Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: 7WrmuYG/keMz8TGmGwivvp/OvvWpNjDqDZwwAlTd6J8=
Subject key identifier: A9:EB:39:66:A2:34:56:A5:8D:9D:B9:A0:B4:94:27:D8:04:0D:26:D0
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019DB2105AE76C71F807CB5D4038A9F210C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0773
Signing time: Tue 21 Apr 2026 22:01:49 +0000
Manifest this update: Tue 21 Apr 2026 22:01:49 +0000
Manifest next update: Wed 22 Apr 2026 22:01:49 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: hv4TEUhng7yUStVi9fNAIql5XwsYH0zW7ExgEx2JK9I=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:10:5a:e7:6c:71:f8:07:cb:5d:40:38:a9:f2:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Apr 21 22:01:49 2026 GMT
Not After : Apr 22 22:01:49 2026 GMT
Subject: CN=a9eb3966a23456a58d9db9a0b49427d8040d26d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:13:14:e7:67:11:06:c8:45:48:ea:c5:22:
48:3b:70:ae:60:af:3c:f6:90:c4:b8:1f:db:d8:70:
00:aa:47:de:f6:4b:a1:be:78:8a:db:b2:ee:f2:05:
50:8d:84:cd:a9:e7:88:00:aa:5a:9a:62:ec:ce:4b:
bc:a4:47:2b:62:16:24:6e:d1:13:d7:28:44:30:68:
79:a2:40:58:86:3d:0a:30:3c:ce:d0:58:d4:e2:f8:
af:0f:37:ec:b4:d4:d7:4d:51:10:1c:b2:d2:39:01:
3d:49:a1:34:91:f2:52:1a:28:8a:eb:15:de:90:a9:
c2:0e:c3:5a:1a:66:24:ac:2d:42:cb:3c:99:a2:99:
db:37:ec:5c:5b:11:dd:e4:17:97:cb:38:fd:9e:b2:
d7:b2:23:8f:e0:ec:30:ae:a1:1c:d2:e0:f6:53:55:
6e:69:b3:8b:c6:ec:b8:50:ce:55:64:0f:29:51:8b:
f6:e4:21:37:ff:3b:c1:7d:53:fb:3f:8f:30:cb:f9:
1d:49:4b:7d:cb:69:eb:02:da:02:de:05:cf:97:fd:
6c:fa:6e:e1:0a:c1:1e:b1:c6:e0:5d:1f:fb:f1:c1:
93:5e:6c:51:b6:82:78:89:b0:28:81:22:15:c3:18:
b1:86:4b:9b:90:41:7f:f5:18:d0:c2:90:a3:ad:3e:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:39:66:A2:34:56:A5:8D:9D:B9:A0:B4:94:27:D8:04:0D:26:D0
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5e:87:7f:e4:54:55:d0:a6:e2:f3:23:8f:1f:fb:b3:9d:5e:
10:36:76:26:fc:02:59:46:2c:90:b8:92:d8:de:4e:fe:d0:fe:
d2:71:10:b2:d7:aa:41:ca:14:46:79:b7:fc:e4:3b:c2:fe:8b:
6a:c5:59:85:1d:b7:ac:45:4e:22:30:7a:c5:47:c0:27:81:94:
d3:2b:c7:3f:4d:4a:87:e5:3b:08:b0:c0:b0:78:7b:b4:0d:17:
fa:cf:e8:40:16:1a:8b:7e:90:af:a8:80:eb:ea:5f:3b:53:d9:
85:ad:7f:da:47:78:33:84:8e:e4:01:f9:d7:94:95:27:8f:e6:
9e:64:f7:73:4b:ac:4d:3d:46:64:5d:06:22:06:0d:d8:01:ef:
c2:3b:e4:5d:82:5a:d2:57:06:96:eb:9b:95:66:e6:69:71:9f:
8b:cd:2b:70:b3:d9:2b:02:d5:84:f8:3b:8d:f5:a4:5f:3b:79:
ad:49:1d:7d:56:1f:e2:76:a2:e4:c9:76:ff:5e:01:85:10:d1:
23:21:ac:c6:b4:09:25:d2:90:fd:e4:86:01:8a:b3:57:20:59:
9a:e9:01:7e:ed:1c:a8:a8:e8:65:c9:41:46:67:1f:30:e7:c7:
c3:ec:16:b7:80:1c:af:f5:40:7b:bf:ad:02:c9:9f:44:e3:0b:
32:03:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:44:40 2026 by rpki-client