Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: CWS4B1y5Wje5ZRPdftwVHm/3V+nTRQCf2bwExYaUQEo=
Subject key identifier: 94:F3:6F:0C:52:94:15:CB:EE:A8:B3:5E:14:F6:0E:69:C6:6A:8C:11
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019EC06D2B6268250F00F03ACCA1ABE425CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 07FF
Signing time: Sat 13 Jun 2026 10:00:40 +0000
Manifest this update: Sat 13 Jun 2026 10:00:40 +0000
Manifest next update: Sun 14 Jun 2026 10:00:40 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: owIKBnJgpH7AHdcmXA8eQ5BScpGYDiswpiY9XWAaxfg=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:2b:62:68:25:0f:00:f0:3a:cc:a1:ab:e4:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jun 13 10:00:40 2026 GMT
Not After : Jun 14 10:00:40 2026 GMT
Subject: CN=94f36f0c529415cbeea8b35e14f60e69c66a8c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:db:2a:9a:a8:75:f8:44:e1:61:2f:af:01:
f7:23:a7:b7:4e:86:7f:d4:5a:86:d1:32:43:c0:8d:
20:22:96:1e:c8:78:a6:08:1f:bc:53:ee:f6:53:4a:
fe:5a:1b:f7:4e:75:c5:ae:f4:90:75:5b:ff:67:01:
6e:0b:ab:1f:5f:f3:da:62:c9:3e:a0:c3:ab:7e:e3:
df:66:5f:f7:ed:f9:7e:11:26:5a:fa:f1:0d:3c:76:
10:10:43:2d:1d:eb:d9:3d:fd:14:c4:97:ad:d1:88:
14:fd:cb:62:77:4f:1f:66:4d:86:aa:4d:b0:ff:59:
ae:fa:ac:3d:d1:43:fa:38:53:da:fc:5f:cb:43:6f:
c0:84:ad:aa:7e:b1:42:e5:47:72:0b:18:be:f3:65:
16:7b:7a:a2:1b:07:05:8c:13:01:f1:71:b1:f1:2d:
9b:7b:43:e3:31:04:92:ad:8a:c9:46:27:16:8c:e6:
bc:55:2e:e4:67:13:95:f4:c1:c6:95:e1:d7:cf:a4:
ca:2d:cd:a8:a3:01:d6:3b:97:41:28:d0:de:f1:77:
55:ce:13:c6:4c:06:2f:a9:a9:cd:92:a1:4e:1b:d7:
36:30:f1:09:f1:1f:3a:f3:fc:e7:5d:f5:83:9c:3f:
b6:13:70:09:c7:b1:09:04:ae:93:7e:92:51:2f:2d:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:6F:0C:52:94:15:CB:EE:A8:B3:5E:14:F6:0E:69:C6:6A:8C:11
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:81:4f:ee:fe:12:26:2e:69:95:3b:3e:d0:dc:21:c8:11:1c:
10:31:39:fc:bb:73:9b:c7:f7:8f:33:8b:f6:41:93:7c:88:86:
41:5e:bc:b0:2f:f1:0c:42:85:bb:30:c4:21:d9:89:8d:8a:32:
8b:d0:d2:00:06:33:3b:a3:23:8f:29:2e:37:8d:81:30:4d:36:
04:dd:cb:9c:9a:da:0f:cd:84:f5:e1:0c:fd:6e:8e:b4:02:39:
01:13:f7:24:5b:06:0b:5b:c0:3a:1e:be:de:d0:5d:bb:c3:1f:
96:fd:ae:20:48:7b:c3:ac:3a:8e:27:df:4c:a7:5e:03:74:d5:
e2:5e:ce:99:94:dc:15:ea:f1:d6:4f:b5:e7:da:e0:81:9e:f3:
00:e5:d9:24:f3:bb:44:4d:24:15:98:98:a7:2e:c7:18:82:23:
6e:18:43:c3:b9:a2:e4:29:4f:1b:13:45:34:43:8a:25:d6:5f:
f5:c5:2e:9a:93:d0:9f:2e:81:ae:fb:b0:ec:6b:c6:e2:87:0e:
10:05:ae:35:68:14:52:54:99:6b:5f:3a:ed:cb:e5:e7:a5:b6:
6f:77:10:7c:2d:c6:09:b2:ef:a9:65:7e:d0:5b:88:0c:42:09:
0a:37:48:ac:e3:dd:49:ff:45:43:48:6d:5a:df:57:5f:43:be:
6a:90:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:35 2026 by rpki-client