:1f:5e:e1:eb:7f:07:c7:37:a3:b7:9f:55:28:
a1:f9:d4:4f:bf:3d:90:89:2f:b4:43:92:a0:0d:82:ae:5d:53:
fc:ea:46:67:32:36:69:81:82:0f:7f:6f:b4:26:ee:81:5a:4c:
a9:1b:72:f8:61:6a:d7:0f:74:45:5a:75:6a:10:62:e5:5b:c2:
24:61:7f:5e:1f:bd:8d:1a:48:32:33:66:aa:63:5e:22:e6:ed:
7b:27:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:04 2026 by rpki-client