Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: WRubcXScH61juKpP3MR6R2pEyfNkiVgmd9NKeLUMEqU=
Subject key identifier: C2:FC:2C:BF:D0:54:D3:A9:35:27:DE:13:8E:ED:98:EC:1F:9A:46:D3
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 01A0EF673A3C82A3048EE1F3DDA8DAE36280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 23:01:54 +0000
Manifest this update: Tue 29 Sep 2026 23:01:54 +0000
Manifest next update: Wed 30 Sep 2026 23:01:54 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: StZa7Rk3M9V39GrvpfFYx78yS6A267SFmkRLbq/lvYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:67:3a:3c:82:a3:04:8e:e1:f3:dd:a8:da:e3:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Sep 29 23:01:54 2026 GMT
Not After : Sep 30 23:01:54 2026 GMT
Subject: CN=c2fc2cbfd054d3a93527de138eed98ec1f9a46d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:3a:c4:ba:de:08:db:c7:f1:e0:be:a4:4f:
46:ef:53:03:74:65:6c:03:9f:a1:ad:a1:1a:aa:5c:
4f:38:8f:8a:48:65:fd:22:5a:d7:25:5e:a1:15:d4:
7b:6a:c8:05:92:ef:98:3c:01:73:02:6c:02:05:37:
8e:ba:c8:99:ae:bf:13:90:10:62:20:61:ef:76:18:
5b:db:f7:5e:ef:2d:88:48:ef:86:65:e8:a5:68:aa:
a2:8b:44:20:b2:f3:16:48:2d:8f:74:8e:e5:55:58:
b2:fb:4a:76:7b:f0:cd:e0:47:25:df:c6:f3:37:3c:
74:cc:d8:54:26:bd:2e:30:74:09:1a:2c:58:86:a2:
3d:af:b3:d7:b6:91:13:8a:c8:0a:7c:2c:97:aa:c3:
ae:49:05:32:ba:2c:82:c0:a4:b4:56:75:9f:4f:27:
14:68:01:57:b2:23:b1:92:4d:11:7e:72:08:6f:b3:
83:de:ac:cd:96:e5:be:54:11:48:e2:fc:fb:ca:ba:
d6:7b:2d:1c:82:50:71:a5:61:14:19:22:85:51:59:
96:93:4b:39:fc:ad:bb:96:ad:a5:61:10:ee:e2:6e:
1d:34:40:e9:b0:de:b0:3c:1e:de:1e:ea:7e:9f:f8:
cd:7b:6d:7a:1a:3e:60:a5:90:c5:d8:12:c4:c0:1f:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:2C:BF:D0:54:D3:A9:35:27:DE:13:8E:ED:98:EC:1F:9A:46:D3
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:85:fb:cb:31:9c:dc:bc:79:d0:40:93:7f:68:8d:81:be:
73:ba:3e:c2:9d:cb:88:b9:5c:27:7c:35:18:89:c5:b8:4b:8d:
6a:00:60:0c:91:0f:94:16:63:37:98:ac:62:e1:4b:01:59:ad:
ee:5d:41:c1:d6:ba:f3:88:ff:2c:b0:24:86:25:6c:a4:47:7f:
ef:5a:c5:86:fc:21:61:f4:5b:8e:5a:2f:ce:1b:86:40:5f:c5:
46:31:76:90:db:c8:88:e4:f6:0f:da:16:b7:2c:ad:6a:29:d9:
c8:99:a8:2a:0a:e0:04:71:10:91:31:fa:9a:05:04:8d:e3:6d:
de:e5:4e:68:59:26:24:a4:e6:e7:f1:f6:20:e4:93:cc:90:4d:
d1:f5:89:67:bc:34:01:56:67:9c:74:8d:8c:20:40:bf:b7:f1:
91:33:f3:99:dd:2e:f0:80:34:d6:61:8b:80:41:ba:2b:0a:58:
c9:df:4d:26:de:03:09:56:3c:40:d2:24:03:2f:77:17:10:25:
53:15:bb:6e:ab:47:37:78:14:6e:ba:f5:34:c2:a0:e4:3e:86:
c0:d8:bb:bd:59:e8:69:4f:d9:10:fa:54:ec:53:0b:ae:46:d6:
9b:f0:1d:38:65:b5:0d:33:c6:e8:a8:1b:fd:e3:7d:7a:a3:3e:
8b:26:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:57:06 2026 by rpki-client