Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: jX7AbImcms4oOmlFBSgAScEVkBm/T6BpaDXu20sGuFc=
Subject key identifier: 12:3B:A9:DC:C8:09:D8:22:D9:88:27:66:84:6E:FD:54:9B:DC:37:79
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019D254CA0BB84EFE4CDB27181DA4003D3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 09BE
Signing time: Wed 25 Mar 2026 14:01:11 +0000
Manifest this update: Wed 25 Mar 2026 14:01:11 +0000
Manifest next update: Thu 26 Mar 2026 14:01:11 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: pH6I4aGVGlMruwMrkZmtRcHk7V+lE79N0fe620eJD1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a0:bb:84:ef:e4:cd:b2:71:81:da:40:03:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Mar 25 14:01:11 2026 GMT
Not After : Mar 26 14:01:11 2026 GMT
Subject: CN=123ba9dcc809d822d9882766846efd549bdc3779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:ad:3d:19:b1:4d:65:e0:16:80:7f:79:d3:
a4:b3:bb:53:67:5c:01:f3:cb:e6:bd:da:57:ed:00:
ea:14:ae:17:83:72:7e:62:52:aa:74:6c:ab:f3:a8:
67:8c:fe:c9:24:4d:41:fc:e9:59:63:59:dd:53:6a:
6d:af:82:c4:42:2d:ff:33:2c:5e:a1:55:32:13:b8:
30:a0:c6:e1:3f:f5:14:83:19:da:40:b2:10:d0:89:
35:42:1e:91:b0:15:7a:97:66:dd:d4:c0:e4:90:e3:
f7:4f:41:9f:e2:e1:99:a1:e6:af:2d:e4:4d:70:ff:
b7:68:60:d8:d1:09:63:7d:0d:24:91:be:ff:c5:f1:
b0:eb:b4:48:01:5f:c0:8e:3f:f9:f4:4c:89:0f:aa:
da:49:0b:4a:f0:87:db:e3:49:85:a7:87:de:db:9e:
14:c6:83:ab:4d:e3:53:45:de:02:0c:42:62:cc:86:
90:db:a4:36:9c:ec:32:bf:9a:69:83:b6:41:e1:7d:
04:87:59:ec:42:98:b6:4f:6e:ee:aa:09:5f:e8:3a:
d6:f1:25:55:f5:11:4c:b5:bd:ff:22:8d:60:14:93:
e6:26:c4:f9:13:e2:0c:90:96:ec:2d:53:ba:1a:4a:
43:bc:1b:d7:82:a5:cf:df:87:15:dd:58:8b:1e:1a:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:A9:DC:C8:09:D8:22:D9:88:27:66:84:6E:FD:54:9B:DC:37:79
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:68:0b:c3:75:1b:9a:05:b1:7c:57:b2:5d:2b:63:6f:5e:
57:63:d8:f1:20:1d:ac:5e:75:70:92:a5:40:9b:66:d0:bb:6b:
21:de:ff:4a:27:b1:f0:fd:1a:60:c9:e4:d2:6b:0b:b0:ff:91:
eb:4b:91:42:7b:87:05:47:9a:36:30:eb:e4:bb:4f:6d:c9:b1:
96:80:50:fc:eb:78:cc:e5:9a:55:fb:e6:18:d1:9e:37:fb:c9:
1f:cb:b8:46:45:17:3d:f5:23:57:72:3c:3a:2b:44:40:1f:4a:
b2:34:6e:e4:cd:09:bd:60:d6:b6:7b:7c:34:37:ec:1b:aa:91:
ab:43:1b:9c:cb:5c:6f:a5:f4:4e:ba:86:bf:c3:77:13:35:7c:
64:25:e4:24:a8:84:3a:0b:c8:96:62:ab:39:4e:68:ca:4b:35:
10:fc:b7:9a:da:ac:4c:fc:ba:21:cf:b6:bf:57:06:cb:c0:a5:
3d:42:53:61:9c:9b:d5:fc:79:8d:ad:ae:2b:4d:35:5b:57:8a:
2d:a1:32:56:52:21:d2:b6:39:3b:8a:55:c0:b5:3b:79:71:d4:
89:6a:83:4e:f5:78:5b:28:94:ca:ca:e4:c1:02:8a:6a:b8:09:
74:78:5e:d0:f2:79:e1:76:41:d0:ee:42:dc:fb:1d:f5:2a:dd:
77:a9:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:11 2026 by rpki-client