Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: hkG9HpDGF+5bfIA2QD2Ky0iUCefIXVA+UhuaTso4egw=
Subject key identifier: 12:7F:D8:C0:31:3F:D0:03:13:9D:26:8B:80:13:72:B1:88:55:05:8D
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019EBDD9AF44D06CB56664CBD88AAF333D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 0633
Signing time: Fri 12 Jun 2026 22:00:20 +0000
Manifest this update: Fri 12 Jun 2026 22:00:20 +0000
Manifest next update: Sat 13 Jun 2026 22:00:20 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: swnygX1jgRreXvZ6HlniDvEPRFaBPcseSY+mLvD8U+g=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:af:44:d0:6c:b5:66:64:cb:d8:8a:af:33:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Jun 12 22:00:20 2026 GMT
Not After : Jun 13 22:00:20 2026 GMT
Subject: CN=127fd8c0313fd003139d268b801372b18855058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:5d:01:f1:59:e8:df:68:21:68:1c:35:3c:
29:01:88:30:86:d5:4e:e5:a0:d1:30:d5:40:50:89:
f7:43:a3:bb:f3:a9:28:19:d7:67:51:9a:6f:63:37:
ed:9e:7c:56:d8:a2:a9:6c:66:af:25:c8:71:72:a3:
96:3b:ed:af:53:5a:15:7c:b8:bc:1f:c5:87:f4:60:
ce:19:a2:d5:0d:6e:00:cf:13:65:c0:f0:af:15:4a:
f0:c4:1d:29:cb:38:cf:6b:cf:00:48:1a:5e:27:09:
7b:1c:b2:9c:4e:ed:9d:09:ad:1f:df:5b:44:87:2b:
0e:3b:c7:7a:78:1b:7c:e2:ba:02:a0:8e:be:61:65:
4b:c3:dd:66:b9:1b:10:65:fc:89:9d:2e:99:7e:2b:
02:85:d3:08:08:31:d3:cf:db:d6:a7:70:83:9f:c9:
ae:73:e6:35:14:69:9a:0b:ef:36:53:40:75:a8:6e:
3d:95:53:cf:ec:74:09:39:ee:e2:35:0d:61:5e:2b:
4e:82:e3:d5:16:b5:d2:7c:77:b7:11:3c:5c:40:78:
ec:af:34:5c:45:56:6f:88:bc:58:62:29:4e:6a:6a:
45:93:b8:ed:97:75:f1:39:38:aa:6a:d3:83:a8:43:
99:a6:3b:e0:4e:87:5a:16:a2:13:24:9f:f3:95:c4:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:D8:C0:31:3F:D0:03:13:9D:26:8B:80:13:72:B1:88:55:05:8D
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ac:9e:02:5f:28:e0:ed:8f:12:08:a1:fc:b2:18:79:24:98:
fd:44:10:a6:77:9a:b4:42:3c:5f:d4:0a:da:9f:62:4d:18:63:
ec:14:45:ec:db:f9:44:d3:bd:a4:ea:fa:71:fd:b4:87:75:4e:
ed:ed:58:d5:52:20:9f:ae:5b:b3:0e:6d:4c:82:5e:e2:d5:13:
5e:0a:96:ac:99:16:27:bf:f4:e9:77:af:11:f8:f4:26:00:c8:
a2:0f:e6:0f:27:9d:91:27:de:a8:7c:75:e4:31:7a:10:8d:30:
82:f8:15:f6:c2:02:bf:a5:6c:17:25:40:f4:e2:38:d1:32:6e:
66:a7:74:c9:80:39:76:36:30:a3:aa:79:ff:f0:99:fd:c2:c6:
af:ef:50:c6:98:93:cf:b3:78:2c:be:43:87:aa:7f:fd:ce:ea:
84:6e:57:ff:f0:2d:64:07:79:79:78:e2:4f:fd:58:39:3b:a6:
e0:8e:f1:58:78:75:47:5d:2c:f6:41:48:e0:fd:74:9f:39:22:
df:21:69:f4:61:f6:53:bd:e0:69:59:a8:9a:1d:0a:19:06:88:
e2:a2:e3:06:9d:b8:b8:eb:84:00:b7:f4:08:73:0e:7d:e6:23:
e7:61:c4:1a:7a:a3:f9:71:79:e8:4e:4a:8b:6f:75:16:d7:d1:
4e:d9:0a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692a9E0Gy1ZmTL2IqvMz0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5
MDg2YWYwHhcNMjYwNjEyMjIwMDIwWhcNMjYwNjEzMjIwMDIwWjAzMTEwLwYDVQQD
EygxMjdmZDhjMDMxM2ZkMDAzMTM5ZDI2OGI4MDEzNzJiMTg4NTUwNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVldAfFZ6N9oIWgcNTwpAYgwhtVO
5aDRMNVAUIn3Q6O786koGddnUZpvYzftnnxW2KKpbGavJchxcqOWO+2vU1oVfLi8
H8WH9GDOGaLVDW4AzxNlwPCvFUrwxB0pyzjPa88ASBpeJwl7HLKcTu2dCa0f31tE
hysOO8d6eBt84roCoI6+YWVLw91muRsQZfyJnS6ZfisChdMICDHTz9vWp3CDn8mu
c+Y1FGmaC+82U0B1qG49lVPP7HQJOe7iNQ1hXitOguPVFrXSfHe3ETxcQHjsrzRc
RVZviLxYYilOampFk7jtl3XxOTiqatODqEOZpjvgTodaFqITJJ/zlcQgzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ/2MAxP9ADE50mi4ATcrGIVQWNMB8GA1UdIwQY
MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt
MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5
LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeayeAl8o
4O2PEgih/LIYeSSY/UQQpneatEI8X9QK2p9iTRhj7BRF7Nv5RNO9pOr6cf20h3VO
7e1Y1VIgn65bsw5tTIJe4tUTXgqWrJkWJ7/06XevEfj0JgDIog/mDyedkSfeqHx1
5DF6EI0wgvgV9sICv6VsFyVA9OI40TJuZqd0yYA5djYwo6p5//CZ/cLGr+9QxpiT
z7N4LL5Dh6p//c7qhG5X//AtZAd5eXjiT/1YOTum4I7xWHh1R10s9kFI4P10nzki
3yFp9GH2U73gaVmomh0KGQaI4qLjBp24uOuEALf0CHMOfeYj52HEGnqj+XF56E5K
i291FtfRTtkK0w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:53:30 2026 by rpki-client