Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: U5s/fWpZCa9L/t5oBlwEn8NUaUzb1CQ4+6Wih3gghkU=
Subject key identifier: 48:4F:F8:4C:86:33:CD:B0:A7:92:DC:6F:46:91:9F:6C:58:48:ED:FF
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019D28BB2C2509642AF6B9373835609D5C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 1353
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: cSKDwPxDVXXkk_flq4GHJup7ieU.roa (hash: W0F3HzF5Oug74ick2FDUWrm4omprJ/KY32MOgnvN5+U=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: o7Yjrn0p3TLpT9OQv1fe0vILZX2zeWxxRnaiuLuylUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2c:25:09:64:2a:f6:b9:37:38:35:60:9d:5c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=484ff84c8633cdb0a792dc6f46919f6c5848edff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:94:c7:ce:80:f6:c0:53:5e:cf:5f:11:bf:
1f:20:56:b6:c4:89:9d:5c:e9:29:6d:79:ae:a5:4f:
78:da:60:c1:2c:e4:e3:2c:74:f7:c4:2b:13:7b:18:
dc:4b:1e:39:d1:95:13:f3:6e:df:9f:bd:d6:1d:d9:
61:fd:6e:f2:c1:3e:97:76:c7:5a:2e:75:a5:f9:ff:
14:9d:31:27:32:28:23:40:c4:48:9c:f2:0f:f0:b2:
92:98:c3:6d:32:d7:87:bd:cc:1b:86:c8:13:01:83:
86:4d:e6:fc:e6:33:93:68:9a:9d:36:05:ec:a0:6f:
59:e7:d3:b6:23:7c:08:d4:e3:db:d8:d3:21:86:5b:
96:dd:7a:ee:8d:98:3e:9b:9a:f0:99:cd:04:4b:43:
29:81:9c:9c:84:ea:3e:bf:ad:5d:b7:f6:48:02:17:
9d:e2:ef:71:3a:c6:60:45:05:42:e2:eb:b4:20:2f:
72:05:b6:22:2a:77:7e:50:64:72:1a:54:b1:5d:55:
29:5f:24:8e:9b:f2:61:ea:af:b8:fe:a1:00:d4:b2:
5b:dd:34:b1:33:d6:35:45:52:3c:45:1b:f6:d2:11:
b1:03:ab:a7:fe:d8:5d:18:b0:1c:99:33:74:0a:9f:
45:74:4f:24:29:a0:29:ae:ee:85:68:dd:76:d4:6c:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:F8:4C:86:33:CD:B0:A7:92:DC:6F:46:91:9F:6C:58:48:ED:FF
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d6:5f:72:af:b4:ff:de:b3:7e:b9:21:96:02:2c:74:15:77:
c0:fa:92:d9:4a:8a:b8:8a:40:7b:d1:87:8d:22:e5:5d:f6:1c:
6a:58:7a:94:8d:87:60:2e:71:73:a7:62:19:5b:3b:83:09:86:
82:be:57:a6:d3:b0:27:db:b3:36:89:c1:b9:d6:55:2b:a7:fa:
e2:6b:94:a4:54:4e:28:24:a4:db:25:35:0a:6b:09:9b:d9:15:
33:09:aa:da:c5:65:81:28:3b:55:de:95:bf:96:35:e4:86:01:
ce:62:6a:85:e9:f1:85:11:02:27:c2:47:14:4f:85:70:2b:d3:
73:eb:41:ab:e7:cb:4e:3b:8c:79:0a:7f:f1:8f:f6:07:18:bc:
36:32:6a:eb:65:60:42:60:df:b7:a5:74:22:7f:9c:9d:6a:d0:
f0:2d:dd:0e:5d:71:f1:8f:0c:8b:b0:18:8b:78:82:4f:84:a2:
03:0f:30:16:e3:11:31:96:44:a1:c5:19:81:99:19:ca:e3:34:
a3:64:a5:7b:4b:86:93:44:d1:87:3c:fe:fb:51:1f:9b:35:66:
9c:38:9b:d5:be:0d:21:84:2c:00:f5:a1:d4:84:d5:3e:1b:01:
13:f5:02:5b:b4:3b:09:94:f1:42:79:24:86:82:d4:7e:9d:d6:
75:c5:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:26 2026 by rpki-client