Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: CozeB0OikfYWXp8AbFD88tbMqMNGa0kY3qbMz1XngQs=
Subject key identifier: 61:25:88:4D:6F:51:9C:4D:49:BD:D4:5C:9D:97:5D:A5:68:25:28:80
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 01A0F11E23D0F7297C77DED4BA145A674899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 19FA
Signing time: Wed 30 Sep 2026 07:01:19 +0000
Manifest this update: Wed 30 Sep 2026 07:01:19 +0000
Manifest next update: Thu 01 Oct 2026 07:01:19 +0000
Files and hashes: 1: 3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa (hash: uxPCNHXytdKge/y9iSVGprZRSTdqYPtpMRkCD655H48=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: 7sQuBG6QhXxnm/a+lcQGvhKD243H+qN8Ct0UPTyxQtY=)
3: vnUbkq6bdOtokGGa949yxYTNWcY.roa (hash: 2ikmtms5uup4On475kEH1Q4kXh5i0qOSIcl3pBoLYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:23:d0:f7:29:7c:77:de:d4:ba:14:5a:67:48:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Sep 30 07:01:19 2026 GMT
Not After : Oct 1 07:01:19 2026 GMT
Subject: CN=6125884d6f519c4d49bdd45c9d975da568252880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:14:5e:0a:2c:e0:c8:e4:4c:fa:47:40:d3:
e1:3b:3a:df:bd:58:ff:19:69:b2:33:4c:1f:f8:b3:
8e:5c:7c:bd:d0:ee:e7:15:49:3b:b7:1a:2c:26:c9:
28:89:bb:92:94:ab:c8:fe:dd:39:69:14:ac:d0:e5:
05:7c:c6:9c:3d:6d:ba:78:94:c7:99:c6:1b:83:c5:
97:10:e3:51:95:53:b4:48:7e:b3:eb:98:79:2e:e8:
34:96:0c:f5:6e:11:af:b0:73:18:7b:83:bc:eb:4d:
5b:61:7d:ec:2c:dd:75:cc:f9:00:be:44:b8:88:47:
d0:d3:e9:37:88:50:2e:47:ec:71:e4:ee:27:c8:a2:
8f:f3:86:c1:a1:b5:e6:1f:86:b5:17:4a:b4:66:ec:
36:7e:19:db:69:1b:93:19:f2:41:60:e5:12:d9:cf:
63:30:a5:df:c0:71:48:41:6d:99:3d:9f:f9:b7:1b:
0c:8a:d0:2f:a7:15:c3:77:3e:1a:18:7c:45:3a:7e:
56:4d:4f:12:df:65:1f:da:f4:a1:59:86:64:ce:0c:
1f:fe:e4:29:84:f9:da:5f:c7:d1:2f:e1:dc:dc:eb:
75:57:fd:98:0c:af:98:f7:da:82:47:ff:64:ad:d5:
45:b2:04:b4:35:2b:54:1f:d0:1e:45:85:7e:62:a6:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:88:4D:6F:51:9C:4D:49:BD:D4:5C:9D:97:5D:A5:68:25:28:80
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:59:c0:a3:a6:0c:f8:5f:03:53:10:57:c7:5a:81:0b:b9:26:
fe:13:d9:e1:4c:d1:08:9b:e5:ae:85:57:dd:c3:be:5a:17:02:
58:01:20:46:92:d3:49:1b:4c:e9:7a:e9:86:65:40:c8:4d:db:
0a:b3:b0:cb:89:87:ed:8a:fb:c1:5e:b9:12:a9:f4:04:c9:07:
2d:5d:88:a3:9c:69:29:a3:1e:53:d1:17:05:e4:b2:3f:86:b5:
8d:78:ca:40:f7:5c:aa:a9:77:66:68:61:c7:c8:c8:b5:cd:f5:
d1:0f:32:16:fc:81:b9:d3:46:63:0d:b9:a0:69:eb:d6:01:7c:
a5:d4:ad:98:5b:71:7a:9f:11:a5:ac:2e:8f:1a:c0:04:68:f4:
f5:79:fb:47:62:e0:57:72:5e:f3:d1:bb:c7:83:9b:97:12:53:
d1:8d:0e:7f:8e:fa:83:be:8a:25:11:f3:08:d6:0b:79:4a:33:
13:ca:79:48:1d:76:ba:d9:7e:05:20:cc:47:9a:06:cf:c8:81:
19:10:41:63:ea:3f:9f:61:92:e5:2f:92:4e:41:10:ef:5a:d0:
db:0d:7a:42:5a:b7:51:8b:64:55:1d:58:64:d5:24:8e:e2:1b:
da:2e:23:d1:56:d5:a3:c8:6f:43:60:ec:fc:13:bf:83:99:7c:
8a:14:5d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:45:13 2026 by rpki-client