Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: ZLuiANOyfr5DTLAaVYknBAtRigrebQ2YwkAA+kCsBrM=
Subject key identifier: C7:97:92:D2:AD:6B:C3:AF:E4:EA:B1:6F:33:98:10:8A:48:EB:24:18
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019CAB6B685D5839B787581BE6ABDA3D52E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 06EB
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: ZdrRoxzzb2bnabr5Ie67snzGLUmhhIOOA947LwYmfVQ=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:68:5d:58:39:b7:87:58:1b:e6:ab:da:3d:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=c79792d2ad6bc3afe4eab16f3398108a48eb2418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:2f:17:ff:98:d3:15:b6:2e:7b:0b:6e:9c:
5e:97:d8:ad:a8:77:f9:c5:24:97:97:93:37:ea:1c:
9c:bc:13:e3:a1:49:f9:75:5c:1a:0f:83:d6:6e:22:
6b:89:ec:13:d8:5d:18:81:18:da:5e:51:41:34:24:
10:73:df:55:b2:07:00:b1:5d:b1:af:f9:40:50:92:
6b:b2:33:5a:bb:7e:58:a7:6f:e6:17:9d:1d:26:0c:
c5:fb:37:a7:7f:0d:1b:e2:e8:30:67:f5:f5:90:f0:
27:58:a4:ee:f1:66:c3:bd:f3:f1:7b:79:e3:68:e7:
3e:77:86:12:0a:6f:df:2e:ed:99:1f:da:b8:69:24:
5a:10:d4:7c:52:e1:4c:22:b4:c3:5c:0c:bf:1b:30:
f9:56:e2:fb:16:95:21:2f:3c:0c:6f:09:03:f2:00:
d2:ba:85:f9:68:96:9e:13:79:34:d8:96:bd:3a:16:
6c:42:31:8c:20:a4:93:91:4c:69:34:ad:bd:40:1d:
be:d2:48:89:61:48:e0:96:cc:c2:b0:80:8f:da:ac:
4f:ea:9a:5e:18:a8:fb:46:ee:a4:ea:ad:57:ed:a2:
41:2e:44:77:e5:2e:37:70:88:78:62:f7:7a:36:24:
f6:18:c6:95:ab:31:af:c6:2a:d4:41:bf:5a:26:40:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:92:D2:AD:6B:C3:AF:E4:EA:B1:6F:33:98:10:8A:48:EB:24:18
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:32:49:26:df:04:df:a8:c5:a1:e6:c0:cd:29:9c:7d:b7:
50:25:a1:14:f6:17:7a:36:ab:c5:60:1c:e3:65:cf:da:d6:ae:
71:96:24:b5:f5:73:02:7c:dd:bd:16:f3:36:8f:0e:5d:12:8b:
99:86:aa:ec:df:e2:bd:0c:31:1c:55:ee:dc:eb:cf:de:8c:4f:
f3:e4:11:b1:ed:ca:97:2b:dd:2b:d9:71:01:74:6f:59:21:1d:
ff:10:ea:17:dd:7b:a0:4b:0a:5c:f3:52:a2:82:5c:1c:3f:fd:
f2:18:a3:2c:ec:2b:bc:70:f2:39:ae:65:49:c1:ff:b8:fe:ca:
fe:3a:e2:49:62:45:09:5b:bd:6c:ab:34:b0:8f:d3:e2:d7:f0:
7f:10:c2:5d:dd:56:05:f9:13:3c:02:2b:8f:d6:68:01:aa:05:
7a:75:ae:02:cd:d6:52:36:4f:7f:8f:3b:2d:28:9f:88:36:c2:
ac:f6:42:a9:52:19:5a:96:f1:79:6e:c3:26:66:90:24:24:c7:
43:08:66:df:81:e2:bc:03:34:bb:2a:47:4e:b7:40:3b:b2:82:
e1:ba:a6:50:b9:63:7c:61:48:a6:4e:80:47:97:ea:c8:38:08:
d6:94:60:a0:5b:75:c4:69:a7:75:a4:51:52:20:20:e4:bb:2e:
f7:43:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:53 2026 by rpki-client