Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: X2NWs3McrlBXGrJ0kfn4n4mgg/MeO0O3pj9iqMkXu5Q=
Subject key identifier: 78:4A:AC:85:7D:FE:D2:A6:A7:E9:8C:50:86:9B:10:DF:A1:54:CB:87
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019D27DFEBDAA901AB6DD4F2E19EDC183150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: lxqqpQVaR2arcbMbMD1hN00iL5qrVO6/761ExTg+TQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:eb:da:a9:01:ab:6d:d4:f2:e1:9e:dc:18:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=784aac857dfed2a6a7e98c50869b10dfa154cb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:d9:9c:f6:f1:72:ff:75:30:5a:8f:6d:43:
fd:d1:85:0c:0d:ee:7d:00:1e:70:1c:b3:42:e5:14:
f6:a8:51:c0:8e:b3:68:88:55:49:f2:8c:a9:9e:cb:
b9:24:c6:89:92:89:fb:fd:e4:d7:d4:35:b9:22:50:
98:5f:51:76:81:59:5c:f2:b8:62:30:d2:73:84:b1:
d3:6f:43:f5:46:86:79:f0:39:86:19:0f:c8:0e:6a:
58:c5:f9:7b:ce:d8:f1:d5:fb:c8:da:85:87:b4:88:
b6:cd:bc:84:03:95:f1:81:c6:98:82:29:bc:bf:61:
fa:6b:2e:5f:99:0e:e5:af:34:be:27:c5:a4:d9:2d:
55:ff:34:2c:f0:29:89:09:0f:5e:eb:92:1d:d4:df:
fb:b0:0d:c4:55:a0:b6:f0:37:42:ed:b4:fc:3b:a6:
1e:8d:e7:ba:d0:48:50:83:83:25:7c:2f:fe:82:f2:
5a:75:8c:31:2a:f2:4e:1b:a8:02:f6:cb:24:58:e1:
9c:a5:cb:01:4e:00:89:71:e1:9e:56:82:44:fa:2d:
94:fb:b0:96:de:37:d6:db:94:16:0d:e2:56:6f:15:
de:3b:b2:a4:5c:ed:e8:52:65:b8:59:a0:10:05:c5:
21:25:9f:47:87:e6:4a:92:f4:c2:72:4e:df:cb:63:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4A:AC:85:7D:FE:D2:A6:A7:E9:8C:50:86:9B:10:DF:A1:54:CB:87
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:53:d1:eb:d2:13:ed:82:a3:7a:0b:4a:d4:5f:f5:ed:6d:
a9:f1:20:28:4f:60:1f:e8:6d:3d:eb:ff:bd:71:0a:0c:75:99:
e5:7a:cc:7a:bc:dd:6b:69:ce:be:c9:f3:34:d9:13:b5:b7:63:
7a:80:3d:9e:11:8c:cf:1c:85:d1:ef:f2:5d:b3:e6:c5:1b:e6:
e7:0e:18:5c:69:63:8f:da:38:65:61:09:21:66:97:b4:ea:51:
fc:7e:96:3f:d4:f9:1c:6b:e3:5f:f6:90:18:b2:b8:29:c6:4a:
c2:09:bb:e7:58:bf:e7:46:f0:a0:50:21:2b:53:26:64:0d:a0:
b1:e7:bb:86:74:7f:00:88:71:bc:9e:c2:ba:a9:3b:17:71:36:
c7:c2:8f:ab:ce:a9:6d:ca:7e:bb:b4:a9:6c:aa:a4:22:a9:45:
e3:28:6e:a8:34:0b:29:25:0c:cd:8b:d6:34:8c:b3:be:fa:d0:
a5:14:cf:54:5e:95:5d:6f:47:08:d7:15:1e:3a:53:55:3c:7b:
1c:f3:32:e8:11:72:11:0b:3a:a4:0c:29:2b:ff:71:dd:6a:9e:
9b:75:44:5b:50:65:45:bf:49:50:a7:ac:75:74:92:5a:4d:8f:
1b:cd:8a:69:49:2b:e0:a7:3f:d5:d4:e7:a6:69:48:05:88:9a:
38:3b:ed:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+vaqQGrbdTy4Z7cGDFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk
ZmVjZmEwHhcNMjYwMzI2MDIwMTE5WhcNMjYwMzI3MDIwMTE5WjAzMTEwLwYDVQQD
Eyg3ODRhYWM4NTdkZmVkMmE2YTdlOThjNTA4NjliMTBkZmExNTRjYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtXZnPbxcv91MFqPbUP90YUMDe59
AB5wHLNC5RT2qFHAjrNoiFVJ8oypnsu5JMaJkon7/eTX1DW5IlCYX1F2gVlc8rhi
MNJzhLHTb0P1RoZ58DmGGQ/IDmpYxfl7ztjx1fvI2oWHtIi2zbyEA5XxgcaYgim8
v2H6ay5fmQ7lrzS+J8Wk2S1V/zQs8CmJCQ9e65Id1N/7sA3EVaC28DdC7bT8O6Ye
jee60EhQg4MlfC/+gvJadYwxKvJOG6gC9sskWOGcpcsBTgCJceGeVoJE+i2U+7CW
3jfW25QWDeJWbxXeO7KkXO3oUmW4WaAQBcUhJZ9Hh+ZKkvTCck7fy2PJUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhKrIV9/tKmp+mMUIabEN+hVMuHMB8GA1UdIwQY
MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt
MWYxNGVjODA1MzkwLzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw
LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq1T0evS
E+2Co3oLStRf9e1tqfEgKE9gH+htPev/vXEKDHWZ5XrMerzda2nOvsnzNNkTtbdj
eoA9nhGMzxyF0e/yXbPmxRvm5w4YXGljj9o4ZWEJIWaXtOpR/H6WP9T5HGvjX/aQ
GLK4KcZKwgm751i/50bwoFAhK1MmZA2gsee7hnR/AIhxvJ7Cuqk7F3E2x8KPq86p
bcp+u7SpbKqkIqlF4yhuqDQLKSUMzYvWNIyzvvrQpRTPVF6VXW9HCNcVHjpTVTx7
HPMy6BFyEQs6pAwpK/9x3Wqem3VEW1BlRb9JUKesdXSSWk2PG82KaUkr4Kc/1dTn
pmlIBYiaODvt0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:54 2026 by rpki-client