Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: 11O2Q8X8UDe/fCOGe/+ax0UkVoJRo1XtyO1GNpQPoXc=
Subject key identifier: A4:E3:3A:49:8D:5E:DC:0A:1B:87:51:BB:0A:95:C9:47:A2:1B:0C:96
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 01A06F1565781C7BF9F909214B10D83A839C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 08DE
Signing time: Sat 05 Sep 2026 01:01:08 +0000
Manifest this update: Sat 05 Sep 2026 01:01:08 +0000
Manifest next update: Sun 06 Sep 2026 01:01:08 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: +qC/7cvOh/ripECQQFcHpQnditNIjSgJHvegjmUOeSM=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:65:78:1c:7b:f9:f9:09:21:4b:10:d8:3a:83:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Sep 5 01:01:08 2026 GMT
Not After : Sep 6 01:01:08 2026 GMT
Subject: CN=a4e33a498d5edc0a1b8751bb0a95c947a21b0c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:30:c9:fe:c2:c6:28:3e:99:34:f5:4c:fe:
f5:55:b8:fe:4d:63:e9:79:28:f7:ec:68:67:c9:d5:
69:d3:da:ca:bd:b5:0e:0c:2c:33:16:02:c3:77:41:
33:e3:72:98:05:da:4f:38:38:18:c5:0d:2a:31:a6:
61:cb:3f:8d:51:8a:c8:5e:b9:71:ae:0a:f7:54:eb:
8a:7a:b6:f5:7d:22:a8:60:47:2a:95:3e:2e:33:8e:
6f:73:6f:8f:31:36:1e:ec:1b:c6:7a:de:33:51:20:
8e:38:ff:84:e6:6e:f6:f3:a8:59:58:d3:97:df:57:
86:1f:f2:bd:b3:68:f6:6d:ce:81:b5:5d:3c:54:dc:
ac:e1:49:22:3d:7b:f3:9a:25:d0:0d:02:7a:f7:a6:
18:82:5f:2b:c9:e7:e3:0d:3b:ed:22:8f:6b:d2:37:
f0:f1:90:ac:3d:2b:10:7b:0a:f6:49:c2:36:b5:f2:
ea:4d:0c:f5:c8:0b:8b:26:e2:21:18:5e:b8:d5:fa:
bc:17:44:59:ed:ec:26:4d:aa:b3:c9:0a:35:c2:a2:
89:9f:df:c4:ae:31:36:86:13:11:5c:ee:c5:6a:f6:
77:ec:36:68:eb:da:3f:8e:42:6b:02:87:89:3c:ac:
23:d1:05:d7:a1:0a:83:be:69:6a:07:59:84:5b:a5:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:3A:49:8D:5E:DC:0A:1B:87:51:BB:0A:95:C9:47:A2:1B:0C:96
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:f4:ab:0c:bd:ef:2b:85:40:47:36:9a:99:d1:8a:da:4c:
e9:66:c9:56:ca:c2:ce:6d:e7:0d:f5:a2:d0:ec:34:b6:c6:41:
db:a2:4b:6f:c4:ba:b3:84:d7:82:4e:16:6c:1a:fe:fd:72:43:
a6:5b:d8:a8:2c:1d:65:d6:7a:57:fb:2c:f1:45:64:f1:55:3a:
c7:11:77:84:91:e2:7b:df:53:af:30:87:05:a3:09:b5:cc:87:
e3:2b:a6:29:9b:2f:49:4f:6b:b6:9b:69:e1:2b:c8:e1:2e:d1:
ea:68:8a:bf:2d:27:5e:ef:8a:44:99:33:87:c6:d9:54:d9:62:
4b:f2:ed:6a:bb:34:f6:44:7f:36:db:c6:92:2b:e6:30:ab:72:
ab:7e:7d:76:77:a6:21:f9:67:2a:c6:b7:53:2d:ea:87:58:e4:
78:bd:1d:8f:de:f8:ac:bd:91:5a:c1:fa:09:5b:bb:94:56:52:
c1:e6:53:60:21:1b:76:ab:8d:1f:65:8c:3d:b6:ca:70:18:90:
2d:01:4e:0e:a0:d7:ce:f8:b8:65:bc:6d:ef:55:5a:1e:bb:17:
71:5d:e8:4b:50:6a:72:a6:86:22:10:5a:e9:a7:10:27:45:1c:
ce:38:90:36:be:32:27:6b:42:b7:ee:f4:7e:43:74:2c:62:f8:
27:6b:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:09:06 2026 by rpki-client