
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: tiO9MFSNV4P8Pvl3alzREdIwUyCm/gcVz1Q6zF7wlsg=
Subject key identifier: 77:71:BA:8B:56:D9:F6:61:F8:91:49:92:F8:30:04:EC:43:A7:2F:B1
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 01A13E26B4D645F50B71A3DFC104FE8A994B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0866
Signing time: Thu 15 Oct 2026 06:01:26 +0000
Manifest this update: Thu 15 Oct 2026 06:01:26 +0000
Manifest next update: Fri 16 Oct 2026 06:01:26 +0000
Files and hashes: 1: AN7d4TXrtt5_te4VnJ6dVmu47oE.roa (hash: j0ueVlAIinrIC36bzKoLDFrIbGMkcFuqoDWXY+F2+w8=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: 4mm7PQ7rzkjfQnz0MH1py4w14P5WrLlxYRVRMsoCOXM=)
3: LaBbMvd3OwQhNnrUizZKTdnekiQ.roa (hash: gyzOiFVxonnT2AmLy7+95jCrZWSk+rERZGHB5wVY/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:b4:d6:45:f5:0b:71:a3:df:c1:04:fe:8a:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Oct 15 06:01:26 2026 GMT
Not After : Oct 16 06:01:26 2026 GMT
Subject: CN=7771ba8b56d9f661f8914992f83004ec43a72fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:df:d4:63:a7:18:7e:56:ea:c3:58:b4:11:
bb:aa:3c:9c:38:c9:69:0f:0d:60:23:bb:ed:35:84:
a2:c0:41:9d:14:a6:76:3d:cf:0f:b1:94:33:03:98:
cd:a7:67:2e:7f:8e:d6:cf:6e:ad:7b:80:b2:38:2a:
c0:d1:e0:ca:95:cd:ca:e7:35:c1:de:0a:30:a6:91:
77:f4:2d:ce:83:a7:6b:c3:a6:82:f9:10:7d:e1:02:
15:d2:c3:fb:c2:72:78:88:90:d4:f2:cf:bc:e7:6b:
0b:57:9a:8a:c3:c5:85:7f:b2:ce:8b:c0:98:a0:48:
0a:69:b1:cf:90:2e:f9:d2:bb:dc:d9:9e:a0:32:54:
24:a8:54:5a:ba:b1:b8:07:f6:8d:36:9c:6c:fd:15:
ad:27:04:ac:21:96:b7:e9:52:82:db:60:56:80:e6:
94:87:60:57:e1:d0:69:6c:f8:98:0f:7e:3e:f3:aa:
11:ae:9f:e7:4d:62:2b:5d:df:f2:f4:13:ad:60:77:
8e:f6:3a:be:ea:8d:ff:ce:0c:a7:95:7e:93:1a:e8:
6a:69:b8:20:10:02:a1:34:1c:d5:ad:fc:59:05:ca:
1e:89:05:c3:2b:a0:f5:3d:93:f9:e1:48:25:c2:8b:
bc:4e:4a:78:48:4d:d1:ed:1d:54:64:6c:5f:58:93:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:71:BA:8B:56:D9:F6:61:F8:91:49:92:F8:30:04:EC:43:A7:2F:B1
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6c:8c:02:d5:ed:c3:3a:45:8f:31:2c:1d:70:d0:4a:66:1b:
a6:f0:75:2f:3c:e4:76:a0:0f:44:97:04:95:6f:10:49:cd:7c:
a6:30:15:55:1f:3e:d8:ba:7e:bb:03:d2:42:4d:b4:a0:31:98:
5b:4b:5c:fa:b4:25:07:78:d7:db:82:18:2b:5e:70:9c:2f:95:
a3:36:30:2f:21:71:e2:9f:08:52:20:8f:ae:df:11:71:21:a9:
30:10:59:c8:6f:76:c0:a0:b9:24:02:48:de:f3:6d:e5:e8:33:
4a:d2:9d:ee:e4:60:54:40:f4:9a:d3:b9:d1:fc:5d:d3:43:7e:
d3:f4:4e:8b:e8:a6:39:f1:09:67:0a:09:b3:6a:bd:bc:b8:60:
6e:bf:09:8d:6e:02:c7:44:a1:b6:d1:11:85:fd:39:28:76:95:
83:6c:69:4c:47:5d:c9:d8:95:8a:ff:dc:75:80:21:0c:f2:f4:
52:93:1e:04:84:a1:f9:f9:56:b4:7b:96:82:1e:f4:80:39:e7:
d6:54:14:71:14:f7:c9:ce:3e:b0:78:97:2a:cd:76:d4:6b:d4:
0c:65:a2:e6:55:39:9c:f1:7d:f2:6a:ed:92:25:fd:6d:13:7d:
79:c7:64:c3:94:21:e9:78:82:bf:3a:e7:d9:6e:2f:93:56:93:
08:6a:6b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JrTWRfULcaPfwQT+iplLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm
NTQ3YTIwHhcNMjYxMDE1MDYwMTI2WhcNMjYxMDE2MDYwMTI2WjAzMTEwLwYDVQQD
Eyg3NzcxYmE4YjU2ZDlmNjYxZjg5MTQ5OTJmODMwMDRlYzQzYTcyZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM/f1GOnGH5W6sNYtBG7qjycOMlp
Dw1gI7vtNYSiwEGdFKZ2Pc8PsZQzA5jNp2cuf47Wz26te4CyOCrA0eDKlc3K5zXB
3gowppF39C3Og6drw6aC+RB94QIV0sP7wnJ4iJDU8s+852sLV5qKw8WFf7LOi8CY
oEgKabHPkC750rvc2Z6gMlQkqFRaurG4B/aNNpxs/RWtJwSsIZa36VKC22BWgOaU
h2BX4dBpbPiYD34+86oRrp/nTWIrXd/y9BOtYHeO9jq+6o3/zgynlX6TGuhqabgg
EAKhNBzVrfxZBcoeiQXDK6D1PZP54Uglwou8Tkp4SE3R7R1UZGxfWJNrlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdxuotW2fZh+JFJkvgwBOxDpy+xMB8GA1UdIwQY
MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt
MTg4MGU3ZWYxZGI0LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0
LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2yMAtXt
wzpFjzEsHXDQSmYbpvB1LzzkdqAPRJcElW8QSc18pjAVVR8+2Lp+uwPSQk20oDGY
W0tc+rQlB3jX24IYK15wnC+VozYwLyFx4p8IUiCPrt8RcSGpMBBZyG92wKC5JAJI
3vNt5egzStKd7uRgVED0mtO50fxd00N+0/ROi+imOfEJZwoJs2q9vLhgbr8JjW4C
x0ShttERhf05KHaVg2xpTEddydiViv/cdYAhDPL0UpMeBISh+flWtHuWgh70gDnn
1lQUcRT3yc4+sHiXKs121GvUDGWi5lU5nPF98mrtkiX9bRN9ecdkw5Qh6XiCvzrn
2W4vk1aTCGprPQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:11 2026 by rpki-client