
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json)
Hash identifier: bhfkPf6yROdTbUqNCUyhAcTIIGw5O8BaUjc0wl3VC04=
Subject key identifier: E7:D2:CB:1F:69:62:18:39:09:6D:55:D1:BA:E9:39:53:8F:6C:21:EE
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01A0D502ACA22F19D968A505FE9CA810B732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
Manifest number: 1A79
Signing time: Thu 24 Sep 2026 20:01:57 +0000
Manifest this update: Thu 24 Sep 2026 20:01:57 +0000
Manifest next update: Fri 25 Sep 2026 20:01:57 +0000
Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=)
2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=)
3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=)
4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=)
5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: 7dyWUQ4iWwklVj69VF1pU3Jl6WC2nh2J084zmJMyTVk=)
6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=)
7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=)
8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=)
9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=)
10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=)
11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=)
12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=)
13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=)
14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=)
15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=)
16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=)
17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=)
18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=)
19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=)
20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=)
21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=)
22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=)
23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=)
24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:ac:a2:2f:19:d9:68:a5:05:fe:9c:a8:10:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Sep 24 20:01:57 2026 GMT
Not After : Sep 25 20:01:57 2026 GMT
Subject: CN=e7d2cb1f69621839096d55d1bae939538f6c21ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:71:9c:d6:d2:85:43:16:53:32:66:2b:5e:
0f:2f:3d:a0:3a:ab:df:50:86:6f:28:46:3d:cc:85:
45:26:0c:31:54:12:5b:2f:8e:29:07:e1:63:43:aa:
65:bb:b8:36:40:90:ec:00:50:5a:5d:86:a0:d1:b3:
1f:84:da:fd:87:28:fe:76:a2:4e:88:4b:20:05:89:
ff:ed:bb:ae:6a:62:5a:1a:9f:0a:57:25:b3:07:f0:
8e:72:61:03:6b:e6:d3:18:66:ac:94:af:58:45:2a:
cc:d9:b2:bd:92:14:7c:9b:15:50:6b:c7:2a:a8:59:
a9:94:a5:16:50:b2:52:3e:d4:73:84:99:43:b5:b9:
36:8d:3f:13:ef:28:f0:83:3d:32:bf:53:d9:76:3a:
19:10:16:de:9b:30:20:aa:b2:f8:3a:09:db:d4:4b:
17:b7:2a:02:a8:03:95:0e:17:68:6a:e4:09:44:d4:
16:94:ef:5b:b8:40:bf:b6:f1:da:ef:a2:58:66:d5:
37:d8:35:e9:f9:e9:68:0a:a7:56:43:e3:03:f2:ca:
04:17:ce:af:2c:12:70:8a:27:18:30:b0:53:60:27:
30:31:da:77:f1:e1:9b:e7:e3:9e:a7:f8:a1:bd:be:
fe:3e:3c:8c:17:a0:eb:57:c0:ba:2c:a0:a2:01:5b:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:CB:1F:69:62:18:39:09:6D:55:D1:BA:E9:39:53:8F:6C:21:EE
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ba:bc:09:59:f7:24:eb:18:73:0e:a4:de:e6:43:ba:a4:97:
db:82:6e:b9:53:26:9c:89:38:bb:50:25:bb:79:f9:1d:1e:18:
44:da:45:16:3e:cb:13:bf:1c:9d:37:4e:66:74:ba:a7:a7:70:
e1:21:ff:2f:df:bb:49:f3:ff:31:7a:2e:e7:f4:04:c3:95:91:
5d:c3:87:43:2c:db:69:94:9c:02:16:e2:df:e9:18:1d:78:fe:
36:0b:e9:dd:2a:25:9e:8d:ec:ca:65:e8:7e:f5:e4:94:44:78:
9c:1b:5e:46:2c:50:93:91:1c:e1:97:31:e4:e1:7a:70:02:d2:
75:0b:42:fa:95:a8:34:7a:dc:7b:d7:9e:c8:e9:35:2d:21:71:
f5:35:98:12:34:af:27:ac:bb:b8:95:bc:4d:0a:38:3f:b4:5f:
7f:b2:98:2f:88:bd:e8:da:5c:a1:8e:2a:52:d2:f8:e6:89:61:
96:e4:cd:b3:a2:8f:78:c4:b2:7c:2f:04:a6:58:1e:a5:bb:3c:
75:b6:3a:4f:a0:e5:5a:90:26:83:40:9e:ba:52:dd:7a:3f:03:
46:0f:f5:13:38:fb:6e:6b:97:6a:be:56:54:70:e8:e5:35:3d:
f0:81:9e:6a:2f:b7:b3:30:02:b4:7e:be:fb:cf:14:6b:2c:11:
a1:6c:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:31:36 2026 by rpki-client