Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: /NAU65giaL0MS6vULzIHLGDtGfBuFN4eXOa+9rRiqWA=
Subject key identifier: 7F:09:BC:9F:5E:99:2A:0F:2F:27:81:67:F9:EC:5C:EC:37:BF:6D:54
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019CAAC6B1F003C3888B6C141AEB2371EDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 0520
Signing time: Sun 01 Mar 2026 19:01:14 +0000
Manifest this update: Sun 01 Mar 2026 19:01:14 +0000
Manifest next update: Mon 02 Mar 2026 19:01:14 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: sPldr0nO14kjSNoUsJNSD3DnlioxVvX0f1DJlIChGy4=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b1:f0:03:c3:88:8b:6c:14:1a:eb:23:71:ed:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Mar 1 19:01:14 2026 GMT
Not After : Mar 2 19:01:14 2026 GMT
Subject: CN=7f09bc9f5e992a0f2f278167f9ec5cec37bf6d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:55:bd:82:57:df:e5:eb:20:0b:25:e8:c2:
17:79:ae:b6:6e:fa:23:b7:a7:2b:9e:0e:c1:68:1b:
0a:7c:4d:98:8f:c8:49:0f:a6:5a:62:2b:07:dc:a0:
0d:36:67:74:63:d2:7a:00:02:8e:44:d3:bf:5b:50:
4d:9c:13:4f:6b:0e:20:70:64:02:e0:50:95:40:a5:
fb:93:a5:8b:58:e3:51:65:61:24:0a:ce:27:aa:8e:
9a:82:87:13:16:d9:65:97:5b:2d:49:f2:7b:00:a1:
a3:54:2b:f8:fd:78:b6:bf:a7:05:e4:c0:84:35:81:
68:e4:73:63:3c:f8:f3:cf:bb:97:3c:52:32:46:24:
0f:6a:88:93:8a:94:7e:8d:7d:58:c0:65:5d:27:e4:
9c:5d:b5:c8:e2:bd:95:33:59:ec:36:21:ec:df:38:
37:e8:fc:a2:8a:ca:53:4e:c2:d6:25:1d:1a:31:31:
49:17:03:29:fb:98:80:d3:6a:6c:4b:e7:4c:ce:5c:
bc:7d:71:fb:39:09:ad:06:12:0b:ea:69:40:82:b5:
e8:3f:e7:1d:10:dd:4f:47:36:e5:d1:79:34:ab:a8:
0a:2e:a1:4b:cf:5e:c1:1b:cc:c5:f7:8d:c3:f4:94:
81:37:a9:24:c6:d3:79:87:6c:49:aa:0c:8a:a4:79:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:BC:9F:5E:99:2A:0F:2F:27:81:67:F9:EC:5C:EC:37:BF:6D:54
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fc:09:cc:cf:4c:66:36:17:e0:43:af:ab:c2:f8:5c:51:24:
a8:85:82:0e:5d:0b:96:f6:b1:be:1b:ce:d5:fd:af:c4:75:2c:
e3:3d:cf:f9:72:b8:38:2d:d9:bc:fc:dc:a7:13:f9:29:f6:b8:
80:5a:cb:dd:ed:eb:ae:b6:91:7c:8b:85:b0:10:64:b6:7a:f9:
a9:28:4f:4d:d9:10:2d:14:69:97:19:2b:00:cd:b4:83:fe:22:
df:53:3e:02:5d:9c:2b:21:cc:a4:ff:83:9b:e6:6c:c6:d4:b6:
2b:aa:0e:b9:8c:15:85:74:db:a9:ed:d1:56:00:93:71:d4:f5:
51:e7:83:a4:b3:67:2f:34:b5:22:cf:a5:60:eb:3d:c8:0f:28:
04:cc:8d:3c:79:07:59:f5:3f:6e:79:4c:37:05:ac:30:d1:04:
92:be:43:30:3b:ed:31:2f:56:31:57:2b:aa:67:0b:f6:1c:71:
c2:2b:10:ce:e0:89:73:75:a7:87:26:41:4c:25:99:40:72:b4:
4a:5f:17:fb:b4:d5:9a:b0:be:4d:41:67:9e:80:d2:d5:49:e5:
7f:08:e5:a9:63:3e:c6:d2:5e:9e:1c:90:3b:fe:31:37:d8:cb:
29:a8:e6:bc:f8:e2:ae:c0:0f:1b:b3:d2:bb:38:13:22:8e:6a:
b8:e6:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:08 2026 by rpki-client