Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier: +lapd2rKKRTua6Y0fX4Y9kuUA5WO1WFA27o7hej/Xd4=
Subject key identifier: DA:02:B0:FE:E1:39:08:01:31:C7:1D:B0:B0:1E:F4:C4:6F:55:D4:56
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 019FA93E34E54927D7E3FAD04EDA00602C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number: 1218
Signing time: Tue 28 Jul 2026 15:00:53 +0000
Manifest this update: Tue 28 Jul 2026 15:00:53 +0000
Manifest next update: Wed 29 Jul 2026 15:00:53 +0000
Files and hashes: 1: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
2: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
3: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
4: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
5: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: CyNWxS4+JEnlzJKJcIpUZshDJWFM7M5Bxz5hXPW07NU=)
6: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
7: oGf_1Gi6p9BnTcB2h845ELw18yE.roa (hash: vZEx0hhPga5gHLIccOXjBsLg2I31ryX+jChcgCG39FM=)
8: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:34:e5:49:27:d7:e3:fa:d0:4e:da:00:60:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jul 28 15:00:53 2026 GMT
Not After : Jul 29 15:00:53 2026 GMT
Subject: CN=da02b0fee139080131c71db0b01ef4c46f55d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:25:ce:8b:73:d7:0e:34:14:e2:f2:aa:5f:
ed:25:c6:9a:10:93:22:4b:0d:86:d2:12:d6:4f:3c:
17:d8:f8:2d:f0:69:33:dd:50:d9:19:bd:fa:78:90:
d9:38:5a:27:d5:5a:a0:93:b3:e9:56:25:d9:f1:8c:
76:70:df:22:1b:79:be:47:d9:b6:a4:6d:3b:c5:2a:
98:2e:01:4b:ca:df:ab:a8:6d:5c:6b:e2:67:fe:2f:
78:e4:f0:47:87:ed:37:90:b7:6d:1c:b5:f3:ef:dc:
d6:af:b6:37:dc:a2:25:25:d2:69:8a:68:8e:65:e9:
48:e6:5d:7c:4b:d8:38:cc:82:02:a4:09:66:02:14:
32:66:1e:f9:dc:10:0e:bc:28:44:78:3a:20:53:a0:
4c:c8:8e:5d:b1:7a:a6:6e:56:6c:cd:49:d1:90:86:
c5:54:e6:4f:68:93:f9:a2:4e:56:cc:3e:43:ed:a1:
98:fd:80:fb:60:92:40:c3:44:56:a5:62:48:95:0e:
1b:6f:ba:a6:ea:2d:d5:d2:ec:47:51:f8:1e:20:37:
24:9a:ef:84:84:d2:15:81:54:76:74:30:42:4c:74:
4f:eb:de:19:24:3d:02:cd:fa:19:d8:96:09:2c:c0:
da:15:a9:1e:75:f6:11:bc:2f:83:45:26:03:52:f3:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:02:B0:FE:E1:39:08:01:31:C7:1D:B0:B0:1E:F4:C4:6F:55:D4:56
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e1:cc:62:00:e8:b5:4f:dd:4e:e2:60:32:57:61:64:45:14:
e2:6a:9b:c3:0d:46:2f:81:58:0b:ee:28:4f:c3:d1:7e:35:b1:
e2:5e:70:2b:f8:85:fa:39:72:6a:e6:18:21:2a:cc:1c:a5:de:
b5:d0:51:28:7a:02:ba:fb:36:4d:b3:15:21:53:1c:33:e1:ec:
5e:77:98:6e:3e:e1:27:1e:e7:a2:49:ac:3a:84:53:ee:61:67:
b8:91:58:7f:4e:f0:dc:c2:be:a5:5d:80:49:59:2f:50:c1:a9:
5a:d4:12:1b:17:38:d0:99:46:5a:ec:77:55:6f:ba:dc:50:53:
d3:f6:2c:a5:61:2d:78:e6:7b:4e:39:1f:7d:7f:49:f2:59:da:
dd:f1:23:a9:8b:56:5b:b5:b5:29:e8:78:f6:a0:ec:49:c5:f2:
4a:a6:3f:74:6f:74:22:ed:63:78:b4:c8:07:7a:49:7e:54:61:
1c:b1:5e:23:c7:52:9e:da:f4:cc:c5:05:cb:36:54:69:31:94:
95:ef:6d:43:3c:4a:d4:30:9b:4e:6a:5f:ff:e5:13:1a:63:0d:
30:6d:c9:52:05:88:1e:68:ab:e4:a1:56:d0:55:17:69:ed:aa:
ce:4c:b9:b6:08:0d:d0:bd:c1:2a:9f:c6:61:78:f7:9c:95:ce:
8b:0e:38:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPjTlSSfX4/rQTtoAYCxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh
NjhhOWYwHhcNMjYwNzI4MTUwMDUzWhcNMjYwNzI5MTUwMDUzWjAzMTEwLwYDVQQD
EyhkYTAyYjBmZWUxMzkwODAxMzFjNzFkYjBiMDFlZjRjNDZmNTVkNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt4lzotz1w40FOLyql/tJcaaEJMi
Sw2G0hLWTzwX2Pgt8Gkz3VDZGb36eJDZOFon1Vqgk7PpViXZ8Yx2cN8iG3m+R9m2
pG07xSqYLgFLyt+rqG1ca+Jn/i945PBHh+03kLdtHLXz79zWr7Y33KIlJdJpimiO
ZelI5l18S9g4zIICpAlmAhQyZh753BAOvChEeDogU6BMyI5dsXqmblZszUnRkIbF
VOZPaJP5ok5WzD5D7aGY/YD7YJJAw0RWpWJIlQ4bb7qm6i3V0uxHUfgeIDckmu+E
hNIVgVR2dDBCTHRP694ZJD0CzfoZ2JYJLMDaFakedfYRvC+DRSYDUvM9dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoCsP7hOQgBMccdsLAe9MRvVdRWMB8GA1UdIwQY
MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt
ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy
LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+HMYgDo
tU/dTuJgMldhZEUU4mqbww1GL4FYC+4oT8PRfjWx4l5wK/iF+jlyauYYISrMHKXe
tdBRKHoCuvs2TbMVIVMcM+HsXneYbj7hJx7nokmsOoRT7mFnuJFYf07w3MK+pV2A
SVkvUMGpWtQSGxc40JlGWux3VW+63FBT0/YspWEteOZ7TjkffX9J8lna3fEjqYtW
W7W1Keh49qDsScXySqY/dG90Iu1jeLTIB3pJflRhHLFeI8dSntr0zMUFyzZUaTGU
le9tQzxK1DCbTmpf/+UTGmMNMG3JUgWIHmir5KFW0FUXae2qzky5tggN0L3BKp/G
YXj3nJXOiw44LA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:32:38 2026 by rpki-client