
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: kBA/6SmtAAINdbvl/jgYcoTxF3EWRcfcarADxW47cJ0=
Subject key identifier: 72:B9:6D:CB:28:76:12:C8:DE:7D:44:E5:05:24:6D:1E:89:44:3C:38
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019FA974E78F64ABC6CA9E060A5CEDFA0429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 06AD
Signing time: Tue 28 Jul 2026 16:00:38 +0000
Manifest this update: Tue 28 Jul 2026 16:00:38 +0000
Manifest next update: Wed 29 Jul 2026 16:00:38 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: YszUy6xAGpcq9/R8gEX8TQEfJL1cPE4t0lABR1hG2bw=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:e7:8f:64:ab:c6:ca:9e:06:0a:5c:ed:fa:04:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Jul 28 16:00:38 2026 GMT
Not After : Jul 29 16:00:38 2026 GMT
Subject: CN=72b96dcb287612c8de7d44e505246d1e89443c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:52:6f:75:2a:a2:ec:56:cc:88:bc:d8:15:
3e:9d:25:a9:22:4b:d3:9a:c3:22:64:3c:e0:f8:20:
72:8f:86:33:e8:7a:62:42:f3:74:71:37:60:a8:df:
75:07:eb:a1:29:b8:8e:97:e6:5c:15:c4:3e:65:b6:
87:dc:6f:5b:ba:aa:de:0d:68:e2:98:79:dd:47:c7:
37:20:5e:40:5f:e9:d3:c7:20:b0:f3:13:b5:9b:32:
0e:86:49:37:88:6b:c7:7a:b2:7e:86:a1:d7:cf:46:
5c:f5:b4:3d:8d:d2:78:50:0e:bd:f1:2d:6b:92:2e:
d8:83:6a:03:3e:01:7d:ff:45:9c:ef:17:65:a9:19:
59:97:e5:1e:f0:7e:d0:8f:03:fc:fe:a3:48:fe:81:
ab:5d:7c:92:97:ce:a4:cc:65:a5:6f:9c:d9:e8:d6:
a0:77:ce:c6:f3:d9:ad:d5:c6:e0:74:41:10:bd:57:
c9:21:94:3d:0e:ca:01:46:13:a4:9c:78:12:c9:cf:
76:ff:0a:d0:c3:57:0c:91:9a:d4:d2:76:99:06:79:
87:4d:86:78:5d:03:94:da:a6:f9:b8:5b:66:cc:16:
3b:e5:f1:b2:f4:63:10:b8:7e:73:80:d8:31:ed:f6:
89:16:94:45:2b:20:c3:c0:c3:c9:6f:6f:56:bc:51:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:6D:CB:28:76:12:C8:DE:7D:44:E5:05:24:6D:1E:89:44:3C:38
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:13:b6:4c:50:b5:e1:bd:c0:3c:d0:dc:1c:34:31:66:67:b7:
02:a2:b6:82:ea:2e:2c:94:bd:9e:50:c9:1f:81:8e:cb:57:2c:
b2:74:18:40:c7:7b:eb:e1:4a:e1:0f:fe:d6:8e:e5:11:4c:ac:
26:97:26:f5:8e:ba:f3:c4:14:99:78:bf:58:7b:fd:bd:6c:59:
a5:61:d8:f6:ef:4c:92:8a:34:a9:14:7d:05:4a:cb:25:fa:4b:
1b:66:bd:73:18:aa:d2:96:1d:c0:af:39:3a:30:58:76:32:c3:
68:43:96:c6:dd:8c:36:a4:67:3e:9a:c9:4e:32:ab:37:32:e7:
99:d6:b1:7b:10:8f:88:3a:b5:46:19:09:94:b0:d1:b3:c2:75:
7e:fe:19:af:5f:d4:ad:ea:01:44:2e:4f:f5:8c:9a:15:d9:b9:
62:57:d4:11:50:8c:d4:48:be:88:90:34:ca:a0:f0:1d:23:30:
77:f6:34:a1:ee:b1:7c:6e:ac:b2:69:8d:ac:0f:51:3c:50:46:
a7:cc:6b:87:c3:45:a2:47:6a:d4:1c:18:46:e8:b9:12:ce:68:
f7:1f:8c:ee:c1:d5:2c:ed:97:df:89:6f:c4:dd:19:6d:12:5b:
a5:0d:6f:f3:66:5b:85:9b:19:0f:b3:78:6a:c4:f5:f0:83:45:
e1:ad:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:17 2026 by rpki-client