Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: IzYVTyDVNqdbliq5g9QOikJZ0P9Vr6kQdj0/fknnClo=
Subject key identifier: 82:9E:DC:B7:F0:88:67:F6:92:7B:72:C2:02:47:AC:58:2C:92:82:85
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 01A0D5A694A99BDB44B73840936B6C145597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0BA7
Signing time: Thu 24 Sep 2026 23:00:59 +0000
Manifest this update: Thu 24 Sep 2026 23:00:59 +0000
Manifest next update: Fri 25 Sep 2026 23:00:59 +0000
Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=)
2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: XG09HRHOkrhak58pbsIriwg27kwrkD/Hk6Ugrfgo+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:94:a9:9b:db:44:b7:38:40:93:6b:6c:14:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Sep 24 23:00:59 2026 GMT
Not After : Sep 25 23:00:59 2026 GMT
Subject: CN=829edcb7f08867f6927b72c20247ac582c928285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:fa:ff:85:df:63:9d:a1:bd:4c:99:84:9d:
4b:12:14:bc:6b:be:37:7b:22:db:07:5c:d5:6a:8b:
1a:c1:48:92:95:9b:4a:0e:48:ef:cc:6b:1c:e0:f2:
bd:9d:9e:d7:0c:7d:97:ce:39:97:14:0c:a7:3d:80:
48:0a:db:1a:5e:7b:3b:0e:6f:41:f7:81:f2:40:61:
ff:f2:84:e4:33:d6:bd:1e:9d:09:d1:04:f5:f0:e1:
52:7e:3c:c0:91:b1:9f:0a:c4:66:93:13:06:b0:46:
fc:fd:be:8d:6d:d3:58:9f:69:6c:e3:53:52:bc:22:
b4:c1:8d:f4:2b:60:cc:ab:4e:26:5b:c9:70:aa:35:
89:b6:d7:7f:82:98:92:30:f0:41:62:74:85:70:6e:
f1:2d:9b:dd:be:77:c1:90:3c:bb:35:92:10:4c:81:
94:d8:34:27:05:77:4d:f3:f6:71:2a:3d:ef:d3:8b:
8f:ac:97:a8:93:60:b2:90:34:b6:6c:ac:90:02:2e:
d2:ad:a1:40:b8:63:76:b8:b0:ba:8e:45:2b:3a:eb:
c7:ee:3b:1b:93:92:2d:b6:82:68:05:4e:36:2d:04:
2e:22:03:85:3f:d0:99:20:c7:d2:a6:d7:53:49:11:
c0:0f:71:d0:67:8c:28:81:02:fb:e9:7b:a5:64:e6:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:DC:B7:F0:88:67:F6:92:7B:72:C2:02:47:AC:58:2C:92:82:85
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:36:4e:65:bf:1d:73:31:64:c8:b4:c5:bd:21:14:07:65:
7e:e8:b8:56:14:0a:75:f2:40:f0:22:48:79:3d:3c:e4:32:3a:
04:c8:73:a0:09:dd:7e:3e:d1:59:e8:cb:c6:2a:d8:72:a3:1e:
6e:b6:53:db:dd:9a:b3:e6:1d:49:09:fe:27:7e:ab:8c:8f:e5:
fd:39:3a:af:97:38:9f:8b:a2:36:47:84:c2:d9:57:f8:13:82:
97:11:4e:b1:af:cb:b8:e4:f2:09:c2:66:22:62:2d:52:c0:2c:
66:d5:e4:c1:de:87:a2:76:3d:72:5c:0b:a6:d1:0e:f5:78:9d:
9d:51:59:05:7f:ae:66:dc:e7:47:e2:c8:52:12:28:dd:13:66:
5c:94:9e:fe:a9:80:b9:56:17:59:ea:dc:e6:ac:0d:ef:f5:6b:
67:20:ed:dd:1f:56:22:ce:66:10:8b:d8:51:9b:f4:05:f3:60:
dd:9f:66:68:aa:33:22:d9:2d:77:85:3f:81:22:d9:54:45:13:
38:a1:56:1f:3d:77:09:6a:b0:0f:79:21:e9:03:87:15:c4:cb:
e7:40:4f:23:fb:25:72:ae:46:bc:1d:01:18:d2:24:fc:00:4b:
69:38:5f:4a:6c:a0:81:ee:bd:76:54:eb:36:6b:be:26:4d:2c:
0e:da:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:13:18 2026 by rpki-client