Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: l/6RWlkmW+igGQsGs0+QGaGmXIga6WYzmT0VjjPc3jg=
Subject key identifier: 16:30:A3:4B:95:B9:76:E7:58:1F:9F:C6:01:63:66:C4:E8:9B:25:04
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019E1C46E7B4116CDEF01FA78738BAC4111A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 07AA
Signing time: Tue 12 May 2026 13:01:09 +0000
Manifest this update: Tue 12 May 2026 13:01:09 +0000
Manifest next update: Wed 13 May 2026 13:01:09 +0000
Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: 7ArpyBnToo0NAVWZnPx6BsYn/hHYSrZtKBokX/GOCHo=)
3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:e7:b4:11:6c:de:f0:1f:a7:87:38:ba:c4:11:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: May 12 13:01:09 2026 GMT
Not After : May 13 13:01:09 2026 GMT
Subject: CN=1630a34b95b976e7581f9fc6016366c4e89b2504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:ac:17:79:57:11:3e:c8:7b:1c:e6:16:92:
70:bd:d9:3d:58:bf:f1:7d:50:54:d0:cc:5d:a3:98:
61:f5:1b:ad:2d:bb:4d:78:26:66:d8:42:b2:23:8b:
c6:b2:23:d8:3e:73:0d:42:d3:e7:a3:3f:22:4b:f7:
26:31:61:95:4e:8d:91:0a:8f:4e:86:a3:64:48:1d:
26:45:36:7e:b9:a1:a1:15:35:0e:af:81:8b:c5:9d:
fe:a3:40:a4:d0:67:c4:24:14:d7:cd:b0:c7:28:04:
0e:1a:e4:53:e1:ee:75:a0:a6:45:4c:41:f3:ee:90:
70:e2:f6:8b:01:61:9c:a5:05:f2:1d:48:24:f5:80:
d0:d9:26:cb:3e:ce:16:e1:a7:00:9e:f4:4c:92:85:
5b:2a:a9:27:33:b2:70:ac:7b:4b:96:0c:e2:90:f3:
8d:f8:eb:74:eb:d2:34:85:75:1c:63:a7:8e:e8:b4:
3d:70:61:89:de:07:1e:6e:88:59:a5:5e:c4:10:96:
fb:64:33:d5:22:86:26:cc:75:94:11:5e:cb:36:38:
18:37:fb:6d:97:32:ba:6a:93:15:f3:4e:11:c3:33:
29:e5:ec:54:a7:a1:9b:71:f5:9f:34:27:4a:0b:40:
66:82:70:0a:96:69:3d:97:31:d9:8d:6d:dd:c2:64:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:30:A3:4B:95:B9:76:E7:58:1F:9F:C6:01:63:66:C4:E8:9B:25:04
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:91:6e:73:48:61:37:f5:23:12:cd:37:63:2f:bd:3e:cb:e1:
ef:06:58:d6:ed:cc:2c:a6:7f:f0:7e:62:52:6d:9f:96:01:55:
8b:76:68:69:a7:43:96:da:19:e8:f5:66:d8:30:33:59:08:52:
b0:35:d3:1f:d3:59:32:d8:1a:8c:c9:b2:83:bc:cc:40:0f:76:
e1:9b:5d:ad:38:1d:67:c5:ad:fe:6c:72:0e:36:df:f4:78:0f:
39:49:af:dc:53:16:e8:39:f1:66:29:66:97:c5:64:75:61:d1:
2d:85:7b:6a:2f:33:d2:a7:52:af:69:29:88:cf:ba:fa:88:86:
69:6e:3d:f6:24:53:00:b9:30:69:1f:c2:79:66:b4:d0:2a:f8:
5a:a5:46:3b:56:ba:5a:88:50:76:9a:8b:6b:15:4d:e6:31:e5:
16:3c:53:f2:50:e8:e0:5e:01:46:6e:45:d7:b7:d7:e7:25:f1:
5c:e8:ae:4a:8e:9b:f0:4f:dc:0c:a4:6b:15:b7:65:3c:98:68:
e9:38:4f:f1:8e:14:a0:46:40:59:43:e5:a5:53:a1:28:fa:eb:
0b:69:4e:6e:22:ca:67:78:11:41:cf:3b:fc:87:e6:0a:a9:f6:
cf:b6:84:8b:74:75:46:42:3b:e0:e7:d1:57:c5:a9:1c:52:27:
60:41:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:58 2026 by rpki-client