Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: hRD5zU8rxAZwIW6J4FOXkZNZJZJgRKxZpOk/7lpYIBs=
Subject key identifier: 70:64:73:4F:38:5F:3D:47:31:7E:11:CC:D0:AE:28:B0:5B:DB:45:A6
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 01A16FEE126BB49186425AD0F7CE5594C2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0963
Signing time: Sat 24 Oct 2026 22:00:35 +0000
Manifest this update: Sat 24 Oct 2026 22:00:35 +0000
Manifest next update: Sun 25 Oct 2026 22:00:35 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: X7Q6V+l72ye106Nj4X6vHDVkzLqL/TzbNslwqt2t+9s=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:ee:12:6b:b4:91:86:42:5a:d0:f7:ce:55:94:c2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Oct 24 22:00:35 2026 GMT
Not After : Oct 25 22:00:35 2026 GMT
Subject: CN=7064734f385f3d47317e11ccd0ae28b05bdb45a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:c2:04:2a:67:38:40:39:9b:a7:e6:a1:a5:
a3:be:5b:fc:24:3b:30:4e:69:82:ed:4c:04:65:da:
24:10:d9:c5:fd:c6:2c:45:49:07:30:f4:84:f9:a7:
5b:50:69:3e:73:e6:09:5b:11:9c:01:0d:54:be:3b:
26:49:20:79:65:84:08:83:8d:10:63:59:e2:6f:5d:
d5:4e:9c:49:5e:2e:cb:c3:69:a9:90:69:57:24:c8:
3d:e2:13:e4:9e:c5:c8:9d:57:66:d3:e8:38:e7:c0:
c9:5e:89:d9:ba:b0:fd:07:20:44:45:11:34:39:5a:
b6:87:d7:7e:16:08:02:3d:f7:e3:67:a4:71:ee:71:
b3:c7:c1:50:ad:07:b8:8a:74:85:f9:8f:7c:89:7b:
06:c6:c2:61:82:06:f3:a5:d3:13:24:c2:1c:c3:cc:
14:80:cb:a7:32:71:c6:8b:62:1c:c0:17:c5:9c:d6:
75:57:55:50:f8:4a:ed:06:e1:25:fa:32:09:cc:9a:
d3:00:62:72:82:b5:f3:67:71:63:cf:f2:ee:b6:4c:
5a:93:7a:dd:a9:0e:a5:f1:63:fd:85:e1:d9:00:c5:
c4:67:b4:a3:e2:a1:9b:3c:fd:ea:1e:36:0e:cf:ba:
f0:46:84:bc:7b:6c:98:f5:02:69:6a:9b:c5:a4:02:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:64:73:4F:38:5F:3D:47:31:7E:11:CC:D0:AE:28:B0:5B:DB:45:A6
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a1:2e:1f:c8:c3:b3:18:d8:4e:35:0a:63:58:42:44:e9:27:
33:dd:a2:37:55:ab:d6:c2:de:4a:06:ff:6b:47:e2:e8:c5:23:
49:80:28:97:51:42:f7:df:2a:20:29:c5:68:b4:d8:1a:11:b2:
8d:59:5c:f4:f5:dc:06:b3:d7:58:bf:59:ee:34:64:50:f5:dc:
75:00:1b:8a:01:b1:d5:95:99:8f:1a:c4:be:12:fe:77:a2:51:
c2:f8:bf:79:ce:65:9e:cb:09:1f:8f:bb:16:5f:4e:79:4d:30:
11:b9:31:af:e0:3a:1a:f3:bb:4f:2e:c0:7b:7d:36:01:40:32:
8f:10:46:fb:bb:86:82:3d:66:a4:05:ec:29:7f:74:29:7c:8a:
1b:e9:99:9b:7f:19:d5:c7:0a:06:d0:4e:bd:f5:ce:75:b5:cd:
26:27:b0:01:8e:64:a9:57:3e:2c:42:12:23:56:a0:a0:bb:ac:
95:cf:d5:ef:c2:0b:f8:ad:b8:7b:0a:94:57:d7:f7:ae:61:93:
eb:cf:19:f7:bc:51:d7:a5:31:d3:c4:88:f5:48:c1:46:ea:f6:
dc:cc:01:c8:2d:bf:f9:53:41:ec:0f:74:26:a8:9a:1f:15:51:
f9:81:73:ff:c9:42:b0:74:36:8e:4d:46:0c:40:c9:68:5d:3f:
0d:93:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:11:54 2026 by rpki-client