Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: 4tEnytVxW9pFCOU26lLrvjPvUKyf4nFbNxRiAcL4EeE=
Subject key identifier: E2:73:87:27:25:25:1C:4A:CE:1C:E7:10:D0:A0:81:40:A4:56:1B:E0
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019F9391ED588F7E565BCF7BC913C76B4E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 1945
Signing time: Fri 24 Jul 2026 10:00:41 +0000
Manifest this update: Fri 24 Jul 2026 10:00:41 +0000
Manifest next update: Sat 25 Jul 2026 10:00:41 +0000
Files and hashes: 1: 3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa (hash: uxPCNHXytdKge/y9iSVGprZRSTdqYPtpMRkCD655H48=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: PoWjZEBnnlDeu2jgR0J0a3iPBEZoWl4WFIIX4xCWZRU=)
3: vnUbkq6bdOtokGGa949yxYTNWcY.roa (hash: 2ikmtms5uup4On475kEH1Q4kXh5i0qOSIcl3pBoLYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:ed:58:8f:7e:56:5b:cf:7b:c9:13:c7:6b:4e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Jul 24 10:00:41 2026 GMT
Not After : Jul 25 10:00:41 2026 GMT
Subject: CN=e273872725251c4ace1ce710d0a08140a4561be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:42:0f:e4:88:85:c1:93:50:1c:3a:94:e6:
93:71:c8:9f:80:7a:ee:91:8b:0a:6c:fd:06:1b:ed:
96:1b:5b:2e:16:b3:96:e3:b2:6e:f5:16:82:59:aa:
e9:e3:ae:77:e8:b6:b3:4e:98:45:49:20:5b:45:6e:
82:32:16:83:b9:1b:e1:5a:90:d3:a1:2c:3b:9f:28:
25:03:09:4b:63:0c:02:e8:57:67:ae:24:4f:bc:f5:
59:cd:4b:70:25:13:f8:64:a8:4e:a4:19:a7:41:f3:
b9:71:19:8a:75:fc:43:47:27:24:25:57:27:2c:03:
9e:74:2e:c5:4c:e4:cb:18:30:d2:4c:f4:4e:35:0f:
ba:3b:e4:70:70:03:41:45:b5:48:e6:55:56:8e:c1:
d8:a5:9a:3c:eb:02:2f:c1:9d:13:8b:65:90:cc:12:
a3:e5:f8:33:5f:57:c0:a1:f4:c5:ca:66:70:50:59:
f7:fa:14:7e:cb:18:b9:c9:d4:d9:ff:73:33:b5:20:
a5:3f:a2:80:f0:ec:14:fc:0e:a4:f2:1a:0f:5f:4d:
e0:cd:b9:d9:28:6f:2d:f6:81:59:8a:89:7d:3e:73:
2e:04:67:77:cd:5b:d5:5b:9d:c0:5e:f0:ad:fe:1a:
48:35:7f:95:41:1c:a6:62:eb:f4:96:0c:4a:78:06:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:73:87:27:25:25:1C:4A:CE:1C:E7:10:D0:A0:81:40:A4:56:1B:E0
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:35:9a:e8:83:f9:30:77:82:48:ae:e4:aa:b9:90:e6:1f:38:
7f:da:8d:4e:3d:f0:e7:6f:67:46:0f:64:ff:75:ce:85:9e:b3:
35:f2:0c:cb:ce:82:3c:e0:bc:18:24:ec:0d:16:fb:b9:9a:6e:
ec:9b:2f:91:9c:40:b4:c8:bf:42:0b:9a:fa:50:7e:fa:55:b0:
fe:da:69:b1:b4:d9:d8:76:e8:0c:7d:a4:3e:f5:d1:35:4e:a8:
a8:00:18:8c:30:b0:e1:97:8d:85:2e:48:ab:32:89:b9:56:cb:
65:73:23:9e:6f:75:b2:d4:cc:1d:85:a6:6a:6c:e4:ea:a4:58:
c0:6f:7e:90:c4:eb:7a:73:be:af:80:44:0d:60:f2:e7:8a:7f:
1f:45:c6:b2:e9:4d:2b:94:4c:02:b6:df:24:b0:ca:d3:df:5d:
36:5c:7c:b8:4c:83:e5:52:0c:36:3d:f9:c1:88:79:62:8c:b8:
ee:d0:2f:c6:d2:89:39:6a:73:7c:4a:3d:ca:2d:30:71:1c:0b:
db:1a:1b:0c:7e:09:be:34:d5:2f:8c:39:21:90:6f:bc:91:28:
1e:0e:7a:55:26:a5:9d:64:b1:3a:1c:b9:0d:7f:79:7c:2c:3b:
73:af:cb:98:db:be:2b:0b:df:bd:6c:31:af:54:01:37:75:fc:
73:0c:f0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tke1Yj35WW897yRPHa05GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2FlNjYzYWQwYTFhMzA3MmRiZDg2Nzk5MmI3ZDhkZjI1
YTQ0OWEwHhcNMjYwNzI0MTAwMDQxWhcNMjYwNzI1MTAwMDQxWjAzMTEwLwYDVQQD
EyhlMjczODcyNzI1MjUxYzRhY2UxY2U3MTBkMGEwODE0MGE0NTYxYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2VCD+SIhcGTUBw6lOaTccifgHru
kYsKbP0GG+2WG1suFrOW47Ju9RaCWarp46536LazTphFSSBbRW6CMhaDuRvhWpDT
oSw7nyglAwlLYwwC6FdnriRPvPVZzUtwJRP4ZKhOpBmnQfO5cRmKdfxDRyckJVcn
LAOedC7FTOTLGDDSTPRONQ+6O+RwcANBRbVI5lVWjsHYpZo86wIvwZ0Ti2WQzBKj
5fgzX1fAofTFymZwUFn3+hR+yxi5ydTZ/3MztSClP6KA8OwU/A6k8hoPX03gzbnZ
KG8t9oFZiol9PnMuBGd3zVvVW53AXvCt/hpINX+VQRymYuv0lgxKeAbi2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJzhyclJRxKzhznENCggUCkVhvgMB8GA1UdIwQY
MBaAFHc65mOtChowctvYZ5krfY3yWkSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUt
NjYyZWM4MThkMjNkLzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUtNjYyZWM4MThkMjNk
LzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDWa6IP5
MHeCSK7kqrmQ5h84f9qNTj3w529nRg9k/3XOhZ6zNfIMy86CPOC8GCTsDRb7uZpu
7JsvkZxAtMi/Qgua+lB++lWw/tppsbTZ2HboDH2kPvXRNU6oqAAYjDCw4ZeNhS5I
qzKJuVbLZXMjnm91stTMHYWmamzk6qRYwG9+kMTrenO+r4BEDWDy54p/H0XGsulN
K5RMArbfJLDK099dNlx8uEyD5VIMNj35wYh5Yoy47tAvxtKJOWpzfEo9yi0wcRwL
2xobDH4JvjTVL4w5IZBvvJEoHg56VSalnWSxOhy5DX95fCw7c6/LmNu+KwvfvWwx
r1QBN3X8cwzwVg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:21 2026 by rpki-client