Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: BirCWQDWN+65ZHMO+9skI7LPGVVlMQ5mzdIpdVrCA3Y=
Subject key identifier: 76:79:71:87:65:07:DA:D8:A2:F2:31:52:31:0D:AD:50:06:15:A1:08
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019CABD9A7778C05F1F8D81F74924B74A4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0608
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: AN7d4TXrtt5_te4VnJ6dVmu47oE.roa (hash: j0ueVlAIinrIC36bzKoLDFrIbGMkcFuqoDWXY+F2+w8=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: wPlu0oA/Xf6/Xm70f4+0ms2nQrYCjwUY2Dl7iBkIg/g=)
3: LaBbMvd3OwQhNnrUizZKTdnekiQ.roa (hash: gyzOiFVxonnT2AmLy7+95jCrZWSk+rERZGHB5wVY/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a7:77:8c:05:f1:f8:d8:1f:74:92:4b:74:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=767971876507dad8a2f23152310dad500615a108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:35:8f:43:6d:16:38:1b:9d:c0:25:f5:a0:
80:0c:db:cc:75:71:aa:4f:ca:db:a2:85:86:d4:22:
c5:33:1f:c1:ed:25:01:4a:3d:99:9b:bc:44:88:cd:
d9:70:cb:43:a2:a1:61:f4:26:fe:6b:24:e0:54:1d:
5e:c3:5f:08:3e:7f:e5:e8:c5:84:24:19:38:54:f6:
30:9d:df:7e:e2:a5:f2:ce:24:2b:0d:f6:2f:d7:05:
4c:b2:6b:a3:81:02:8b:fa:1e:1a:69:c2:40:95:b0:
d6:58:fe:48:e4:6b:70:7e:f6:6f:9d:ef:44:2a:25:
db:14:3b:5d:bf:26:77:0a:97:9c:6e:71:42:38:f8:
65:0a:5a:05:58:a7:85:f0:51:c3:5f:41:72:43:39:
ab:22:3d:38:2c:59:d3:5c:0c:ad:7e:96:3f:80:68:
7e:d7:02:4e:9b:4f:9a:bc:cf:25:04:0f:2d:02:c9:
db:d9:35:3f:b3:50:e8:40:5c:df:12:42:b3:a2:31:
6c:40:69:a3:21:6e:7d:16:2b:74:32:26:a8:f9:79:
17:2e:5b:07:fc:ca:4f:dd:1e:e9:e7:c4:68:4b:9a:
f5:60:a3:27:03:43:96:a3:aa:d6:4e:ce:08:a7:4d:
90:05:da:e3:5b:82:03:f0:74:b4:06:a5:d2:7d:29:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:71:87:65:07:DA:D8:A2:F2:31:52:31:0D:AD:50:06:15:A1:08
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:35:a8:45:7d:9a:75:bf:f1:74:fa:b5:fd:1e:94:c9:2e:19:
3f:79:46:2e:06:a7:05:37:16:6d:f8:6a:3d:be:b4:32:7a:03:
d5:31:78:fe:f6:63:e0:7f:db:4d:55:22:20:f5:02:82:63:4e:
5d:52:f9:f5:9b:2b:ac:af:ca:64:fe:cf:38:8c:00:f4:20:1c:
7b:35:43:f3:d1:d9:36:04:0d:e3:52:b5:80:cf:a3:ed:87:f8:
39:89:94:22:f9:05:ee:ad:88:1a:92:c1:da:a1:33:8c:ae:18:
b7:0a:da:59:d6:5e:39:48:69:a8:d5:26:e3:ba:de:82:b8:58:
37:ab:f5:7a:2b:f7:66:40:5e:cf:eb:a8:e0:40:4b:bb:1b:db:
5b:a1:4a:b4:bb:8a:18:5a:7c:b2:df:10:76:27:00:ee:32:23:
db:32:e5:9c:2a:8d:01:82:f3:a6:6e:3d:74:e8:48:17:45:83:
18:95:fa:d9:a4:a5:a5:66:8c:c2:e0:15:a4:4a:5b:d7:c9:f7:
ec:52:9c:54:3b:f5:ad:37:3c:95:e7:c4:a6:eb:90:e5:7b:85:
d6:0d:73:23:18:23:3f:04:7a:1d:53:da:f2:04:09:2e:1c:57:
01:32:ae:2a:d2:a6:e3:f2:f6:67:69:10:88:dc:a4:71:2d:d8:
4f:bd:a2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2ad3jAXx+NgfdJJLdKTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm
NTQ3YTIwHhcNMjYwMzAyMDAwMTMzWhcNMjYwMzAzMDAwMTMzWjAzMTEwLwYDVQQD
Eyg3Njc5NzE4NzY1MDdkYWQ4YTJmMjMxNTIzMTBkYWQ1MDA2MTVhMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfc1j0NtFjgbncAl9aCADNvMdXGq
T8rbooWG1CLFMx/B7SUBSj2Zm7xEiM3ZcMtDoqFh9Cb+ayTgVB1ew18IPn/l6MWE
JBk4VPYwnd9+4qXyziQrDfYv1wVMsmujgQKL+h4aacJAlbDWWP5I5GtwfvZvne9E
KiXbFDtdvyZ3CpecbnFCOPhlCloFWKeF8FHDX0FyQzmrIj04LFnTXAytfpY/gGh+
1wJOm0+avM8lBA8tAsnb2TU/s1DoQFzfEkKzojFsQGmjIW59Fit0Miao+XkXLlsH
/MpP3R7p58RoS5r1YKMnA0OWo6rWTs4Ip02QBdrjW4ID8HS0BqXSfSk47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ5cYdlB9rYovIxUjENrVAGFaEIMB8GA1UdIwQY
MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt
MTg4MGU3ZWYxZGI0LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0
LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTWoRX2a
db/xdPq1/R6UyS4ZP3lGLganBTcWbfhqPb60MnoD1TF4/vZj4H/bTVUiIPUCgmNO
XVL59ZsrrK/KZP7POIwA9CAcezVD89HZNgQN41K1gM+j7Yf4OYmUIvkF7q2IGpLB
2qEzjK4YtwraWdZeOUhpqNUm47regrhYN6v1eiv3ZkBez+uo4EBLuxvbW6FKtLuK
GFp8st8QdicA7jIj2zLlnCqNAYLzpm49dOhIF0WDGJX62aSlpWaMwuAVpEpb18n3
7FKcVDv1rTc8lefEpuuQ5XuF1g1zIxgjPwR6HVPa8gQJLhxXATKuKtKm4/L2Z2kQ
iNykcS3YT72i+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:26 2026 by rpki-client