Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: /MuJsSxakdcQogKKAt7Hn1Pynp5FvJviGNubr/EobYI=
Subject key identifier: 07:70:58:C8:BD:94:7E:49:6E:C2:B7:21:43:4F:0A:63:01:07:BC:55
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019D9A3DE9488107DED9475A03C923736A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 059C
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: 5gIIhYo2FB5tf7hZ+/mFjxTMkOucHgwl7Z+y9rQg464=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e9:48:81:07:de:d9:47:5a:03:c9:23:73:6a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=077058c8bd947e496ec2b721434f0a630107bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:15:66:0a:3c:91:41:a4:f8:29:b6:d0:c4:
a3:85:08:b8:59:93:98:e0:7c:35:57:ef:60:d6:bd:
80:b5:0a:71:0b:1b:ab:48:e9:9a:16:34:78:0a:8d:
06:dc:2a:ad:09:73:f3:21:9f:a1:7a:5d:96:d8:aa:
11:c7:33:46:2a:84:5f:61:0f:07:75:a8:d7:a4:40:
a8:1a:9b:9c:50:41:be:f6:a0:d4:8c:74:85:a5:6b:
e5:0b:86:74:88:de:32:52:d7:45:c5:90:ad:67:67:
25:51:5a:f9:a2:7c:b5:6c:2c:36:42:22:f4:20:a2:
c1:91:cf:39:a1:b9:f3:fe:bb:c7:ed:45:b2:86:69:
8c:f5:c4:fb:87:3d:77:30:b1:03:f1:4e:fb:f3:c2:
ea:cf:89:c8:d1:f2:f5:5f:27:3d:0f:a7:ba:35:1f:
67:89:a9:eb:0f:bc:8d:23:d4:f6:d1:46:14:f5:bc:
9a:83:4b:6f:e1:3f:c7:38:a0:6a:aa:62:5d:c9:ba:
7f:cd:8b:3f:af:d2:c1:a1:65:dc:30:eb:08:f2:7e:
e2:24:37:f1:66:4e:63:79:86:d7:22:ee:71:c2:0f:
52:29:9b:2e:08:e9:40:2f:42:47:8a:a1:b6:cd:16:
34:da:d0:be:bf:62:fd:5e:7d:17:d8:53:75:41:06:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:58:C8:BD:94:7E:49:6E:C2:B7:21:43:4F:0A:63:01:07:BC:55
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:40:61:a6:f6:4c:49:d0:8e:f4:fc:4b:58:67:4b:c0:95:db:
75:91:df:8f:e3:99:e4:e5:40:9c:c0:0e:ed:c4:00:0a:c1:a7:
db:4b:11:12:f3:d4:83:7d:9a:cf:17:a4:0e:d9:49:5b:22:b2:
8d:9d:e5:52:37:80:72:09:a8:f9:f5:07:a2:f7:9c:e9:72:77:
0d:31:e2:f0:82:15:0f:c9:46:05:49:9b:70:20:78:f6:5e:0d:
8b:88:8d:40:12:45:82:68:4d:72:59:60:98:54:df:62:3f:44:
d7:85:4a:2a:61:ac:a3:8c:93:90:21:9e:d0:18:08:6f:0e:d6:
ca:f8:4a:23:a0:2c:2d:cf:eb:c1:7e:2a:cd:29:24:b8:fa:64:
7d:c5:e4:46:a1:92:81:5d:7d:f2:df:94:43:a6:f9:66:d1:33:
7f:83:d3:07:af:04:42:5e:df:28:a0:51:d8:59:61:97:d7:2c:
6e:03:49:af:25:93:26:55:02:dd:9b:1d:ee:1b:aa:94:37:bf:
d5:2b:b7:2b:24:05:65:6e:53:1a:47:55:14:56:f3:5a:e9:0d:
2e:83:5f:c9:63:71:39:72:46:50:29:0e:33:96:40:30:8b:de:
21:6f:e2:72:fd:5a:57:d5:44:ff:46:72:2b:6a:77:ca:f3:38:
73:99:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:54 2026 by rpki-client