Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier: e85mtx7wG3cSXYx4YvMlvmjgLTFnVsHACcYblv+1sS4=
Subject key identifier: 0F:25:A0:15:A0:29:82:31:17:58:D7:FA:B2:A5:C7:8D:EF:9D:73:E1
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 019D273A9ECE8CD52E7965043C7EB75C078C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: F-CmXISe8_wy3eRoL0KRLsrxsXE.roa (hash: UCcyvZA9JM0sa9RbXSB/RJ7CyrNNZcFxjhxeu1LfJcA=)
2: FXk_8rHDZW44wqBAzw47VRvUwgY.roa (hash: ppp2g2xygFhlcOiu9iawm3EuDNyOEJ3cb42rhtyx3aI=)
3: PAja4hjsJ8MQANg3sK1YfTlvaJQ.roa (hash: FIbqd2XK2BTIGA9oFREaVlM92WRa45cXlUCU71SKJfk=)
4: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: v+2KtHRWNNdVDh75KxXcrBu5N7Smpio6aGMQPOVULzc=)
5: gYsdgAs4KIaJroqJZMhZmwRNn38.roa (hash: t90AwEAZ729TPglZyxHbnIWUY3pMyQTtaWuzn+iV9DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9e:ce:8c:d5:2e:79:65:04:3c:7e:b7:5c:07:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=0f25a015a02982311758d7fab2a5c78def9d73e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:60:2e:bc:5c:43:80:0e:27:e2:66:47:7a:
36:20:04:ea:55:b1:86:55:54:90:68:21:5d:f6:57:
0e:02:4d:21:8b:e2:09:0c:76:22:ee:71:1e:de:55:
4e:24:0c:fd:33:d7:e3:c9:69:b0:15:7d:61:43:c8:
f7:66:3b:3f:af:97:ce:db:64:a9:08:6a:18:ce:6b:
41:d6:25:c1:ad:91:cc:3e:de:7a:3a:ff:cf:99:12:
49:7b:fe:be:40:6d:88:d8:e6:e1:33:74:1a:28:15:
ab:0b:19:fa:92:fd:cd:c7:11:a1:f4:26:6f:eb:8e:
e0:cb:6d:56:c6:82:fc:ca:bd:65:04:92:d4:9f:5a:
d8:1d:00:9c:bd:09:78:94:0a:4c:54:34:54:cc:fb:
5f:2d:b8:39:a3:6c:d9:d5:ea:05:34:14:75:1d:8f:
7e:45:6e:ce:ab:74:2b:0c:2f:0e:a7:f3:7d:f8:00:
be:87:bb:9f:ae:5f:40:43:10:5e:88:3c:32:92:67:
16:92:eb:1a:fb:e9:a4:9d:df:a8:a5:a7:92:15:e7:
8d:a3:69:41:f1:32:83:78:8b:1c:fe:3e:15:5f:3d:
30:e0:92:a5:85:d0:ea:a7:e8:bb:06:da:b1:23:36:
1b:fb:27:2c:50:a7:7c:fe:21:6b:f1:c3:11:6f:30:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:A0:15:A0:29:82:31:17:58:D7:FA:B2:A5:C7:8D:EF:9D:73:E1
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c5:a5:ee:5e:0d:72:10:fe:2f:b0:db:ae:6c:be:7a:d7:dc:
f9:65:cd:74:82:f7:83:45:fe:0c:8f:03:ec:e6:0e:9b:3a:ac:
0e:f7:d3:97:88:61:44:28:98:bd:c0:9f:4e:ee:0e:08:a3:89:
d0:77:7c:51:c4:cb:05:d4:ac:3e:93:74:47:d2:22:36:5a:16:
84:ea:de:ec:10:0f:27:9e:59:bd:1e:ca:67:6e:6a:c9:e5:ee:
56:77:79:a1:90:e9:4f:7a:b5:25:ad:41:e6:88:58:96:44:73:
a9:93:7a:24:de:e0:c6:64:44:98:d9:8c:7d:09:55:a0:5f:40:
e7:8c:92:b8:8c:a6:13:c9:ec:88:0f:5a:e1:4f:38:93:86:f2:
06:7a:64:c2:70:49:7c:32:95:7c:2b:20:93:09:c4:1f:9a:63:
1b:7f:ac:56:bd:1e:06:d7:33:cd:03:53:ab:8c:28:cc:44:ee:
9f:88:92:8f:b6:dc:42:d6:1f:29:74:e5:28:37:79:99:1e:76:
01:65:27:59:83:54:1f:7f:4b:3a:06:75:96:b5:52:11:1f:b9:
97:2e:42:23:55:e0:ad:dc:4b:3e:25:59:f4:42:fd:44:d9:ae:
83:6c:74:54:df:67:f8:2f:c3:46:64:00:4e:9f:a4:a1:e7:a0:
8a:bc:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:45 2026 by rpki-client