Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: ZIAtG9B5Ug7zcH+c7QPOH8iutAnDQV8XrtF+aTmFxtI=
Subject key identifier: 0F:C8:04:91:01:ED:AE:A7:86:59:BF:96:D1:9A:68:DD:26:1D:6C:FB
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019F87575D60F50C058E7CB5DF858F9770B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0866
Signing time: Wed 22 Jul 2026 01:01:17 +0000
Manifest this update: Wed 22 Jul 2026 01:01:17 +0000
Manifest next update: Thu 23 Jul 2026 01:01:17 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: J13Vg2xzFvhQN2vit5XEaumaReN4SF9J0lMO77SvKYE=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:57:5d:60:f5:0c:05:8e:7c:b5:df:85:8f:97:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jul 22 01:01:17 2026 GMT
Not After : Jul 23 01:01:17 2026 GMT
Subject: CN=0fc8049101edaea78659bf96d19a68dd261d6cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:30:70:7f:87:46:57:e3:39:7f:31:ad:25:
fb:9c:b2:de:f0:2d:61:0b:70:16:f4:fe:86:7e:91:
1d:2e:70:c5:05:f0:19:e0:8e:71:80:e0:24:bb:89:
46:1e:b9:b1:75:35:f7:80:25:84:e1:4c:37:e4:19:
5a:a8:da:0a:e4:9a:7f:e8:8e:67:93:32:42:e5:69:
c3:1a:c2:01:2f:cd:1f:78:9b:27:96:f4:b5:ff:38:
f2:ca:6f:5f:f0:32:35:4d:0b:0c:42:26:0a:64:f2:
b7:16:6c:d1:b1:dd:51:a4:74:d8:c1:fa:64:59:4a:
0d:d6:65:91:6e:8c:ff:bf:8d:15:19:22:22:10:89:
7a:80:b7:6b:a9:f9:08:5d:d3:00:fb:65:bd:17:52:
05:f5:55:8e:19:94:d0:10:a8:c4:51:c1:41:27:23:
b0:f4:a3:35:23:aa:e0:ce:00:b4:c3:df:51:71:67:
c7:31:c3:ea:cf:a1:98:fc:cf:bf:aa:3b:e9:be:81:
96:bd:f8:b3:b3:bc:2e:88:b8:97:af:66:32:67:85:
d1:6d:da:de:ed:cd:94:1e:a9:9f:94:c4:37:d7:0e:
14:a6:f9:df:82:c9:9c:32:e0:8b:fe:53:a8:f9:a5:
0d:b0:ab:2b:e5:6a:6b:2f:e0:b0:33:a9:cb:c9:b2:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C8:04:91:01:ED:AE:A7:86:59:BF:96:D1:9A:68:DD:26:1D:6C:FB
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:87:f1:af:19:be:ad:6e:eb:04:6d:bd:ac:c9:cf:8a:5e:a8:
4b:3e:a0:84:48:6a:5d:bd:90:71:c9:6f:b2:b4:05:7f:67:02:
d0:e7:98:40:77:b8:88:5c:e6:04:04:b1:3f:0a:88:9b:68:1c:
05:c4:03:26:41:e2:9f:5f:23:d1:2d:66:80:92:04:5a:04:56:
4c:f8:38:6a:df:06:3a:df:ab:fe:a6:7a:e3:f1:d5:63:1c:ce:
9c:0a:2d:db:5e:b5:77:a1:90:87:bb:9c:90:63:59:aa:c9:0a:
9b:19:ce:d3:52:4f:a9:8e:f8:fc:d2:96:72:65:32:9c:86:1d:
19:51:fc:da:26:94:30:80:0c:8d:8e:e0:f7:2c:3b:89:eb:c2:
72:a0:75:16:88:3f:44:ad:4f:a7:49:61:2e:6a:05:e6:b7:99:
c2:fa:86:72:d4:40:f3:89:67:ee:17:e6:72:e5:8b:66:0b:bb:
3c:31:8f:79:10:d7:e8:6f:28:70:ce:3b:cb:d8:12:a5:07:23:
90:f8:9e:86:31:b8:b9:38:d0:9f:93:f6:48:0c:50:28:52:d5:
12:70:9c:70:87:56:02:6d:f5:e6:cc:0d:72:d1:a4:1d:df:fd:
f7:df:31:ce:fd:05:ee:c3:9e:5c:6b:2b:f3:92:93:c3:25:3e:
41:a9:57:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+HV11g9QwFjny134WPl3C2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm
NWNlNTEwHhcNMjYwNzIyMDEwMTE3WhcNMjYwNzIzMDEwMTE3WjAzMTEwLwYDVQQD
EygwZmM4MDQ5MTAxZWRhZWE3ODY1OWJmOTZkMTlhNjhkZDI2MWQ2Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTQwcH+HRlfjOX8xrSX7nLLe8C1h
C3AW9P6GfpEdLnDFBfAZ4I5xgOAku4lGHrmxdTX3gCWE4Uw35BlaqNoK5Jp/6I5n
kzJC5WnDGsIBL80feJsnlvS1/zjyym9f8DI1TQsMQiYKZPK3FmzRsd1RpHTYwfpk
WUoN1mWRboz/v40VGSIiEIl6gLdrqfkIXdMA+2W9F1IF9VWOGZTQEKjEUcFBJyOw
9KM1I6rgzgC0w99RcWfHMcPqz6GY/M+/qjvpvoGWvfizs7wuiLiXr2YyZ4XRbdre
7c2UHqmflMQ31w4UpvnfgsmcMuCL/lOo+aUNsKsr5WprL+CwM6nLybJGdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/IBJEB7a6nhlm/ltGaaN0mHWz7MB8GA1UdIwQY
MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt
NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm
LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYfxrxm+
rW7rBG29rMnPil6oSz6ghEhqXb2QcclvsrQFf2cC0OeYQHe4iFzmBASxPwqIm2gc
BcQDJkHin18j0S1mgJIEWgRWTPg4at8GOt+r/qZ64/HVYxzOnAot2161d6GQh7uc
kGNZqskKmxnO01JPqY74/NKWcmUynIYdGVH82iaUMIAMjY7g9yw7ievCcqB1Fog/
RK1Pp0lhLmoF5reZwvqGctRA84ln7hfmcuWLZgu7PDGPeRDX6G8ocM47y9gSpQcj
kPiehjG4uTjQn5P2SAxQKFLVEnCccIdWAm315swNctGkHd/9998xzv0F7sOeXGsr
85KTwyU+QalX7A==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:06:34 2026 by rpki-client