Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: ozk97WQkRGNko8Bvn116VMd2/ZySeBc+/kVo3diW8FA=
Subject key identifier: 72:9B:9C:30:CA:20:23:9B:22:C4:A3:C5:B8:D7:74:F7:0C:A5:10:D0
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019D299791CB02982FA3F59E6D2EA3AAD18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 1805
Signing time: Thu 26 Mar 2026 10:01:32 +0000
Manifest this update: Thu 26 Mar 2026 10:01:32 +0000
Manifest next update: Fri 27 Mar 2026 10:01:32 +0000
Files and hashes: 1: 3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa (hash: uxPCNHXytdKge/y9iSVGprZRSTdqYPtpMRkCD655H48=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: DxTk2+H1o/iB0paIaoquXXplTSiFYfWZGWUOoSbHGE0=)
3: vnUbkq6bdOtokGGa949yxYTNWcY.roa (hash: 2ikmtms5uup4On475kEH1Q4kXh5i0qOSIcl3pBoLYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:91:cb:02:98:2f:a3:f5:9e:6d:2e:a3:aa:d1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Mar 26 10:01:32 2026 GMT
Not After : Mar 27 10:01:32 2026 GMT
Subject: CN=729b9c30ca20239b22c4a3c5b8d774f70ca510d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:cc:fa:26:54:bf:00:b0:70:dd:22:cb:43:
d2:7c:9e:76:b9:b8:de:91:8b:b8:12:07:e4:d4:92:
ed:65:a2:e9:df:8f:85:48:75:15:40:8b:14:4e:fb:
0e:c2:4d:8e:07:fa:87:39:1c:b9:86:13:f3:e9:46:
17:8b:d2:ee:47:28:b8:e0:cf:fe:ca:15:64:6c:d6:
0a:c7:d7:4a:f2:63:6c:d4:e8:14:c0:a3:44:0d:e5:
5a:08:2e:35:00:8a:51:b4:17:6f:50:d9:6b:ea:b3:
5a:ca:ef:5a:77:54:6b:db:45:28:9a:36:79:b6:4a:
e5:58:22:e3:63:21:7e:a7:5f:3b:6d:c6:d4:94:d8:
46:84:28:56:f9:95:1a:57:61:f8:d1:d4:72:cf:4c:
66:d7:26:2e:ce:4a:2f:07:5c:7e:c4:24:91:43:e4:
01:f6:58:bd:8a:50:9f:29:f7:3c:da:48:9a:4c:c1:
30:9d:e4:e7:a1:2c:4b:de:28:70:f5:b1:69:70:40:
20:7d:8b:9e:b3:02:4f:a3:b2:ab:79:2c:fd:3a:f9:
08:a8:76:42:70:ab:23:a8:a0:80:5f:b3:c2:85:c1:
1f:6a:03:3a:19:d6:ef:d2:a6:27:45:00:5c:f6:ab:
39:9e:dc:9e:83:be:1c:41:7a:d4:f9:e2:58:68:5f:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:9C:30:CA:20:23:9B:22:C4:A3:C5:B8:D7:74:F7:0C:A5:10:D0
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:5d:00:33:3a:19:70:a5:bc:43:2f:93:fa:e8:45:c4:cd:
53:33:e6:c4:3b:d5:8a:f6:d7:b8:12:8e:21:79:b1:43:9f:6a:
4c:19:ad:1f:37:7c:d7:7c:17:ef:a0:ab:d5:49:94:18:f7:4e:
59:92:ab:f6:f5:a2:61:12:c2:a2:b3:3e:f8:f7:fc:fa:4b:6d:
9b:d7:aa:cc:fc:2f:b6:13:97:87:9b:7d:c7:ed:b0:76:55:dd:
c2:16:4a:31:07:b5:6e:6a:61:5b:03:92:6b:76:9c:0b:af:ad:
86:a6:b2:ce:4d:71:dc:62:b6:68:4e:32:b3:da:d6:a3:2b:17:
91:e0:d4:62:9c:69:90:00:c4:65:9c:76:34:bc:0b:0b:de:42:
fc:92:da:d8:25:71:20:c7:90:5d:a4:8b:46:7e:05:19:c5:b5:
64:d4:20:c0:36:01:a8:fd:6f:d1:9c:a2:e6:75:44:66:86:2e:
01:c0:26:4f:3e:32:ee:02:56:c9:b0:18:be:9b:9f:2f:49:4f:
26:74:56:20:47:a4:58:31:83:d2:5a:5d:27:e0:1f:d2:0b:dd:
c1:02:a1:e2:83:26:d4:11:4a:96:e9:70:1b:bb:1a:9a:50:3c:
26:c0:60:c9:c6:53:23:63:31:ae:4d:46:a4:bf:4e:c6:83:5f:
6a:2f:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:17 2026 by rpki-client