Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: kQeejETsvG62jmNwPzojXezV7RIhTZyJStLVvRLK9HI=
Subject key identifier: F7:CF:D1:D5:A7:16:A7:E1:F6:0E:F6:56:69:46:EF:FA:A8:92:1E:96
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019D27A8CCA784DA874867E6DAB8CCDDE922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 7YrnDWxfZc3LB+DOsIke1geF/4EZytaCEBxvficCjH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cc:a7:84:da:87:48:67:e6:da:b8:cc:dd:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=f7cfd1d5a716a7e1f60ef6566946effaa8921e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:48:80:22:f4:c5:54:b7:a1:65:52:f3:9d:
6b:69:b1:a2:72:d6:4c:73:69:07:85:2d:ed:44:b8:
87:9b:c1:43:e1:3d:01:94:32:7c:05:a3:07:51:50:
19:93:34:d4:2c:d6:19:97:45:6c:63:d1:f3:88:2f:
74:76:c4:5b:6c:a5:2d:9b:59:86:63:d2:ac:ca:a7:
19:c3:e3:3c:a4:13:ef:f4:9f:ad:de:08:84:e1:9c:
42:43:5b:2d:97:6e:17:e6:9f:a9:bd:86:95:79:15:
4e:9e:2f:ff:5e:bc:7b:ea:59:ae:ec:fc:2e:2c:13:
43:25:0f:37:34:f5:e1:87:b9:bb:0b:9e:9b:e0:c6:
51:0c:31:39:55:5f:74:55:d0:f7:6f:e2:9e:fe:55:
9a:1b:42:75:16:d0:8a:62:de:f4:38:5d:0e:f9:e0:
bf:85:e7:93:3d:a1:02:84:7b:26:b8:5e:b2:66:f2:
b3:c0:2c:1a:28:34:4a:ef:65:dd:d7:4b:30:fd:fc:
45:d7:00:23:17:fb:f6:5e:f0:9c:9b:f1:d3:1b:fb:
6b:21:28:e5:a8:9b:ef:16:57:95:18:a5:89:e7:dc:
06:14:fd:ca:c4:d4:c6:1a:7b:d0:6e:36:f6:43:db:
10:1c:78:9e:45:62:a1:33:79:f7:dc:4f:b5:f0:01:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:D1:D5:A7:16:A7:E1:F6:0E:F6:56:69:46:EF:FA:A8:92:1E:96
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2c:cd:e7:6c:f0:d9:3e:59:cb:e7:2c:41:bf:bc:66:14:b5:
7b:7e:1b:15:3d:10:15:2f:35:c4:a8:21:46:27:fb:62:44:b8:
0d:52:fa:4c:b7:2d:a2:cb:a8:31:d9:c1:dd:c0:be:4d:99:46:
30:8f:58:06:0c:f4:20:08:89:98:70:62:6f:7d:da:e2:35:b8:
62:89:b2:a7:b5:c1:68:22:e3:7b:5c:79:3f:ff:ee:d2:ca:f5:
4b:ac:e7:6b:38:91:20:12:48:03:04:2c:f2:51:74:ef:01:14:
b1:7e:b0:c2:09:6e:6d:f8:7f:11:38:3c:cb:18:fa:d8:f9:1c:
5a:45:60:9e:cd:49:b2:3a:e7:ff:02:0a:9b:0b:59:aa:e1:b8:
1c:7f:e4:3c:6c:96:15:77:c5:72:06:3c:ed:98:e4:10:48:6a:
cc:43:14:06:c8:c5:35:ad:d0:a2:cc:29:ad:73:07:c1:31:7e:
37:50:eb:1b:27:fd:64:0d:0b:3d:03:6d:34:c2:3f:8b:28:bc:
4e:fb:6c:9c:f3:71:ea:5d:e5:b0:e5:ab:d8:75:cb:43:1a:c8:
1d:ba:20:63:80:b9:aa:5a:89:14:16:c8:e3:57:bf:e1:08:99:
2f:34:5e:3b:53:ce:b4:bb:3f:88:45:85:a3:d3:f8:64:1f:5e:
02:29:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:08 2026 by rpki-client