Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: IqdNAjJrHH5NwxbOvXM3qzrd5J7BYEgVpXELWKDH1FA=
Subject key identifier: DA:D2:F7:AF:F7:35:E1:12:D7:7F:44:AD:8B:20:C0:C7:6F:A7:CD:B7
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019CC863D14CC5E776F890A5AF75ABA0594D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 06FA
Signing time: Sat 07 Mar 2026 13:01:50 +0000
Manifest this update: Sat 07 Mar 2026 13:01:50 +0000
Manifest next update: Sun 08 Mar 2026 13:01:50 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: 0JGK1g2KHbxfTLEMdDdAP0/Ur+vD5LhqYDU8l9yj2r8=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:63:d1:4c:c5:e7:76:f8:90:a5:af:75:ab:a0:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Mar 7 13:01:50 2026 GMT
Not After : Mar 8 13:01:50 2026 GMT
Subject: CN=dad2f7aff735e112d77f44ad8b20c0c76fa7cdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:ff:3f:6c:ec:a9:61:02:3d:85:9e:5d:ad:
76:2b:c3:3a:61:e5:86:aa:e1:79:05:44:ed:1d:a5:
99:32:61:97:d6:bb:0d:0e:e1:d5:4f:a2:8b:ba:ae:
4d:86:e3:56:db:1e:5b:c2:cd:cc:03:f6:03:37:37:
f8:67:d8:cb:05:9c:0a:9c:1f:ec:8b:0f:d7:e8:6a:
b1:2b:8d:6f:14:7e:1f:9a:a7:a4:2e:a9:5d:7c:c4:
8f:83:ed:e3:82:35:12:af:0e:b4:9f:0d:dd:ee:d7:
79:95:dc:a4:5a:6e:10:a0:98:da:31:1a:7a:e6:fd:
ea:49:45:ab:78:6a:80:29:8c:dc:d0:c9:f9:36:34:
bc:6a:2b:13:21:8e:f1:08:fd:5d:38:56:f8:81:4a:
14:f2:31:5e:9c:64:ab:67:b2:34:dc:0d:51:1b:f3:
07:13:61:67:95:73:07:b7:f8:95:06:87:88:c1:df:
e2:c0:c6:2e:d0:df:b7:4e:20:f0:da:05:4c:d0:84:
da:5d:c2:64:16:22:30:e8:fa:7e:84:e4:9f:d9:b3:
74:f3:a4:35:7b:3c:17:1c:a6:50:7d:bb:ab:f6:07:
fb:67:4e:82:f5:49:10:b6:c2:c2:94:fb:e8:2d:4c:
4a:79:dc:b8:df:6a:24:5c:5c:bb:ad:94:ad:29:e9:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:F7:AF:F7:35:E1:12:D7:7F:44:AD:8B:20:C0:C7:6F:A7:CD:B7
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:50:57:a3:d9:be:5e:f3:bb:48:52:20:0f:68:25:b2:9b:9a:
72:3f:f6:aa:2e:fa:1b:91:b7:5b:ba:bb:66:f8:08:67:ba:ac:
5c:59:3c:df:50:e7:7e:af:27:a8:a9:de:d3:7e:c9:06:35:cd:
e5:c4:f6:02:7f:69:80:08:c2:5c:9c:63:0b:a6:a7:b7:44:68:
c3:68:01:97:30:96:2e:ce:6d:a8:8d:84:11:84:34:3c:f9:f1:
ac:61:d3:e1:65:89:47:8d:48:c8:c2:db:fc:00:d4:6c:27:ee:
7e:0f:48:e5:63:bd:74:a6:b5:f0:bf:a5:95:60:5e:fa:62:16:
ab:85:3f:bb:19:39:15:28:bc:39:54:a0:f9:17:6c:e1:97:56:
7a:b0:65:43:e3:83:86:5b:cf:cd:b7:44:7b:70:b2:ee:01:68:
cd:6d:63:e0:26:41:d8:0e:d0:d0:49:a5:f4:da:0c:16:d0:bc:
d3:68:84:a4:85:37:7a:7f:f8:11:96:51:5f:a7:15:e1:0b:e0:
dd:f8:02:f2:45:cc:22:1c:f9:7c:f1:21:d9:1a:b5:40:1f:17:
56:1a:d1:f6:2c:50:e5:0b:d6:96:b3:9f:d2:1a:99:e5:c1:19:
dd:d4:1b:67:ab:ea:1c:3f:28:cc:09:ac:a9:01:2d:40:f9:49:
b8:60:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:50:52 2026 by rpki-client