Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: BzeKkuI9GYiTBOwXz+c8R4e4/DxYs42oQLI3x2Zah2M=
Subject key identifier: 66:54:87:16:B8:BC:B6:4E:86:F3:79:FC:06:2E:69:DD:0B:57:7A:0D
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 01A1C254717C5F2F8915F716DABC3754B73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 07C3
Signing time: Mon 09 Nov 2026 22:01:16 +0000
Manifest this update: Mon 09 Nov 2026 22:01:16 +0000
Manifest next update: Tue 10 Nov 2026 22:01:16 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: bPw2SRHiJ08W1GcGl0XGtseSgyOEimFNcG86tPYlBkw=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:54:71:7c:5f:2f:89:15:f7:16:da:bc:37:54:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Nov 9 22:01:16 2026 GMT
Not After : Nov 10 22:01:16 2026 GMT
Subject: CN=66548716b8bcb64e86f379fc062e69dd0b577a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:51:9b:d5:83:b0:5e:02:99:61:69:8b:a1:
b9:e2:10:7b:6a:99:05:ea:2d:30:00:8e:e8:2e:f7:
b5:27:25:d2:96:2f:25:56:7d:d3:e9:58:14:c8:74:
9d:f6:8d:bb:dd:8a:2a:95:8e:7d:56:be:0c:20:c8:
31:c6:a6:db:29:ae:2c:da:01:a8:a0:a5:47:ed:d7:
1a:de:a9:77:71:cc:b9:fe:b9:c0:f2:6f:4c:7d:54:
8c:c6:51:8f:df:f3:16:06:7a:34:80:ea:b4:55:df:
9a:b9:a5:81:40:d3:37:ae:a7:f4:77:8c:e7:ce:3b:
0c:8a:36:00:30:69:76:89:57:2e:9a:94:b3:2f:7d:
a4:d0:4a:cb:15:0e:eb:3b:87:d0:71:03:ef:90:6a:
01:2d:ed:04:65:65:fd:57:8d:6b:67:e6:03:e9:ee:
e2:74:d7:15:a1:61:bc:99:06:46:3b:3b:0d:64:8e:
d4:81:e0:2f:14:b1:2d:41:cb:62:bc:31:c1:2f:6a:
21:9a:47:bb:20:74:6c:80:a0:aa:68:01:15:43:74:
a7:42:05:25:60:e1:fb:96:f2:9f:5f:e9:fd:05:92:
07:8f:5a:2c:1e:80:5f:63:17:b6:30:60:ad:5b:96:
ab:0b:65:0a:24:10:ed:a8:59:ca:3d:fa:13:00:52:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:87:16:B8:BC:B6:4E:86:F3:79:FC:06:2E:69:DD:0B:57:7A:0D
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3a:a4:81:74:66:21:d1:19:c4:62:6a:45:7a:d1:5e:10:f7:
d2:12:ac:25:b2:a0:e9:a6:7a:55:08:22:cd:38:f9:52:07:d9:
ad:4c:dd:d7:41:06:c4:cc:8b:55:4d:9a:7e:43:1c:ad:b1:fb:
33:6c:6c:64:f6:83:8a:cb:96:e4:8b:c0:c0:66:bf:de:29:72:
40:5e:fb:c2:64:80:15:b2:0c:51:86:fc:61:67:c5:de:8d:29:
89:3a:f9:e3:15:04:ed:d5:3b:fb:c1:36:b7:e4:e8:e2:fe:72:
83:b6:6f:9c:6e:68:3e:82:95:13:4d:eb:e1:71:f5:3a:25:28:
2b:e9:dd:3c:3d:d4:95:5c:a1:fc:73:7b:76:31:51:87:94:97:
c3:66:f9:2a:ea:c4:1f:e0:91:15:35:d9:f3:aa:09:7a:4d:60:
a4:3c:1d:ca:23:0f:24:e4:56:36:0d:6c:19:d5:9e:32:cb:56:
31:0d:32:f1:b8:d9:96:12:a9:b4:5f:b4:92:40:fd:f4:5f:af:
e2:60:32:3d:7e:27:ce:15:4c:a1:d6:c4:9b:12:0b:5a:e2:57:
d7:23:63:15:4e:9f:d9:ff:06:d5:9c:11:2e:de:51:57:57:72:
47:b6:7c:19:03:96:5b:4b:2f:61:bb:1e:a5:6e:d9:24:86:06:
20:7a:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:11:02 2026 by rpki-client