Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: ncfERV3vKfv5sAqaBhWEs/BbxsuNGO9H9/R2xNC7c+w=
Subject key identifier: 9D:7C:87:BF:DE:FF:CF:D0:C7:6E:56:05:57:A7:B2:21:98:7E:F4:B6
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 019CAD90A57EB5AC39986203A4789154D2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 14E7
Signing time: Mon 02 Mar 2026 08:01:03 +0000
Manifest this update: Mon 02 Mar 2026 08:01:03 +0000
Manifest next update: Tue 03 Mar 2026 08:01:03 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: qBCk7VyFwxHvdStFVk2nlIA7QUD2Xnh09tvxAKuzXRE=)
2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a5:7e:b5:ac:39:98:62:03:a4:78:91:54:d2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Mar 2 08:01:03 2026 GMT
Not After : Mar 3 08:01:03 2026 GMT
Subject: CN=9d7c87bfdeffcfd0c76e560557a7b221987ef4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:ef:8a:fa:ee:06:dc:bb:49:ab:a3:ec:4c:
74:6d:cd:ce:39:75:d6:88:90:8f:3b:24:e3:60:40:
a2:f5:29:47:1d:a2:d8:19:ce:36:f7:3d:ff:7e:76:
04:81:6f:42:f1:9e:7a:14:9a:1d:a8:36:8e:30:6b:
43:ff:94:9e:5d:94:18:45:11:06:0e:8e:ad:03:8c:
a1:3b:67:dd:4e:92:6e:2a:bb:0f:83:d0:78:5c:3a:
b4:a4:24:24:ea:91:b7:22:20:be:25:ec:70:d1:d4:
c1:ac:2d:2f:e3:4d:6d:0f:a5:b9:f6:8e:c5:b7:93:
83:94:18:a7:16:71:4a:91:1c:c6:4b:83:84:d3:36:
c8:ba:24:bc:10:b6:f3:81:54:f8:da:d2:44:30:c2:
cf:04:33:a8:05:38:e7:a6:fc:33:57:4f:05:26:29:
1f:0e:c3:1d:52:15:5f:c2:41:25:00:84:be:87:ee:
1f:13:05:55:40:4e:21:a0:38:42:a3:87:4c:f2:b0:
57:bf:cd:76:64:00:b1:e6:b4:31:97:4e:61:c3:5c:
6a:cc:52:73:a2:88:2a:1a:28:cf:e1:4b:4a:ef:3c:
34:20:2b:7a:ca:db:a4:1f:8f:f2:c7:48:33:b6:ef:
72:20:3c:a5:2d:a0:9a:39:36:49:c5:1d:d9:53:7f:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:87:BF:DE:FF:CF:D0:C7:6E:56:05:57:A7:B2:21:98:7E:F4:B6
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c5:67:86:c2:ae:9d:73:c5:e4:cd:50:fe:20:b2:d5:cd:99:
74:dd:9d:e3:e1:77:c2:01:9b:4a:1c:be:6a:71:f1:46:a1:62:
16:7b:5b:c6:ed:da:03:b2:4d:4c:79:8c:54:4d:32:8f:b3:86:
5d:f9:91:38:16:d0:77:b3:a3:1e:19:65:11:a3:b8:1a:3d:be:
12:5d:c2:46:3f:fe:a1:84:d0:ca:b6:e1:ec:bd:ad:97:ec:67:
97:b3:16:4f:73:0c:db:9f:fd:e8:84:d5:e5:52:b6:ad:39:e0:
47:1a:ab:25:bb:55:64:5d:d2:79:6e:15:7d:f0:19:fc:af:cb:
af:71:20:3b:65:23:53:a5:27:f9:c9:b7:b9:b0:13:82:f8:4a:
14:de:1a:41:8f:53:ea:46:6e:fd:2a:03:a6:7b:d5:06:6d:e6:
ae:fd:eb:22:c5:ae:da:1c:44:f6:4b:a6:c4:dc:22:7a:90:1e:
22:f4:be:d2:e6:99:5c:91:0e:e1:6e:c2:c7:79:3e:c0:58:ad:
b0:61:e9:34:64:79:56:b8:aa:4d:d1:b4:49:75:a6:1a:74:37:
a6:45:de:6f:dd:29:3d:28:07:2e:ed:e5:58:8f:e3:b0:8d:68:
d7:0b:8b:6c:b5:a7:40:63:4b:19:e5:24:4e:1f:d4:f8:82:c3:
bd:12:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:24 2026 by rpki-client