Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: 1WjOTrhvkb6t84NkVVhSAD4umCyMhAXPZQR4lX4Pqcs=
Subject key identifier: 68:8C:91:D3:A9:78:19:04:6A:CA:DC:EF:AF:3E:99:46:18:99:E0:11
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019FAA19CAF5B8DF1C1650BF2741F4F82591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0878
Signing time: Tue 28 Jul 2026 19:00:44 +0000
Manifest this update: Tue 28 Jul 2026 19:00:44 +0000
Manifest next update: Wed 29 Jul 2026 19:00:44 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: 6FG3mQfLkbi0lVHP9ou19YZp1slEgzI9oBplWkkpmLY=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ca:f5:b8:df:1c:16:50:bf:27:41:f4:f8:25:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jul 28 19:00:44 2026 GMT
Not After : Jul 29 19:00:44 2026 GMT
Subject: CN=688c91d3a97819046acadcefaf3e99461899e011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:52:75:75:57:37:74:46:fc:1e:83:f0:6a:
91:1d:6e:1a:ab:a8:25:f6:67:49:7e:1e:1a:76:3b:
1d:9a:85:77:88:27:88:9a:b9:4d:9f:4e:3a:06:d9:
61:e9:f2:82:3a:a2:76:a2:f8:0c:9c:d0:6e:9b:12:
92:04:6b:c7:31:6a:b8:b5:5d:b1:9e:0d:03:f8:87:
c6:2d:27:c3:0e:db:8f:c9:5d:c2:a6:40:a5:e2:6b:
7c:32:7e:1b:12:8f:f6:42:49:7a:18:42:b1:77:0b:
fc:14:fd:e3:12:58:5d:39:4f:98:59:9f:1a:c2:b4:
c1:6c:09:d7:3a:58:78:7d:80:3d:cc:b6:50:a8:eb:
3e:f3:f0:86:e3:c5:5c:d5:f0:db:af:0e:ae:37:3a:
07:0a:f6:b6:6b:c6:05:92:4f:f2:e0:08:1f:01:04:
3e:d0:26:f5:15:9b:4d:aa:7f:7e:c3:04:e6:eb:5c:
51:70:0d:be:ed:a3:27:c7:72:47:90:9a:35:ad:d5:
05:a1:7d:ac:34:ca:50:97:b9:a1:15:c9:9a:e7:92:
13:15:d1:1b:d2:88:5d:bf:b9:ed:9b:e4:c6:c0:32:
54:aa:11:fc:ea:29:a4:03:af:f0:64:84:f8:4f:98:
b2:43:fd:b2:bf:39:ca:63:42:36:90:d0:4d:a2:a5:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:91:D3:A9:78:19:04:6A:CA:DC:EF:AF:3E:99:46:18:99:E0:11
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:03:f2:91:46:c2:a6:61:5b:92:82:44:a3:2d:c8:48:75:
d1:35:5f:9b:4b:6b:9d:6d:98:5f:4c:46:db:c6:68:01:30:38:
72:77:e2:b1:a0:b8:49:19:bf:33:ec:b3:74:88:00:20:34:68:
89:fa:56:32:4c:5e:89:50:35:b5:8c:a5:56:7c:34:38:f3:ff:
16:e2:64:f5:f7:15:b5:c3:2e:e7:c6:b7:fd:3e:cb:3b:42:73:
d4:05:33:aa:d4:5d:04:33:5c:9d:58:90:93:4f:63:a4:a4:fc:
e5:ac:fe:13:8b:16:f3:20:67:8b:35:c6:c0:75:95:9f:e2:61:
79:2d:d3:61:d8:f0:a3:6a:76:d8:3b:e2:bc:51:ed:88:8f:04:
9a:4d:57:79:54:a2:7c:fc:b8:12:b0:62:b1:b6:6c:0f:81:d2:
84:47:61:95:d8:4a:e6:de:0d:5f:69:07:3c:ec:0d:40:a7:74:
9b:82:d7:02:3f:61:80:17:6c:eb:69:7f:1c:d2:d5:4c:cd:f7:
eb:3c:b9:77:c3:3f:ce:65:4d:65:4b:98:aa:fa:ef:3e:ad:db:
03:21:57:e3:ed:2c:bb:8b:72:63:e3:11:34:63:7c:bd:48:fe:
42:30:cc:41:e6:87:3c:9b:74:77:7d:86:9a:08:b7:f6:9c:8d:
e5:ee:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:09:30 2026 by rpki-client