Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: wZoTuxOQFlD8qXcfnz7ip2C5y3k0fMJwPyzIZ4OxALI=
Subject key identifier: 90:A5:BC:EA:D9:40:94:E3:24:D4:A7:AC:12:7E:AD:D0:79:24:37:0D
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019F91355E5B7BDABDDEA9E707DFAD6981EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1995
Signing time: Thu 23 Jul 2026 23:00:21 +0000
Manifest this update: Thu 23 Jul 2026 23:00:21 +0000
Manifest next update: Fri 24 Jul 2026 23:00:21 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: JAc59chWxnbVj4arm2KxHdYkCsk.roa (hash: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=)
3: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: 1FWpnrqEwyGK38Mf786+YGMsdKu9igH3UNZNxSXkCf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:5e:5b:7b:da:bd:de:a9:e7:07:df:ad:69:81:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Jul 23 23:00:21 2026 GMT
Not After : Jul 24 23:00:21 2026 GMT
Subject: CN=90a5bcead94094e324d4a7ac127eadd07924370d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:73:9c:07:4c:f5:b9:ba:cb:70:de:ff:de:
56:8b:61:da:61:bd:7a:e7:92:52:26:d3:c4:3b:23:
44:03:26:5c:e4:af:c8:39:a6:27:2a:74:70:e9:d0:
31:cf:f0:ce:7b:8e:42:d8:4b:e4:26:e3:dc:01:05:
5c:1a:74:6a:aa:14:de:92:e3:48:15:28:2f:ae:fe:
9d:20:47:7f:3c:7b:17:d0:9b:8b:53:7f:fe:99:7d:
d5:d0:ef:8a:f8:7c:c2:1b:be:c1:a2:69:87:ea:41:
d1:50:e2:99:56:82:ec:6b:80:cf:86:28:5a:79:d2:
60:e7:d8:60:71:df:04:96:c5:d9:e2:c5:3c:a3:8a:
69:45:ff:5a:e2:53:80:23:f7:ea:77:74:7b:0b:84:
18:b8:3c:72:cf:45:77:6b:c2:7d:cc:49:93:af:50:
df:7e:32:6d:57:43:cf:7c:e8:ff:b2:bc:ac:d3:31:
2a:67:c1:ea:98:26:32:61:b0:99:3b:08:b3:c1:65:
a3:e9:47:be:3d:da:03:b0:c5:7c:1a:f1:ed:be:8e:
90:e1:65:d8:a0:f3:e5:95:67:22:ce:51:ad:1f:d5:
55:5b:55:12:5b:88:6c:a5:d9:38:21:4e:a0:ba:4e:
08:9d:25:2a:34:9b:c8:be:4c:42:1c:0b:9c:45:07:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A5:BC:EA:D9:40:94:E3:24:D4:A7:AC:12:7E:AD:D0:79:24:37:0D
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:11:b6:4a:34:84:82:af:14:2a:bf:5b:dc:14:7a:a0:ca:64:
d4:03:5b:85:4e:3b:d4:e5:7a:e5:c2:f6:12:60:55:44:1b:0d:
e3:e3:d9:70:52:aa:b7:2b:c9:3f:70:74:17:5f:37:14:a4:80:
e6:ac:21:6e:ae:2d:1d:42:5c:66:ba:e2:d1:2e:84:53:be:24:
10:d1:20:f4:3a:60:d0:2a:d3:05:46:76:14:7b:65:ad:fe:9b:
9e:81:83:36:28:84:f2:34:fc:21:f0:a5:ad:dd:d6:c7:22:f6:
d3:d6:b0:f2:8e:fe:0b:05:f9:9d:9b:84:e7:21:e2:9d:2f:58:
ad:25:d4:5d:06:42:d1:85:5c:f6:02:b0:16:1a:3f:ad:90:a8:
06:bb:9b:68:7b:16:68:d9:ca:75:e8:73:b9:15:f4:f9:31:1f:
aa:7f:d4:f0:a2:3f:4f:58:26:f4:c6:76:13:84:81:59:72:84:
e8:23:fd:1c:6f:89:9c:38:37:3f:48:5e:cc:f4:7f:5e:73:82:
5f:6e:d7:99:41:77:2e:a6:23:a2:90:54:62:7e:78:13:7c:c6:
8e:b3:18:49:fc:f6:47:50:fc:0a:69:fd:10:76:39:d3:22:2b:
33:3a:a3:da:8f:68:64:26:22:66:30:51:2f:8b:6a:c8:30:be:
a5:ab:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:46 2026 by rpki-client