Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: 4jFq64Mea1qmOZbW5DxvQeLM9tYmYuLZHwqJWRJeccs=
Subject key identifier: 96:37:A9:6A:5E:F5:F9:18:4D:08:CF:78:4F:92:07:87:A1:82:14:C9
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019D9AE29A176A19D018BF04A3D97BF94BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0767
Signing time: Fri 17 Apr 2026 10:00:34 +0000
Manifest this update: Fri 17 Apr 2026 10:00:34 +0000
Manifest next update: Sat 18 Apr 2026 10:00:34 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: P7buKlB8x4kFq1jVREM246rD5bWSWm43TcG7HMaW8uE=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:9a:17:6a:19:d0:18:bf:04:a3:d9:7b:f9:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Apr 17 10:00:34 2026 GMT
Not After : Apr 18 10:00:34 2026 GMT
Subject: CN=9637a96a5ef5f9184d08cf784f920787a18214c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:8d:1a:60:6f:31:62:ea:30:4f:42:1b:5e:
09:78:53:de:ea:7c:b4:66:af:93:58:be:af:ce:28:
93:97:e3:76:3f:4a:73:ce:64:bf:0f:94:a6:1f:6f:
08:e6:17:9c:a5:50:81:0c:ff:97:94:0e:b9:8c:a9:
d8:1c:99:51:b4:29:81:2c:e0:c1:85:2a:c9:46:2c:
38:b9:e0:03:81:2e:a2:1f:3d:f4:f2:9b:d6:a5:23:
c3:21:c9:cd:3b:df:99:bd:3d:26:5c:f4:25:19:89:
73:3e:34:87:0a:e6:52:11:de:70:6f:b7:8c:b9:e9:
85:aa:08:7a:63:a1:14:d1:0a:49:a9:28:fb:d1:37:
17:6a:6f:c2:62:f9:87:9d:41:6b:01:0a:c6:a7:29:
40:76:03:4a:bd:b5:0c:ef:89:cd:60:a4:e5:1c:13:
f6:e7:c2:25:44:07:a6:fd:6d:20:42:3e:ef:4f:da:
9f:9f:68:dd:0a:92:66:52:2d:d9:1a:95:0c:0e:1f:
e3:e8:33:e3:d6:25:f9:ab:ee:51:74:51:dc:99:cc:
23:a5:b2:62:2d:4c:ac:e7:eb:77:16:49:39:21:ad:
63:a5:f3:99:88:f4:6b:c6:98:19:ca:10:b4:e2:3d:
19:4e:bc:6d:47:d6:c6:73:12:9d:78:c4:4d:a6:75:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:A9:6A:5E:F5:F9:18:4D:08:CF:78:4F:92:07:87:A1:82:14:C9
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cd:c1:95:56:63:ea:31:64:30:7d:16:bf:e8:1b:cd:f2:e8:
fc:6c:1c:28:66:ff:45:0c:bd:71:ea:a9:1e:e6:90:c1:53:9b:
5c:85:34:cf:84:1b:27:ce:82:b9:f7:03:94:c2:f9:d9:49:b1:
ac:d5:97:1b:86:69:18:5f:d4:d3:61:22:c8:ca:b0:3e:15:0a:
e2:8b:fc:b6:db:1a:ff:48:01:47:f0:2a:31:7a:9c:f5:be:07:
b4:09:b9:4f:55:6b:c0:39:3a:cf:4b:af:db:16:ed:2f:b5:23:
98:ed:95:67:93:c6:48:52:9c:44:73:eb:77:09:ad:82:63:41:
53:ce:4f:4b:aa:67:67:7c:4f:73:92:f7:9b:c8:b6:30:ba:65:
e1:7e:8a:8f:9a:02:dd:ea:68:c1:c6:4e:0e:03:de:59:6e:ba:
79:0b:f9:27:61:c0:44:9b:21:73:11:b5:89:9d:16:a5:ff:90:
41:2f:cd:2e:73:8b:0f:13:de:7b:68:3e:9d:46:20:0d:48:93:
b4:15:21:a9:50:1d:21:7c:a6:1a:ef:4a:fa:9a:86:c6:bb:40:
35:85:e3:07:50:e5:da:32:a6:13:59:0c:3a:47:1e:ae:f3:47:
2a:5e:3a:e5:ad:cb:56:8d:2d:b9:5e:1c:42:4a:89:a1:c1:91:
f8:08:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:29 2026 by rpki-client