Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: nJZIoI4bjBH3wPGUqTgIC5hmGS/inAry5kViN31PpoQ=
Subject key identifier: 6C:76:B2:87:31:1B:00:C7:11:EA:8E:3B:17:99:97:A6:88:39:A2:28
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019CAD23146FF63379929CE0CC42EEBB47BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 1313
Signing time: Mon 02 Mar 2026 06:01:23 +0000
Manifest this update: Mon 02 Mar 2026 06:01:23 +0000
Manifest next update: Tue 03 Mar 2026 06:01:23 +0000
Files and hashes: 1: cSKDwPxDVXXkk_flq4GHJup7ieU.roa (hash: W0F3HzF5Oug74ick2FDUWrm4omprJ/KY32MOgnvN5+U=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: rGfJ1T3HRUIvGOTI4euw4PwFKmBpPKrhkcjOT3kLZus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:14:6f:f6:33:79:92:9c:e0:cc:42:ee:bb:47:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Mar 2 06:01:23 2026 GMT
Not After : Mar 3 06:01:23 2026 GMT
Subject: CN=6c76b287311b00c711ea8e3b179997a68839a228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:31:f1:5e:b2:8c:8e:40:e6:1b:88:a6:0c:
ab:bb:a4:df:10:5e:ed:87:b0:90:f5:b7:b5:21:4a:
8b:58:9a:ef:a4:12:c0:2a:92:dc:c3:1c:31:6c:c3:
93:5b:2c:11:1c:b0:28:0d:b2:5b:91:ac:02:c3:99:
04:19:d0:f2:b8:0b:1b:2c:8b:75:96:e3:0d:ed:6c:
ad:a5:0d:a4:d7:0b:57:20:24:66:20:cf:c1:c2:5c:
e7:03:54:5c:9b:ab:8b:da:ab:38:18:cb:5c:1c:ba:
ad:b0:d7:0d:a6:87:84:12:5b:7a:7c:30:8c:f7:e3:
30:a5:f7:d8:b9:bc:82:4a:9a:26:a1:42:7f:5f:35:
7b:55:52:53:91:64:a6:92:9a:93:03:7e:c2:ec:62:
c1:c6:b1:aa:00:4e:e9:56:5e:c5:a0:8e:1d:0f:0f:
8d:b2:73:e3:81:4f:db:37:df:17:70:da:83:13:fb:
e1:10:00:61:74:05:65:10:e8:eb:76:f3:00:08:19:
48:e8:fb:cc:15:bd:c9:30:db:b0:03:2c:1c:38:a0:
a1:f9:ce:b8:d1:bb:82:a5:45:a4:24:7f:24:ab:e6:
71:df:a0:9b:e3:ee:eb:a4:7a:5f:cf:02:00:39:b9:
ac:c5:f5:17:19:a4:16:e5:48:c9:06:b8:9e:14:46:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:B2:87:31:1B:00:C7:11:EA:8E:3B:17:99:97:A6:88:39:A2:28
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:44:83:f4:95:91:f8:fa:71:20:8d:92:77:2f:49:89:c5:
b4:8d:9b:5a:61:30:21:33:c6:13:07:6c:d9:01:0f:68:f3:fe:
59:83:9f:ec:69:7f:5d:34:c0:50:f2:fd:d9:c6:31:8b:86:54:
f4:a0:83:85:8c:20:4b:0c:ea:ca:9d:7e:f0:83:c6:d3:01:bf:
fc:00:a3:07:a4:16:5f:f0:8b:af:4c:25:36:be:61:1a:fa:ae:
bb:73:43:9e:9a:78:8c:78:16:b1:36:00:8a:d6:9f:f7:43:b5:
73:de:40:45:f3:c4:21:86:e1:90:e8:91:99:7c:1b:d6:d8:1f:
f9:4e:4b:b5:9c:6d:44:14:04:da:3a:20:8f:81:aa:62:4f:9e:
94:14:05:f1:24:59:d5:b6:5f:46:9a:a9:06:69:78:3d:cc:40:
fb:32:5e:c9:a8:55:9e:38:36:c0:35:7e:6b:18:00:1a:f0:4b:
ca:a4:05:25:d2:c6:d4:28:28:8f:42:c8:93:2b:6b:52:d2:1d:
07:44:7f:f6:1c:df:62:7a:ff:9a:a7:76:9a:15:07:13:9f:ab:
cb:01:78:b1:10:24:1f:45:20:67:47:21:c1:4e:91:32:a8:90:
2d:20:96:23:73:70:45:d6:4d:28:b7:80:8a:8d:03:44:bb:c9:
dc:ce:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:18 2026 by rpki-client