Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: JmcC9J40AbL/eqrNhn9s4RtIXHc38dvhKFADOTMDd1c=
Subject key identifier: 4A:2B:0E:48:E3:1E:BE:15:9E:B8:CB:70:12:B8:ED:E0:EA:B3:6A:B0
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019E9BBBECDA1CE280A61D3440DB6EB0F3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 07EC
Signing time: Sat 06 Jun 2026 07:00:44 +0000
Manifest this update: Sat 06 Jun 2026 07:00:44 +0000
Manifest next update: Sun 07 Jun 2026 07:00:44 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: QHu4ivru8JWccjkGtsc93XxS07IrRCgXE9fGpuO6OL4=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bb:ec:da:1c:e2:80:a6:1d:34:40:db:6e:b0:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jun 6 07:00:44 2026 GMT
Not After : Jun 7 07:00:44 2026 GMT
Subject: CN=4a2b0e48e31ebe159eb8cb7012b8ede0eab36ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:22:3b:d1:ee:00:c1:d3:38:e2:cc:05:0f:
48:51:24:9c:8b:e6:e3:f2:a9:ea:a3:e4:d8:6d:dc:
60:9e:fa:5c:9b:ff:ab:36:66:6f:4d:da:1d:f4:81:
f8:4e:0c:15:1f:c2:18:da:c0:13:66:08:61:62:34:
e0:4f:84:b0:4b:df:7e:47:f5:4c:e7:cc:15:24:ed:
67:13:f7:27:f1:8b:35:64:4b:83:95:fa:07:a1:47:
52:9f:f8:af:15:12:ed:aa:50:09:a5:99:2a:cf:b9:
d9:7d:6d:bd:36:56:11:17:34:b6:c0:a0:12:7d:5c:
ef:44:01:25:54:e3:91:1c:68:e8:e7:0a:8b:a8:ab:
e5:67:6e:04:37:c4:11:84:d5:ce:ce:23:69:bf:62:
90:3d:06:07:f7:a3:83:0b:29:3c:a4:e3:af:1d:81:
10:19:b6:76:5e:be:4b:0e:17:1b:52:81:b5:0b:79:
10:f4:4b:a5:15:df:44:af:60:b4:ee:64:e9:0f:49:
f2:e2:dd:1e:af:b4:c8:7b:8e:3f:e4:c8:51:c9:ac:
f9:8a:2c:c0:2f:d8:7e:bf:0b:0b:ba:30:ff:4c:bb:
49:c4:0e:8a:1f:5a:17:90:87:3e:9c:ed:ca:79:f5:
d5:b0:e1:30:71:f5:d2:7d:d0:7d:db:88:29:a4:54:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:0E:48:E3:1E:BE:15:9E:B8:CB:70:12:B8:ED:E0:EA:B3:6A:B0
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:6e:d8:9f:2d:bf:dc:c1:4c:79:5a:b3:7a:f5:cc:74:50:
a5:d6:6d:70:c0:55:40:cc:85:0f:74:cd:5f:ac:c3:d6:04:a3:
03:71:c2:27:0c:dd:25:8b:e3:ec:cf:e1:4d:84:9e:83:72:b3:
fa:ee:95:bb:62:b3:f1:06:37:ea:a5:53:cd:03:3b:ce:df:ac:
ed:bf:ad:a7:4e:4c:02:5a:aa:72:4d:fe:a2:d4:67:60:fc:74:
73:ab:c3:da:f9:44:86:ad:73:99:5d:14:39:6b:e9:16:81:77:
fc:bb:89:ad:bd:20:a3:db:ea:e1:93:7c:fa:90:a4:eb:95:2a:
f8:00:2e:5f:98:c7:ff:5b:5b:44:ae:4c:0f:5b:27:a8:b4:4c:
64:c1:f7:ec:e3:48:1f:2e:75:49:23:c2:1f:df:4c:d9:84:9e:
90:99:05:df:57:de:8c:6e:14:fe:7a:3d:2c:30:40:2d:3c:d9:
81:28:8c:7e:d9:57:d7:ce:51:51:d5:89:d5:02:67:88:e6:da:
51:88:e0:d1:61:2f:c8:9e:a0:32:56:93:3f:40:d7:f3:5c:83:
f7:24:78:46:39:83:a8:ad:e5:c0:cc:3c:4b:8e:b9:38:c8:71:
20:be:43:37:93:06:2e:64:a1:15:1b:be:2d:75:29:56:e4:a0:
5f:4b:ce:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bu+zaHOKAph00QNtusPPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm
NWNlNTEwHhcNMjYwNjA2MDcwMDQ0WhcNMjYwNjA3MDcwMDQ0WjAzMTEwLwYDVQQD
Eyg0YTJiMGU0OGUzMWViZTE1OWViOGNiNzAxMmI4ZWRlMGVhYjM2YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9UiO9HuAMHTOOLMBQ9IUSSci+bj
8qnqo+TYbdxgnvpcm/+rNmZvTdod9IH4TgwVH8IY2sATZghhYjTgT4SwS99+R/VM
58wVJO1nE/cn8Ys1ZEuDlfoHoUdSn/ivFRLtqlAJpZkqz7nZfW29NlYRFzS2wKAS
fVzvRAElVOORHGjo5wqLqKvlZ24EN8QRhNXOziNpv2KQPQYH96ODCyk8pOOvHYEQ
GbZ2Xr5LDhcbUoG1C3kQ9EulFd9Er2C07mTpD0ny4t0er7TIe44/5MhRyaz5iizA
L9h+vwsLujD/TLtJxA6KH1oXkIc+nO3KefXVsOEwcfXSfdB924gppFTQxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEorDkjjHr4VnrjLcBK47eDqs2qwMB8GA1UdIwQY
MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt
NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm
LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7du2J8t
v9zBTHlas3r1zHRQpdZtcMBVQMyFD3TNX6zD1gSjA3HCJwzdJYvj7M/hTYSeg3Kz
+u6Vu2Kz8QY36qVTzQM7zt+s7b+tp05MAlqqck3+otRnYPx0c6vD2vlEhq1zmV0U
OWvpFoF3/LuJrb0go9vq4ZN8+pCk65Uq+AAuX5jH/1tbRK5MD1snqLRMZMH37ONI
Hy51SSPCH99M2YSekJkF31fejG4U/no9LDBALTzZgSiMftlX185RUdWJ1QJniOba
UYjg0WEvyJ6gMlaTP0DX81yD9yR4RjmDqK3lwMw8S465OMhxIL5DN5MGLmShFRu+
LXUpVuSgX0vOig==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:49 2026 by rpki-client