Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json)
Hash identifier: mW5E7PBH7yQ6+qlfOt1eGXrNU5y3g1Ud+VVnGxVLS38=
Subject key identifier: 36:BD:08:F7:EF:EC:81:3A:17:3F:05:77:37:F8:3A:AA:59:99:D1:58
Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b
Certificate serial: 019D2AA9ADB2F7A3E4EE6D446F0CE3A2F0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
Manifest number: 01A6
Signing time: Thu 26 Mar 2026 15:00:56 +0000
Manifest this update: Thu 26 Mar 2026 15:00:56 +0000
Manifest next update: Fri 27 Mar 2026 15:00:56 +0000
Files and hashes: 1: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: Ypd+jR3S+L3dQVxAUu7e1udRtTaGxQ+j/7/MnFLQ0r4=)
2: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (hash: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:ad:b2:f7:a3:e4:ee:6d:44:6f:0c:e3:a2:f0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b
Validity
Not Before: Mar 26 15:00:56 2026 GMT
Not After : Mar 27 15:00:56 2026 GMT
Subject: CN=36bd08f7efec813a173f057737f83aaa5999d158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:5d:99:01:4a:58:f6:26:ff:7c:37:65:6c:
fd:1f:19:6e:96:87:06:87:9c:ef:fe:72:ca:12:93:
b3:06:bf:4b:1e:26:b0:f0:8f:f3:77:41:54:cd:b0:
4c:25:24:89:09:ce:30:c9:cb:27:ca:09:99:45:1a:
48:c8:fa:4e:0f:c0:79:19:b9:ff:03:b2:f0:b8:b0:
5a:62:16:40:5b:45:8e:c4:42:b7:96:f2:b5:ce:e3:
ff:0e:e5:8d:10:4d:b8:52:fb:05:18:10:d5:86:ac:
e4:db:1b:fc:29:0c:40:c3:1c:20:97:e9:37:7b:d7:
7d:c1:7b:90:1c:f3:f3:ff:18:e4:8f:91:a7:87:ae:
6f:6e:70:74:cc:aa:c1:6e:cb:29:f0:56:b7:40:86:
c7:02:84:32:35:c9:7b:b3:0b:ae:a1:c7:7d:00:47:
97:24:f9:c8:a0:26:49:83:25:12:1b:53:49:b6:be:
69:0e:b3:b3:08:9f:37:7b:9e:ac:35:4a:1f:10:3e:
4e:6d:19:ac:e9:81:b2:31:ff:97:8e:18:18:69:ba:
a0:76:8f:dd:a3:27:3d:7d:86:0f:ed:f3:ff:c2:22:
65:57:d1:b8:a4:c0:3f:dd:e2:df:fe:21:55:16:e2:
88:46:71:14:0e:07:28:a3:eb:14:19:6c:4c:91:14:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BD:08:F7:EF:EC:81:3A:17:3F:05:77:37:F8:3A:AA:59:99:D1:58
X509v3 Authority Key Identifier:
keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:03:a8:11:c5:47:c6:7f:d7:8c:e9:2d:bf:20:5c:a7:16:fb:
e1:a6:12:4d:f8:6f:f8:52:d1:fb:e1:aa:eb:14:a5:92:ff:0c:
03:2e:2c:41:24:99:2d:6d:a9:10:51:6b:2c:71:75:6c:6e:dc:
f6:32:95:1e:98:93:fc:a6:72:a9:67:d6:55:00:fb:92:a7:48:
55:a0:45:7d:12:07:4a:e5:f2:cc:bd:23:51:8d:76:2b:ef:36:
5a:ff:2c:96:97:d0:6e:db:6e:85:6f:2b:bb:8d:a7:61:ee:6c:
5a:c5:51:72:0b:62:59:51:2d:69:e5:1c:15:c7:ce:0a:a7:e1:
ae:23:a4:c9:55:e3:43:c3:86:cf:9e:9f:9a:28:8d:78:06:25:
61:57:ef:65:ef:6f:52:34:9a:0a:d5:66:bd:74:2d:7e:c0:56:
dc:37:eb:05:0e:00:47:f9:5f:bd:0a:33:29:36:a1:81:ad:37:
ee:ac:fc:38:36:d2:b5:4f:1d:a5:93:4f:34:8e:bc:b5:c3:88:
51:f4:32:53:1b:38:9f:2e:90:77:13:47:d5:b0:17:d7:e2:c9:
64:6f:0c:44:98:b9:3f:be:26:13:71:e9:73:bf:95:24:d8:ec:
23:47:6f:5a:c7:67:6e:f2:ec:8b:cd:39:ef:55:50:fd:33:8b:
7e:2d:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:49 2026 by rpki-client