Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier: Au1InYDPWD1K5VqSoet/hKcU1ES+cpkCHyq2sL621kc=
Subject key identifier: 02:77:73:EF:10:AC:98:05:A3:4B:3E:E6:18:89:1F:D7:17:DE:70:D8
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 01A0E02ACB22D7099F857540CA030269F47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number: 12B9
Signing time: Sun 27 Sep 2026 00:01:35 +0000
Manifest this update: Sun 27 Sep 2026 00:01:35 +0000
Manifest next update: Mon 28 Sep 2026 00:01:35 +0000
Files and hashes: 1: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
2: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
3: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
4: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
5: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: l7CNTHPXlRUvGKdFwM0IA0CihLRNhG5SQDmWQj/PA5Y=)
6: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
7: oGf_1Gi6p9BnTcB2h845ELw18yE.roa (hash: vZEx0hhPga5gHLIccOXjBsLg2I31ryX+jChcgCG39FM=)
8: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:cb:22:d7:09:9f:85:75:40:ca:03:02:69:f4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Sep 27 00:01:35 2026 GMT
Not After : Sep 28 00:01:35 2026 GMT
Subject: CN=027773ef10ac9805a34b3ee618891fd717de70d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:8a:2a:d6:20:16:b3:f7:c2:a7:93:eb:86:
02:eb:db:a1:49:c1:8a:37:19:f8:27:08:aa:fa:58:
79:6f:d9:5e:f0:d5:dd:e7:91:e7:06:69:4c:29:9d:
22:26:b5:ef:ee:56:51:9a:59:ea:1c:13:14:9e:42:
91:ed:1a:5d:1c:82:88:1b:1d:d4:08:0f:37:f0:b0:
9d:99:f7:10:10:26:df:88:8f:f2:e0:e2:d5:5e:4b:
c6:d0:a0:a7:bc:32:90:c1:40:93:91:d4:6b:38:32:
01:c3:f5:08:a4:00:a3:08:6b:6a:bf:aa:a0:62:79:
82:4b:17:9c:55:ad:9a:14:31:5b:c9:66:8f:66:9c:
6a:7e:c1:36:0d:25:56:3d:67:a2:67:d2:a9:f2:0a:
17:05:26:18:49:55:e6:8a:05:81:7a:ee:60:e0:61:
ec:2d:61:36:22:62:a3:fb:42:47:39:7a:fb:03:55:
8a:99:78:51:d3:7e:c4:87:5a:66:fb:a8:94:89:45:
ce:0a:46:9f:1a:1e:19:d2:24:43:41:b5:63:63:44:
7d:af:fb:94:ee:a0:ad:c9:80:79:19:63:0d:06:49:
44:b7:86:23:8b:26:12:63:2c:a8:c7:a7:c3:8a:73:
78:7f:20:68:61:bb:2f:e1:0b:d5:9a:04:d4:32:f9:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:77:73:EF:10:AC:98:05:A3:4B:3E:E6:18:89:1F:D7:17:DE:70:D8
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c5:29:a0:64:98:ce:53:db:00:ac:05:07:50:1c:a4:6d:a0:
fd:f2:dd:33:81:23:5a:86:84:bb:13:7e:8e:63:75:c8:81:03:
4b:68:c5:00:3a:a5:c8:80:d1:c3:13:e0:6b:78:6b:af:b8:51:
e1:f5:f7:7c:b6:67:f1:a7:1d:00:1d:13:ea:21:e3:dc:9f:fc:
b8:3a:89:3d:f5:f3:83:09:92:6a:91:79:f1:e6:ff:5b:62:59:
35:a0:92:1a:7b:03:fd:93:35:05:9a:83:d4:33:14:41:40:3a:
00:72:6c:27:93:fe:c9:3d:5c:a5:11:58:e8:c5:1c:fa:d8:3a:
0a:52:6e:f9:81:c2:1e:be:42:95:2c:b9:fe:55:5e:90:ba:8a:
74:fd:13:dc:89:7e:fc:83:53:e8:ef:ea:1a:72:99:6d:60:53:
fc:bc:04:75:89:2b:43:d4:27:f5:fd:51:86:b4:fa:c8:d0:34:
56:c5:89:49:8c:6a:9a:f3:d3:ab:69:e5:60:b3:c2:34:9d:7b:
d7:c2:9a:b0:5d:7e:34:05:be:27:cd:a7:7d:a8:e0:0a:e2:c4:
c4:4c:1a:c2:f6:54:db:c1:0d:b0:79:f3:bd:80:33:86:73:7d:
69:b7:25:9c:1c:80:1f:3e:f7:dd:b5:3e:a0:88:3a:a9:32:51:
21:31:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:34:14 2026 by rpki-client