Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: /QWzYRlecFfbPiAaDg7J+Kf4mHCEueBQfDLsCkJ0IbI=
Subject key identifier: 59:AB:A5:7F:0F:43:17:7F:85:9A:71:5C:A5:74:2A:5E:15:19:38:A4
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019E20C8345FC63FC7118D8F9F3008238950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 10:00:51 +0000
Manifest this update: Wed 13 May 2026 10:00:51 +0000
Manifest next update: Thu 14 May 2026 10:00:51 +0000
Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: KNsVAPRuwTFa37Ei1pC/zwRKd+ygotd7KuNF+aQabRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:34:5f:c6:3f:c7:11:8d:8f:9f:30:08:23:89:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: May 13 10:00:51 2026 GMT
Not After : May 14 10:00:51 2026 GMT
Subject: CN=59aba57f0f43177f859a715ca5742a5e151938a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1b:55:29:e4:7b:ca:60:e3:46:72:cf:be:eb:
f8:d7:d9:a2:a9:2a:39:cc:d1:32:b9:42:3f:18:d6:
a2:79:5c:5d:1e:68:c3:62:d8:41:51:7d:51:ae:fa:
8d:c4:34:5f:a5:55:de:9d:ce:3d:d6:20:0c:cc:59:
08:14:a7:7f:d8:50:fa:0e:d4:31:fb:bf:b2:e0:d6:
50:04:bf:15:f6:a9:2f:4f:1f:a0:a3:91:88:32:90:
e2:66:f2:4f:88:50:24:9b:fe:5d:33:bc:0a:e4:f8:
c7:33:f9:44:ad:44:1c:16:e0:10:30:fa:55:45:42:
57:ab:f0:d2:6a:f4:23:4b:d7:37:bc:b2:53:32:4d:
2d:76:59:7b:28:86:7a:03:42:07:0f:d7:09:c1:00:
40:37:91:ab:11:f3:74:01:e2:f4:4e:d1:57:e9:7a:
46:c1:20:6d:cd:e1:26:4d:5b:70:c7:7f:ca:d7:c7:
2a:39:6a:a5:5f:51:dd:3f:c1:24:2d:b5:39:31:cd:
80:59:25:72:e0:17:fa:e8:f7:5d:51:49:c4:14:d1:
0f:64:fc:39:d7:29:5c:0d:4e:23:67:11:9d:20:c4:
51:3b:da:a9:d9:ad:66:51:5f:11:17:30:d8:ea:f8:
ca:f9:b1:e8:e9:0e:1a:7b:b4:e6:2b:c8:dd:45:53:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:A5:7F:0F:43:17:7F:85:9A:71:5C:A5:74:2A:5E:15:19:38:A4
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:57:0e:4e:8b:28:f6:18:87:bf:85:6b:84:4d:ca:a8:69:75:
1e:e6:a8:be:b2:9d:fa:f6:30:75:75:3c:0c:14:6a:29:45:60:
6c:35:21:f8:bf:71:1a:59:70:68:c9:7e:2c:f3:00:b6:80:e1:
a7:6b:68:ed:81:fe:d8:23:d0:3c:b5:b3:e1:ff:3f:fa:9d:c4:
92:88:dc:c5:ff:5a:69:c8:7b:97:14:2e:3d:c3:bc:a2:9d:75:
6b:d3:09:3d:c3:cc:f5:ce:38:45:68:0d:66:87:b3:63:f5:0e:
db:25:12:96:c3:52:cf:34:05:eb:3c:40:ca:ea:b8:1c:a2:60:
49:4a:21:39:03:06:fe:22:c7:d6:29:9e:54:4c:12:41:fe:c9:
d7:d6:db:2a:4a:24:2b:8a:72:4a:ea:b4:57:f4:3a:5a:54:fe:
1c:db:8a:45:32:e6:9f:5b:c2:55:2b:50:47:63:94:76:fd:be:
ae:e2:d9:6e:95:3e:a3:bd:71:13:e3:de:c2:f8:06:9a:82:40:
9e:4f:16:24:77:f6:dc:fc:1a:45:06:f9:59:f0:50:c2:1c:3b:
d3:ad:98:1f:53:9a:c8:9d:a8:f0:28:11:07:4c:b1:2e:8b:a4:
7b:e0:f2:1d:bd:26:86:62:8e:47:3f:41:17:b9:bb:3a:6c:57:
b2:70:f1:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyDRfxj/HEY2PnzAII4lQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi
NjBkZGEwHhcNMjYwNTEzMTAwMDUxWhcNMjYwNTE0MTAwMDUxWjAzMTEwLwYDVQQD
Eyg1OWFiYTU3ZjBmNDMxNzdmODU5YTcxNWNhNTc0MmE1ZTE1MTkzOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RtVKeR7ymDjRnLPvuv419miqSo5
zNEyuUI/GNaieVxdHmjDYthBUX1RrvqNxDRfpVXenc491iAMzFkIFKd/2FD6DtQx
+7+y4NZQBL8V9qkvTx+go5GIMpDiZvJPiFAkm/5dM7wK5PjHM/lErUQcFuAQMPpV
RUJXq/DSavQjS9c3vLJTMk0tdll7KIZ6A0IHD9cJwQBAN5GrEfN0AeL0TtFX6XpG
wSBtzeEmTVtwx3/K18cqOWqlX1HdP8EkLbU5Mc2AWSVy4Bf66PddUUnEFNEPZPw5
1ylcDU4jZxGdIMRRO9qp2a1mUV8RFzDY6vjK+bHo6Q4ae7TmK8jdRVM9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmrpX8PQxd/hZpxXKV0Kl4VGTikMB8GA1UdIwQY
MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt
YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi
LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVcOToso
9hiHv4VrhE3KqGl1HuaovrKd+vYwdXU8DBRqKUVgbDUh+L9xGllwaMl+LPMAtoDh
p2to7YH+2CPQPLWz4f8/+p3Ekojcxf9aach7lxQuPcO8op11a9MJPcPM9c44RWgN
ZoezY/UO2yUSlsNSzzQF6zxAyuq4HKJgSUohOQMG/iLH1imeVEwSQf7J19bbKkok
K4pySuq0V/Q6WlT+HNuKRTLmn1vCVStQR2OUdv2+ruLZbpU+o71xE+PewvgGmoJA
nk8WJHf23PwaRQb5WfBQwhw7062YH1OayJ2o8CgRB0yxLouke+DyHb0mhmKORz9B
F7m7OmxXsnDxLg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:20:23 2026 by rpki-client