Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: xMnJwPcWNbhGoGf1EnrIGhjmO56mRPOCbqfoUmuy8j4=
Subject key identifier: 34:F5:29:4A:CF:3D:0B:C1:2F:5A:52:96:51:1D:23:C5:8C:99:2A:52
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019D270499E1244590EAE18CC4982DF448D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 072B
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: SCYK0pNWiFYVfM3pmr1AjvUptsJTb8qpack03EXpfM4=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:99:e1:24:45:90:ea:e1:8c:c4:98:2d:f4:48:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=34f5294acf3d0bc12f5a5296511d23c58c992a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:a8:dc:cb:5b:bd:02:cb:e3:c6:39:c9:d2:
54:ae:1b:49:f4:ba:a5:c4:24:c0:a5:f9:1c:29:d9:
ae:24:36:13:6c:f6:6f:7a:9e:b9:a7:b7:aa:43:87:
91:40:14:37:0f:4b:20:17:b2:86:61:f3:a9:b1:d1:
4e:54:3e:43:19:9a:da:7a:14:65:78:af:fb:f7:b2:
c2:19:ac:bc:dd:59:f8:14:8f:33:f0:6a:33:75:38:
e0:85:ed:9a:67:fd:d5:00:6f:8b:ca:da:ba:40:8d:
5d:bc:d9:1d:97:0d:9d:a0:b9:d1:b0:b5:c8:e4:16:
61:9c:62:94:e7:4d:42:9c:25:f9:10:0b:b7:0d:d1:
53:72:42:c0:d4:39:85:bb:6c:cb:59:8e:e0:9d:a0:
68:0e:25:9f:76:bd:ac:83:c3:8b:a7:33:b2:af:0b:
cd:9a:f7:78:71:3c:d6:e7:de:0b:81:4f:3a:55:b7:
14:ca:67:5c:4d:1b:94:d9:57:96:17:af:30:90:e1:
fa:48:1b:37:83:70:c1:2e:e5:70:1f:d3:8c:8e:98:
09:20:36:a6:a2:85:20:73:dc:53:24:1d:6d:08:33:
4e:71:78:95:f0:4a:21:db:c2:53:f7:f8:6a:c4:45:
94:0f:91:57:ec:6a:f6:75:41:d3:17:c6:c9:64:bc:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:29:4A:CF:3D:0B:C1:2F:5A:52:96:51:1D:23:C5:8C:99:2A:52
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:23:47:e2:96:93:5b:7b:9e:b3:fc:85:fe:aa:6a:10:ad:
aa:60:05:fa:9d:5f:da:ce:b5:93:d7:c9:24:31:3e:75:d7:03:
73:8a:a5:70:ce:54:06:5c:4d:7b:fb:e7:cf:71:04:c4:1b:fe:
0b:d9:ad:f5:f5:88:4e:20:b4:6e:11:f0:c8:59:38:3c:64:9c:
49:a7:06:e0:7f:bd:54:25:0c:6c:00:da:b8:8b:dc:7f:17:cb:
78:9f:89:8c:c9:58:91:f7:59:c7:31:51:95:7e:81:42:47:f2:
1f:d3:f5:33:a9:e0:61:c9:43:97:05:97:2c:75:c9:e0:24:69:
03:5e:f1:e3:41:8c:e1:0e:d1:d2:c9:3a:e5:49:f5:d2:eb:7b:
35:5a:11:5d:b8:0e:d3:2d:fb:a9:69:da:af:19:68:ad:12:52:
18:c9:33:c8:5d:ba:22:cb:07:28:81:74:9d:76:ae:57:74:f3:
5e:0a:af:84:d8:ca:95:3c:81:13:21:b0:cc:44:23:87:ef:84:
79:10:e1:2b:ef:38:53:01:8e:31:72:84:4b:ef:13:c3:ce:e2:
a8:a8:c5:10:dd:b3:80:cd:35:fe:7d:f0:9f:29:66:c1:de:17:
0b:0f:32:5d:75:58:8f:75:23:e4:63:cc:58:cb:90:d7:8e:65:
5e:14:8d:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJnhJEWQ6uGMxJgt9EjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm
NWNlNTEwHhcNMjYwMzI1MjIwMTQ2WhcNMjYwMzI2MjIwMTQ2WjAzMTEwLwYDVQQD
EygzNGY1Mjk0YWNmM2QwYmMxMmY1YTUyOTY1MTFkMjNjNThjOTkyYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2reo3MtbvQLL48Y5ydJUrhtJ9Lql
xCTApfkcKdmuJDYTbPZvep65p7eqQ4eRQBQ3D0sgF7KGYfOpsdFOVD5DGZraehRl
eK/797LCGay83Vn4FI8z8GozdTjghe2aZ/3VAG+Lytq6QI1dvNkdlw2doLnRsLXI
5BZhnGKU501CnCX5EAu3DdFTckLA1DmFu2zLWY7gnaBoDiWfdr2sg8OLpzOyrwvN
mvd4cTzW594LgU86VbcUymdcTRuU2VeWF68wkOH6SBs3g3DBLuVwH9OMjpgJIDam
ooUgc9xTJB1tCDNOcXiV8Eoh28JT9/hqxEWUD5FX7Gr2dUHTF8bJZLw0VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT1KUrPPQvBL1pSllEdI8WMmSpSMB8GA1UdIwQY
MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt
NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm
LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyMjR+KW
k1t7nrP8hf6qahCtqmAF+p1f2s61k9fJJDE+ddcDc4qlcM5UBlxNe/vnz3EExBv+
C9mt9fWITiC0bhHwyFk4PGScSacG4H+9VCUMbADauIvcfxfLeJ+JjMlYkfdZxzFR
lX6BQkfyH9P1M6ngYclDlwWXLHXJ4CRpA17x40GM4Q7R0sk65Un10ut7NVoRXbgO
0y37qWnarxlorRJSGMkzyF26IssHKIF0nXauV3TzXgqvhNjKlTyBEyGwzEQjh++E
eRDhK+84UwGOMXKES+8Tw87iqKjFEN2zgM01/n3wnylmwd4XCw8yXXVYj3Uj5GPM
WMuQ145lXhSNjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:18 2026 by rpki-client