Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: a2BinGXNYcSC5wRhhDcEZj4CRRS+vU9ZfX0H2E9bWFo=
Subject key identifier: 59:36:EC:7F:0A:76:71:B9:F6:08:EA:2E:B6:1D:91:24:88:DB:7A:26
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019F8F10F3F942C34BA5D5551F9CA52F6B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 086A
Signing time: Thu 23 Jul 2026 13:01:20 +0000
Manifest this update: Thu 23 Jul 2026 13:01:20 +0000
Manifest next update: Fri 24 Jul 2026 13:01:20 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: WoBKNC0BqU771u6HxH1/yJGKgYrZFrXso1BNJiPGrJI=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:f3:f9:42:c3:4b:a5:d5:55:1f:9c:a5:2f:6b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jul 23 13:01:20 2026 GMT
Not After : Jul 24 13:01:20 2026 GMT
Subject: CN=5936ec7f0a7671b9f608ea2eb61d912488db7a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:0a:7e:59:a8:ff:f3:48:29:c8:a7:0f:1e:
03:33:1a:19:f9:c2:ec:aa:bc:3a:b2:d4:ce:f1:8b:
b9:4c:cd:05:43:9b:9a:9e:4b:58:bf:55:31:24:65:
a4:08:40:34:21:df:2e:79:29:6a:0d:5e:4a:02:37:
42:15:5a:c7:e9:dd:cb:aa:6c:54:d3:33:e6:35:ef:
4e:84:42:9b:44:b9:0c:1b:a3:39:05:5e:17:ab:18:
49:ed:6c:2e:39:74:2f:96:8a:0d:1e:a4:4a:39:e9:
9e:3d:df:53:d8:3c:4d:2d:56:f6:31:8a:64:5f:ad:
28:c7:cf:94:a6:34:8d:f1:1b:db:44:b2:73:33:e9:
24:00:f0:2e:38:fe:3a:3e:29:06:71:b2:70:eb:aa:
ba:a0:9f:ca:f1:f4:c0:dc:ce:e7:6c:c7:48:40:89:
70:8e:fa:2a:9d:8c:0a:f3:b6:39:a3:fb:4b:39:f0:
43:fc:a5:0e:99:7c:46:3d:24:b5:e4:6b:bb:41:e7:
97:93:dc:98:67:84:0e:b6:11:9a:72:dc:87:dd:66:
17:23:08:05:65:40:89:46:00:37:34:dd:eb:47:b1:
8c:10:5f:61:b0:68:70:a5:3a:4a:20:f2:55:2e:a7:
6c:d1:2e:2e:3f:f1:ac:f8:d4:96:8a:cc:a2:00:8b:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:EC:7F:0A:76:71:B9:F6:08:EA:2E:B6:1D:91:24:88:DB:7A:26
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:28:46:cb:1e:5b:21:af:39:de:f0:a8:c1:47:28:87:91:
ac:44:75:20:66:ca:1f:ab:cc:5a:99:85:d2:8d:b0:aa:cf:b7:
12:f7:7e:98:b1:62:da:01:32:cd:ec:bf:20:66:11:f5:8c:78:
c3:88:aa:82:f5:95:fa:25:50:b3:7a:3f:4e:d0:f4:bf:dd:36:
00:86:f6:36:48:34:ad:46:7c:52:84:7f:4c:c2:23:16:89:a6:
77:4c:5b:1a:fb:88:9a:36:76:93:58:c0:06:8f:31:44:04:af:
50:25:20:30:e9:82:f6:7b:e2:42:9f:f3:44:d4:ba:df:16:94:
e3:fa:ca:fd:c3:57:6f:af:2f:bb:d8:06:1a:a8:f5:12:8a:13:
4c:f4:11:b4:8e:04:a4:d3:9a:3a:a9:4b:37:87:9f:c2:63:95:
3b:f2:49:c4:cf:20:f3:14:40:17:6a:9c:53:5c:1c:8d:7f:64:
d8:1e:d7:a8:e4:72:84:61:1c:38:f7:bc:5b:90:1d:d6:e7:47:
ad:a4:3c:ab:ba:2a:f6:dd:a6:ae:ec:3e:fd:e6:eb:f1:11:92:
a7:51:11:4d:4b:06:15:f4:f7:1b:a6:04:3e:9b:48:69:8c:a7:
19:a8:7a:d0:26:bc:d2:3c:ec:5e:c9:88:21:33:4f:25:b8:d4:
96:4c:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:14:12 2026 by rpki-client