Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: JpBu26w8cOcAEvF44x3rsal8gO46Pxw7zK94z6i/oK4=
Subject key identifier: C8:44:70:B2:40:ED:F5:3E:63:4A:95:67:8D:95:2C:9A:09:D7:46:0C
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019E1EDA5A5139318F7AFE1D02616C5C51BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 1884
Signing time: Wed 13 May 2026 01:01:26 +0000
Manifest this update: Wed 13 May 2026 01:01:26 +0000
Manifest next update: Thu 14 May 2026 01:01:26 +0000
Files and hashes: 1: 3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa (hash: uxPCNHXytdKge/y9iSVGprZRSTdqYPtpMRkCD655H48=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: eTBYHWfSyGSpB0uSg+ozv97zOdy+/3lgR5S559HOqhg=)
3: vnUbkq6bdOtokGGa949yxYTNWcY.roa (hash: 2ikmtms5uup4On475kEH1Q4kXh5i0qOSIcl3pBoLYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:5a:51:39:31:8f:7a:fe:1d:02:61:6c:5c:51:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: May 13 01:01:26 2026 GMT
Not After : May 14 01:01:26 2026 GMT
Subject: CN=c84470b240edf53e634a95678d952c9a09d7460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e9:41:50:ac:22:ec:9e:c2:85:90:86:25:d9:
cb:22:d5:9d:db:90:46:03:2c:a0:d6:21:53:3e:a8:
ab:5a:6d:d0:2e:d5:f4:37:9b:f9:0e:0a:e3:be:f2:
95:83:c4:aa:db:8c:d7:4c:de:a2:d2:d8:9a:ca:b3:
37:06:12:98:98:72:85:8b:c2:dd:82:8a:0c:de:4a:
cd:d3:cb:0d:0b:d0:74:b6:24:84:92:22:17:37:34:
d0:61:43:c5:8b:04:84:2b:85:47:86:f6:80:c4:92:
a7:21:17:eb:3a:ee:62:2c:6d:f6:62:49:70:a5:c0:
8e:1e:e0:7b:a5:ef:f9:60:e9:50:6b:da:50:23:7b:
74:c4:fc:31:25:0f:fc:ee:05:6f:da:38:cb:f8:7d:
82:36:b8:5e:3a:3c:a7:8a:64:8a:20:85:95:de:85:
cf:32:40:fe:9a:d7:f8:eb:a4:af:2b:89:41:a6:a0:
b1:b6:d9:f4:d5:bc:06:24:a7:13:32:47:1e:54:06:
5f:4b:13:03:36:f4:f5:e6:11:c9:4c:76:24:99:68:
92:e3:6b:5b:64:c8:86:e6:d6:ce:29:f4:f1:94:2a:
87:06:eb:36:96:9a:44:86:73:97:fa:3b:2c:5e:a5:
8b:ef:9a:66:e0:f6:2b:80:ee:72:0a:d8:7e:d6:17:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:70:B2:40:ED:F5:3E:63:4A:95:67:8D:95:2C:9A:09:D7:46:0C
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:15:d4:9c:b6:e7:87:ff:13:6c:fb:ad:a9:7e:0a:ff:50:
5f:5f:13:30:2b:3d:72:4d:65:6f:0d:61:61:84:31:6f:7b:42:
5c:16:b3:b3:8f:83:2e:ec:0b:26:0e:6d:90:4b:85:41:f8:66:
e5:56:a0:87:e5:8d:6d:e8:db:ad:54:33:8c:c6:d7:50:29:74:
7c:ab:b9:63:c6:1a:80:29:d8:4e:2e:17:c9:59:00:1e:5e:53:
cb:85:bd:85:af:ea:09:35:e5:e8:a2:4c:5e:7f:5e:21:c0:a8:
7f:78:60:77:dd:4a:ce:d2:74:55:d1:8d:97:d3:44:79:71:da:
8f:79:4d:2a:e5:96:67:35:f6:22:ba:79:74:ae:8c:e0:23:99:
8a:3b:c6:a1:3f:13:0b:4c:ec:64:f4:28:1c:fb:0f:2b:84:6e:
eb:b5:43:fc:4f:4a:22:ad:5d:5f:2b:eb:74:bb:4b:a1:ac:64:
04:0a:20:19:52:f8:8f:77:cd:b4:be:d8:6a:70:a9:9d:11:c3:
0c:18:eb:53:c5:d7:38:d7:08:2d:d9:24:0e:72:82:f5:a0:be:
10:a3:c8:47:98:a8:19:ed:13:70:22:6e:0a:b2:fe:2a:ad:7a:
f7:19:95:7d:5b:fd:67:9c:03:0a:c2:76:d0:55:d5:8b:8e:71:
d1:e5:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:46 2026 by rpki-client