Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: F6cFNVYJiMlFYecy0U541oSqd5Pv7s/nVwdx73F8mvo=
Subject key identifier: 73:4A:9E:B0:34:EB:30:1C:CC:B9:AC:37:A9:15:75:12:AD:7D:16:F4
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019D277244386E65947948457C8E8B4758F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1855
Signing time: Thu 26 Mar 2026 00:01:32 +0000
Manifest this update: Thu 26 Mar 2026 00:01:32 +0000
Manifest next update: Fri 27 Mar 2026 00:01:32 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: Y17yymKA8ZFPX4KuEHG5qpUW5w31wC7BqhPjrR8VhDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:44:38:6e:65:94:79:48:45:7c:8e:8b:47:58:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Mar 26 00:01:32 2026 GMT
Not After : Mar 27 00:01:32 2026 GMT
Subject: CN=734a9eb034eb301cccb9ac37a9157512ad7d16f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:c5:d8:c3:84:1a:55:7d:df:8a:34:a2:7c:
5b:e9:e7:e6:be:b5:93:26:dd:8f:75:d5:73:71:88:
54:03:8e:a0:5a:5c:68:c2:ce:48:47:f2:08:75:fe:
02:de:3f:c2:65:99:4e:d2:8c:f6:a0:eb:36:3d:22:
30:2d:87:40:7e:1e:7b:bf:1a:16:b7:31:42:38:80:
a7:b6:25:3e:9b:02:78:d6:dd:70:8e:df:cd:e4:d1:
61:bc:52:51:81:c8:f2:a4:1a:10:7b:fa:f4:6f:24:
24:fe:02:70:36:38:a8:7a:ac:a6:33:3f:86:0b:f5:
39:d8:b5:c7:07:1b:e4:09:cd:48:56:cd:c3:f3:5b:
3e:7c:81:c5:34:3b:68:2f:84:c6:01:9e:30:20:77:
9d:e3:60:60:06:bf:bd:1d:2f:4a:33:c4:f1:e5:34:
d2:33:ce:68:cd:f7:7c:ee:f5:96:67:a7:04:f0:b8:
fd:a4:57:91:7c:1f:62:65:56:e5:ed:02:8e:11:ce:
2f:41:18:3e:17:37:b7:59:17:cf:ea:7d:7c:72:52:
59:c3:99:d0:21:13:74:d9:74:79:58:35:8a:86:6e:
6b:6f:2a:de:72:d2:15:e7:bd:72:3a:3e:25:d1:bc:
de:29:e6:e0:59:5e:81:17:59:cd:96:9a:55:ae:f6:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4A:9E:B0:34:EB:30:1C:CC:B9:AC:37:A9:15:75:12:AD:7D:16:F4
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:f6:19:c5:53:e4:7d:ef:bf:40:b8:76:8a:bd:61:b7:b7:
47:a4:e0:8f:51:1f:e1:6b:ad:17:b4:24:ff:d4:52:1f:45:12:
2a:29:4c:b6:26:31:56:83:93:4d:67:56:89:17:85:ef:c7:94:
3c:76:3a:1c:05:ea:19:a0:57:c5:70:5d:4b:64:5c:84:87:8a:
4b:27:8b:f9:ec:ae:b0:93:14:18:53:57:a4:c9:5f:28:3a:7b:
aa:4c:f8:db:97:dd:16:a0:01:b2:38:af:91:14:e6:18:fe:3c:
c3:2e:e2:57:47:79:fe:38:9c:ec:5d:2b:6b:21:3d:71:24:1c:
e5:77:f5:55:a6:ee:ac:ab:f7:83:3f:d4:fd:96:fc:fd:6a:5d:
02:ff:11:03:b2:de:64:0a:ff:91:67:ad:d7:60:16:bc:5d:ee:
c3:c7:aa:5a:f8:96:de:fe:ab:fd:90:94:ab:5f:36:af:15:21:
23:02:4e:12:ee:75:9a:c8:16:bf:fb:b1:f3:ff:74:39:ef:c5:
c5:60:26:ba:43:ce:a9:33:85:eb:e0:65:c1:10:71:3b:29:52:
77:06:05:5c:ae:52:74:a0:4e:ed:0c:90:b1:e7:14:73:16:3b:
e2:36:00:53:ff:8c:68:f3:7f:22:5c:90:73:89:0b:ae:c6:15:
03:af:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:24 2026 by rpki-client