Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: 7CKVOLe1V1l+RFqQ2rE3Rsk2rnZWx+mfmGFyulH6ad0=
Subject key identifier: FC:31:F6:76:C9:C9:12:F2:C1:39:5B:F9:13:AA:E7:19:1E:CE:C7:E9
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 01A0D5706F53B06BEFD553E9D41333BB0984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0913
Signing time: Thu 24 Sep 2026 22:01:50 +0000
Manifest this update: Thu 24 Sep 2026 22:01:50 +0000
Manifest next update: Fri 25 Sep 2026 22:01:50 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: FDCOCbLQyNMHAsho4fmS5zoNEmIIdxzcctWDb/35WA8=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:6f:53:b0:6b:ef:d5:53:e9:d4:13:33:bb:09:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Sep 24 22:01:50 2026 GMT
Not After : Sep 25 22:01:50 2026 GMT
Subject: CN=fc31f676c9c912f2c1395bf913aae7191ecec7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:6c:db:bb:35:b6:f3:62:05:4c:c1:97:d0:
e6:59:6f:39:53:6d:96:3d:a4:de:dd:f3:55:c7:8e:
cc:bf:58:1c:e3:40:e2:11:fd:cc:cd:02:f6:71:6f:
e4:9a:24:dd:48:a3:50:f7:1a:2e:bd:e2:f8:ab:be:
05:5e:4b:59:2e:45:c1:51:72:41:ff:61:8e:4f:47:
ab:39:64:d5:bb:4e:c5:9c:09:a7:4a:d6:ce:ec:41:
61:e8:62:3c:9d:32:22:9b:10:9b:1b:d4:16:4a:9f:
b4:3c:b4:69:94:7b:a4:50:5b:88:b3:ec:19:5c:8d:
5c:af:55:f1:0d:a1:96:49:05:5e:ac:1d:31:f4:f6:
0b:54:97:51:c7:ac:28:56:3e:cd:e6:7e:a8:c9:91:
1c:5c:6a:7b:cf:20:94:d0:81:e5:dc:74:41:26:01:
9f:6a:f0:6a:be:2a:45:bb:2a:23:c7:4a:c0:c9:8e:
67:94:ef:2a:52:49:5b:cd:d9:9f:86:94:cc:46:b7:
b5:4b:84:1a:ab:c6:43:31:24:3e:c3:2a:e5:8f:7e:
5f:a9:49:80:34:33:ac:a4:d4:0d:cb:64:11:fb:3e:
9b:6d:4d:ee:97:43:7f:48:ff:12:42:f0:d6:7d:9a:
36:99:66:d4:6b:6f:25:89:0f:66:3f:64:1c:6f:f0:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:F6:76:C9:C9:12:F2:C1:39:5B:F9:13:AA:E7:19:1E:CE:C7:E9
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:be:9f:ab:da:c4:ed:c8:f4:e4:d8:b8:98:4e:18:fe:67:e2:
18:06:b6:03:9d:c3:ba:5d:ab:91:03:e4:b2:68:2a:dc:cd:e8:
aa:25:c5:49:f7:74:4f:50:47:33:c6:1d:85:60:db:3f:a1:89:
42:8c:18:9e:1b:b7:5e:bc:e1:64:f6:5b:08:b7:d4:e4:3d:79:
c8:c1:e7:97:e4:ea:14:4c:0a:23:6c:bd:53:38:eb:30:b7:15:
1b:e4:6a:92:4b:2d:cc:9f:fd:8f:7b:7c:bb:48:c8:8e:4b:ac:
78:72:6f:ae:82:ac:31:b8:da:82:d2:5d:19:78:89:50:bc:5b:
31:8d:96:45:12:b2:a4:95:1d:f3:75:1b:bc:4d:3b:d8:4d:57:
a1:d6:af:f0:79:a2:fd:e1:f2:69:b7:6a:c5:0a:1f:96:36:52:
fe:92:d7:df:3f:d9:db:81:80:92:b8:ac:3d:27:b0:da:82:67:
0d:59:5a:9f:fb:1e:ad:07:a5:f8:e2:8b:fc:33:be:bc:84:f9:
2b:32:17:a3:9b:08:7f:0e:1a:b2:e6:34:34:e1:b2:9d:44:3c:
2f:6c:9d:81:a9:19:f0:ba:ee:8b:b1:3c:29:a7:a5:bf:42:3f:
e0:cd:12:74:4c:fd:28:2c:bc:0f:9d:9a:9c:b6:1c:a8:93:74:
9e:fb:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:08:57 2026 by rpki-client