Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: Z0vdSp8Edqf6WzQqQxjcP6lI3CUEGUF4zj9aggJY/GM=
Subject key identifier: 88:C1:24:B5:89:0A:20:56:83:99:91:5F:F0:57:74:07:C2:A9:5D:BC
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 019D9B196EA678961B170F44F0921C26BD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 1562
Signing time: Fri 17 Apr 2026 11:00:28 +0000
Manifest this update: Fri 17 Apr 2026 11:00:28 +0000
Manifest next update: Sat 18 Apr 2026 11:00:28 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: SNTZbi65u4oEzqPupBoxztrQrpeZ/MJuRvqn55SiEbQ=)
2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:6e:a6:78:96:1b:17:0f:44:f0:92:1c:26:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Apr 17 11:00:28 2026 GMT
Not After : Apr 18 11:00:28 2026 GMT
Subject: CN=88c124b5890a20568399915ff0577407c2a95dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:ac:b1:9e:6b:25:2c:7d:37:45:cb:5e:e2:
07:4f:5a:85:4d:4f:aa:aa:25:0c:99:c9:37:e7:8f:
22:24:44:ae:71:f0:94:40:92:90:ad:ee:c5:a2:11:
de:e6:b9:a0:9c:c1:8d:31:9a:9f:d4:a9:f6:8a:e2:
c7:3b:08:38:80:f7:ef:91:53:17:89:3a:7c:38:e7:
90:0e:47:14:e8:e1:12:e5:51:a3:71:44:e1:39:1c:
c8:0e:b2:9e:91:89:84:37:36:89:ad:29:79:e7:05:
c6:aa:4e:e0:19:be:18:3b:97:c3:46:7b:1a:b5:da:
1e:4e:14:7f:68:95:65:59:b1:49:97:9f:a1:be:ac:
d6:0a:cd:a7:77:be:89:b1:06:b7:66:12:5e:20:40:
7d:99:25:53:62:4c:ce:68:34:b8:23:3e:b0:6c:cf:
11:98:71:0f:ef:b2:3d:05:44:bf:db:d4:f5:b4:5f:
6b:fb:80:4c:94:30:68:86:52:58:a4:51:5e:2b:08:
d6:dc:80:ed:46:b6:c3:ac:97:74:90:13:aa:b4:e1:
1b:ed:f4:d6:23:95:7d:f5:1c:2e:a8:6a:e2:c3:23:
af:ce:ee:3a:b3:50:c5:b7:b2:79:da:e8:26:53:16:
c6:d4:ac:93:5e:3d:33:1f:b4:96:99:97:7c:75:be:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:24:B5:89:0A:20:56:83:99:91:5F:F0:57:74:07:C2:A9:5D:BC
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:71:dc:48:c8:99:a7:0c:9f:ec:cb:3a:4e:ad:46:e0:29:f9:
c3:a1:70:f4:7e:16:a0:42:5e:e5:6a:d0:4a:67:ba:16:8d:4a:
7d:a6:c8:c3:25:53:66:85:7a:73:07:6d:ce:41:4f:16:f8:9d:
63:9c:49:d1:b2:9d:00:9f:1f:9a:7e:c8:a4:15:89:93:f3:b9:
77:42:86:b8:6f:52:3c:5e:1d:37:b4:5e:9c:40:46:7f:90:79:
7e:57:e4:85:b3:0c:76:0a:2a:98:dd:4d:18:3d:4c:3e:16:88:
96:8b:32:53:bd:d8:5e:1a:b6:60:50:8c:b5:bf:25:1b:1f:eb:
84:21:c9:e5:9a:64:16:97:7e:3c:a1:79:ee:64:64:f1:70:74:
94:80:76:e5:68:46:46:3b:c9:c6:3f:33:aa:7a:2f:a5:eb:ff:
99:d9:bb:d6:b6:0b:55:bb:9a:9c:0b:0d:09:7d:65:53:b1:9b:
2c:74:cd:cb:ca:3f:15:a9:fc:0a:02:2d:3d:45:7c:6b:bb:06:
9f:9a:29:4b:9c:6e:4b:7a:27:9b:5d:41:ea:a6:4c:a0:7e:e1:
56:38:6f:db:1e:97:4f:ec:5d:42:21:75:fb:a5:71:78:c8:a9:
fc:b6:6a:20:53:b2:13:63:ed:88:03:88:4a:fe:eb:34:07:4c:
5d:e9:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:38 2026 by rpki-client