Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier: TKThb2S4iYdirTqL+EifHpG8x78xXXyqHSRCqMm+Afw=
Subject key identifier: 68:E9:DB:FF:D5:A8:7B:05:55:7A:17:99:F9:4B:25:60:40:A0:80:65
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 019F90235FE7CA72DA7B77ABDAE870D28B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number: 120B
Signing time: Thu 23 Jul 2026 18:01:05 +0000
Manifest this update: Thu 23 Jul 2026 18:01:05 +0000
Manifest next update: Fri 24 Jul 2026 18:01:05 +0000
Files and hashes: 1: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
2: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
3: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
4: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
5: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: AU68GkwTgbSbiP02Rv4EoBaAz7uK7KU8HzFmFdR3atE=)
6: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
7: oGf_1Gi6p9BnTcB2h845ELw18yE.roa (hash: vZEx0hhPga5gHLIccOXjBsLg2I31ryX+jChcgCG39FM=)
8: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:5f:e7:ca:72:da:7b:77:ab:da:e8:70:d2:8b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jul 23 18:01:05 2026 GMT
Not After : Jul 24 18:01:05 2026 GMT
Subject: CN=68e9dbffd5a87b05557a1799f94b256040a08065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:38:52:e1:4d:4f:33:0c:8a:6c:8f:38:a4:
2a:8b:cf:36:47:fa:0b:b5:5a:51:c1:59:42:b2:86:
30:cf:49:5c:f2:87:d5:3e:3a:36:36:80:22:b5:53:
b2:ec:1c:52:69:4e:6b:8d:50:06:76:f8:f0:7b:4f:
65:a2:58:3c:d7:f1:57:fc:df:eb:10:d7:2b:bf:c8:
c3:76:1c:19:72:63:35:59:dd:03:ea:e3:99:73:6e:
c3:19:62:56:b0:74:ee:6e:27:46:55:a9:6a:54:dc:
ea:fe:d7:9f:89:1f:29:3f:88:3d:28:62:32:47:c3:
1a:b3:78:85:2c:bc:9b:0f:82:a0:65:42:f2:44:46:
da:a1:f3:90:f0:a9:de:62:79:8a:7c:34:94:5e:6f:
1d:2c:31:a4:76:38:81:f4:f6:6c:db:b4:0d:f1:9e:
7d:f3:1b:f7:f4:c1:91:3c:c0:8c:a3:52:0e:5a:22:
e7:d4:91:89:41:ad:4e:41:18:ca:27:8a:c2:75:ad:
16:05:0d:5d:d3:a7:cf:21:fd:22:28:07:52:54:e8:
c3:47:7c:2f:1c:46:14:f6:cb:1a:49:c3:67:3b:cd:
be:3f:a8:bc:c2:6d:45:b0:3f:66:26:06:c5:ae:38:
4f:e8:8d:4c:de:8a:39:17:6c:11:1f:b6:ce:c7:ad:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:DB:FF:D5:A8:7B:05:55:7A:17:99:F9:4B:25:60:40:A0:80:65
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:10:a6:30:f3:da:0b:5d:d2:64:0d:dd:d9:f1:d3:ab:9c:
d4:9a:81:f7:97:d9:b3:88:57:1b:b1:af:60:23:b0:7d:3c:74:
a4:09:f6:85:e0:62:49:34:c2:5e:82:d7:7b:e3:50:fc:40:e1:
fb:69:5d:22:63:ff:7d:0a:a1:ad:52:12:7f:47:fe:d2:9a:69:
43:93:b6:b5:c4:6d:64:b8:7b:a1:84:c7:7d:a0:75:34:80:f4:
5b:50:9e:4a:03:de:90:bc:c3:b1:8f:25:af:e5:66:d0:5a:36:
1e:f8:e7:60:50:9c:b2:31:f3:7c:4b:e8:88:88:22:e5:e2:23:
3f:17:46:1b:51:42:1c:46:09:e3:96:c0:a2:0f:53:a3:21:0e:
90:00:05:5e:62:51:ca:c3:a7:7c:81:3b:d4:db:67:77:56:91:
8f:62:60:f2:27:86:ff:2b:0e:54:d0:12:be:d2:c3:5c:f5:0f:
f3:f7:1f:14:7f:98:12:82:a2:1c:9d:31:c7:23:eb:22:f8:b5:
ff:38:25:2b:c7:3a:e3:be:0d:81:3f:12:7d:b1:29:df:04:b1:
c5:be:fc:45:9e:9c:8e:d0:16:18:72:7b:0b:e0:42:f8:80:52:
35:32:97:c5:f8:79:30:97:8b:f3:19:44:e5:9b:ad:45:8d:4a:
a4:6c:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:46 2026 by rpki-client