Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: Dy4mUXMwxJrYeZSasSNE8kWJt9vYlR4P38+bLMOAF1U=
Subject key identifier: DD:7B:72:5A:BF:10:89:8F:00:0F:06:11:7C:E6:B5:D3:C2:FA:54:9B
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019FA89A38A24429471ABC8C2C2A5EDDFBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0794
Signing time: Tue 28 Jul 2026 12:01:47 +0000
Manifest this update: Tue 28 Jul 2026 12:01:47 +0000
Manifest next update: Wed 29 Jul 2026 12:01:47 +0000
Files and hashes: 1: AN7d4TXrtt5_te4VnJ6dVmu47oE.roa (hash: j0ueVlAIinrIC36bzKoLDFrIbGMkcFuqoDWXY+F2+w8=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: pmoIUztyR7T2lwzxqBcEwSvTznKbwLQzbl0grO8wciQ=)
3: LaBbMvd3OwQhNnrUizZKTdnekiQ.roa (hash: gyzOiFVxonnT2AmLy7+95jCrZWSk+rERZGHB5wVY/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:38:a2:44:29:47:1a:bc:8c:2c:2a:5e:dd:fb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Jul 28 12:01:47 2026 GMT
Not After : Jul 29 12:01:47 2026 GMT
Subject: CN=dd7b725abf10898f000f06117ce6b5d3c2fa549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:22:90:94:0b:35:b5:c0:f1:a7:e9:16:2e:
c5:a8:4d:10:68:71:0e:e2:d7:e7:6b:8a:70:73:c9:
5c:ed:9a:f6:d1:02:fd:bf:fb:83:93:d4:f0:0b:02:
d4:24:79:d1:38:aa:4b:5b:94:8a:03:77:e5:73:1d:
ce:0c:ba:5c:d4:10:1b:2e:78:30:31:f7:35:4a:27:
63:55:e7:81:e4:43:b2:25:a0:f1:85:b8:76:4d:22:
ec:96:c2:78:d0:87:35:02:93:13:59:83:2c:e9:f1:
5a:73:1f:3a:1a:ed:d8:9f:2b:2c:44:25:4a:63:df:
b2:fd:75:6d:13:95:6a:13:bf:60:dc:c0:b7:4e:b8:
65:1d:4c:16:c0:3d:47:6b:af:b5:57:c1:75:8b:d1:
8a:31:67:ca:c9:06:87:69:56:53:53:2d:0d:8b:0d:
01:61:97:2b:cb:0b:18:d8:20:b4:e2:fe:ae:39:a9:
12:5e:45:2d:55:03:07:9c:63:4e:9f:2f:96:45:f2:
71:4e:7e:62:9b:04:32:ea:62:41:83:69:42:ee:1b:
85:8f:6b:75:e4:85:01:8c:d0:90:f6:05:5c:c0:ea:
db:16:1c:31:37:98:2c:ae:5d:2d:c8:28:42:44:1d:
bf:7c:f9:c5:a5:47:cc:f8:f1:be:e5:3f:a8:31:2b:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:72:5A:BF:10:89:8F:00:0F:06:11:7C:E6:B5:D3:C2:FA:54:9B
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cd:51:df:94:09:64:75:57:cc:59:e7:73:e2:ee:b4:3e:4e:
93:37:e0:40:6d:b8:99:d1:3a:15:5b:cc:fa:01:4b:67:8e:0b:
4f:bd:63:62:c8:33:7e:b4:9c:d1:fd:eb:51:83:43:aa:1c:f5:
be:64:9e:d0:98:1e:b2:67:bf:ca:2c:70:42:e4:31:43:44:e6:
51:e3:30:47:f2:8d:45:b9:95:a8:41:3c:30:7c:db:4c:cf:1b:
b7:ea:27:8d:ec:08:99:75:e6:4c:69:16:ed:8d:e3:a0:9b:00:
ae:f4:a0:44:cf:a4:ea:fc:c3:23:f0:e4:82:b4:f6:97:55:8e:
26:e4:d5:2a:b2:9f:e9:b9:17:c8:4d:e8:13:74:4b:a5:f8:53:
d6:02:c6:81:0b:d8:ec:0b:1f:48:93:ef:51:5c:98:b2:54:22:
e8:3f:eb:eb:4b:be:21:7c:77:39:15:a3:f4:df:05:46:4d:29:
48:54:90:4b:7b:e2:5d:43:39:93:ee:76:46:7e:1c:f7:2d:06:
86:25:d9:8f:67:08:35:18:2e:58:8d:85:0f:ac:b0:e4:8c:6c:
8a:82:4b:7a:6b:8f:85:8f:5b:50:47:d6:e8:5f:5b:eb:59:9e:
33:3d:a3:91:5c:1f:68:01:d1:10:d5:2c:98:54:d5:17:83:5f:
15:f7:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:40 2026 by rpki-client