Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: hISksjqrcLdpk4WFcwomYlCG1t4B6kxhlhHTXwoRa2Y=
Subject key identifier: 21:B4:DB:C9:1B:FF:A6:F7:4A:1E:39:E0:69:19:3F:30:C3:B0:EF:42
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 01A175B9579D0058DE0A781B3492F8750666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0966
Signing time: Mon 26 Oct 2026 01:00:43 +0000
Manifest this update: Mon 26 Oct 2026 01:00:43 +0000
Manifest next update: Tue 27 Oct 2026 01:00:43 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: dJlOcuUSC0kCNgCugshZADhI1dzCU03qJKOKuyTibnA=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:57:9d:00:58:de:0a:78:1b:34:92:f8:75:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Oct 26 01:00:43 2026 GMT
Not After : Oct 27 01:00:43 2026 GMT
Subject: CN=21b4dbc91bffa6f74a1e39e069193f30c3b0ef42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:3a:f6:4f:23:22:db:40:7f:bc:48:ab:ce:
e6:ff:82:70:a2:e0:ef:3f:6c:8b:85:1d:12:ec:58:
17:aa:ab:9c:28:c1:bf:ba:66:c8:17:9e:61:08:e7:
57:74:8b:f8:0c:51:2b:8b:52:02:cd:72:1b:eb:8d:
35:c9:04:48:db:4b:88:24:1c:3c:20:a7:bd:1c:42:
e3:44:a4:f1:96:8a:6a:88:11:cd:8c:7a:5e:ba:85:
ed:4d:01:63:0f:64:ed:f3:e0:1b:49:05:78:b7:de:
cc:d3:cb:8e:c7:ec:06:e6:b7:34:0e:05:86:c3:87:
5f:e0:19:d1:72:a8:11:a6:f0:b5:e3:5d:b3:7f:9f:
63:db:76:25:cf:89:e0:25:f8:7f:71:bc:99:bd:af:
ea:8f:5a:e7:ff:59:85:ec:9c:b8:91:01:c4:b8:84:
32:a0:22:e7:52:03:18:55:ba:1e:28:4b:1f:cf:f2:
e7:f1:c3:33:30:7b:54:00:c8:34:45:a4:ba:9f:6c:
6f:98:a2:4a:cb:00:72:3d:6f:0b:b9:49:44:90:3e:
a0:25:6a:1c:76:33:b9:35:c4:50:d7:22:52:f8:8b:
41:9c:ff:61:72:74:fb:9e:90:c5:f7:8e:00:82:84:
de:eb:b6:56:41:da:a5:e7:97:6b:d6:3b:2e:6a:13:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:DB:C9:1B:FF:A6:F7:4A:1E:39:E0:69:19:3F:30:C3:B0:EF:42
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:07:c6:a4:c6:de:ae:05:57:1f:c5:e5:94:4c:0e:ac:de:66:
73:51:fd:0d:94:14:d9:36:25:0a:98:6d:4e:8e:ac:36:22:f1:
43:bb:1b:14:f7:b0:c0:14:fc:6d:76:b0:f0:f6:17:08:dd:4d:
5d:28:a1:09:ac:cc:b1:22:e1:bc:d3:14:ae:cc:5d:56:e8:08:
99:d9:33:00:90:bf:c3:4e:5a:a2:f1:58:21:d9:16:6b:82:6a:
7a:4d:0b:1f:20:c1:25:07:e0:01:43:1d:41:df:7b:67:d3:15:
02:5a:88:e2:6c:bc:44:9d:c5:d7:99:4e:b4:aa:a5:e0:9c:d3:
a4:10:27:d6:a4:15:4a:8e:6d:e8:5f:18:2f:29:f3:e4:a7:7e:
93:30:f4:9c:9d:4b:0b:41:af:b5:16:b8:ff:0c:89:26:6d:b3:
ed:a0:80:39:1b:f4:2a:e3:46:f3:88:aa:c0:1e:00:e1:cf:45:
b6:74:af:06:f4:9c:6b:54:dd:5c:7b:c4:40:c6:a9:88:64:42:
71:e5:c4:1e:e8:6c:0f:d6:fa:d7:76:e5:29:20:ab:aa:ab:f4:
f7:78:a2:e2:96:7d:9a:43:bc:7e:59:77:83:3b:26:36:4a:ae:
e3:d2:d2:a5:76:27:0f:71:c9:d2:87:4e:13:a4:33:64:c5:95:
0e:b0:88:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:09:59 2026 by rpki-client