Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: Co0qcfUd2ODs9VxE31/of+Dc51TPyC7N7eMQ6KXbt8c=
Subject key identifier: 20:FD:DF:FC:52:35:EC:D3:48:94:FD:E0:ED:A1:DF:78:5D:E3:7D:55
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019E30E015F32DFA936E95C87F984BA75C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 05EA
Signing time: Sat 16 May 2026 13:00:52 +0000
Manifest this update: Sat 16 May 2026 13:00:52 +0000
Manifest next update: Sun 17 May 2026 13:00:52 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: IolgJBap4XVrBd946Upw9O0FIGLhW8BYsJhySWZOl+g=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:15:f3:2d:fa:93:6e:95:c8:7f:98:4b:a7:5c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: May 16 13:00:52 2026 GMT
Not After : May 17 13:00:52 2026 GMT
Subject: CN=20fddffc5235ecd34894fde0eda1df785de37d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:5e:96:9b:91:e3:4f:0e:c3:03:94:18:39:
29:9e:33:f3:8a:b7:05:a9:9a:47:a1:a7:10:d5:3d:
19:56:3e:52:03:d7:82:84:2b:5f:09:62:74:93:38:
5b:09:ab:15:b3:8a:2c:f4:ec:b5:d4:a1:05:a6:10:
49:1f:8d:e7:1e:16:13:e6:7b:6d:82:74:22:6c:4e:
c7:1c:0c:72:be:68:ac:55:29:8b:59:38:b0:a1:24:
d2:6a:11:df:d0:ef:ac:f8:11:e3:77:1b:19:68:36:
d5:7a:f6:52:8e:23:be:fb:b0:63:ae:9b:91:1a:71:
bc:76:27:c9:f8:4e:43:3e:6c:7e:89:e5:91:95:e6:
8e:77:ec:6f:db:5b:a2:78:ee:20:09:51:bd:de:a5:
28:d4:e1:fd:bb:46:ec:e2:35:dc:99:40:3b:b6:04:
3f:c1:9f:8e:8b:61:2f:e9:67:47:8a:79:f0:4f:ac:
16:eb:89:c0:8c:3f:4a:97:eb:40:2b:ed:da:88:56:
2e:31:a5:fe:3f:77:eb:6f:e3:2e:9e:39:a1:77:2e:
82:27:44:79:a6:9d:c8:6f:79:70:87:4d:97:41:8b:
bb:60:e6:28:55:5d:ea:13:41:69:bd:2e:bf:3f:19:
09:59:e6:73:20:8d:fd:6b:c5:62:d7:6f:9f:a6:71:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:DF:FC:52:35:EC:D3:48:94:FD:E0:ED:A1:DF:78:5D:E3:7D:55
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:8e:7b:a1:5b:51:c1:4b:c7:8a:ba:99:a2:2f:70:8f:85:
6f:b0:3a:60:8d:33:ce:1d:f8:5a:18:0b:c8:6d:72:e7:27:a1:
60:de:f0:41:59:af:48:d2:cc:73:e7:8a:1c:ea:44:b6:5e:90:
ef:cc:82:3d:c7:aa:90:03:59:5b:21:5b:6d:fa:28:d3:db:01:
f6:f2:6b:9f:1a:c3:ca:4a:8b:34:03:b5:40:dc:ff:bd:5b:97:
00:fb:50:68:bb:69:49:da:80:10:6a:91:13:6c:a4:8c:5b:c0:
c1:b7:3a:00:9a:d9:b2:f7:9c:14:39:86:6d:e5:52:06:20:7c:
70:26:ef:dd:bf:3a:5b:a3:60:18:55:ce:6a:70:83:fe:d3:1e:
87:64:c1:ec:eb:b7:34:c6:30:c4:6b:05:a1:de:cd:5d:6a:4f:
b2:33:8a:47:b8:b7:ba:5d:b2:6a:9b:93:24:2e:59:21:0a:64:
0b:a6:33:36:de:92:db:05:ad:a4:64:b1:a7:28:11:02:b4:ee:
5e:93:1c:03:70:6e:c1:6e:26:c8:92:73:3e:c2:59:9a:60:b3:
dc:ac:d9:eb:52:b7:fb:2f:28:2a:b8:70:47:d4:19:d9:3d:ce:
eb:30:4b:73:c8:91:38:30:5f:fb:fe:87:a0:e5:b2:04:0f:c1:
5c:0c:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:50 2026 by rpki-client