Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: +Q9avqDRr8EomrCsSdfZd5biihC8vw8UEn9ApLy6ZYU=
Subject key identifier: 7C:4E:6A:84:C0:20:A4:11:35:FF:F7:E8:47:6F:A5:7C:54:15:13:5C
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 01A1867679EAC87C5545C8CB0488217BA416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 07A4
Signing time: Thu 29 Oct 2026 07:01:13 +0000
Manifest this update: Thu 29 Oct 2026 07:01:13 +0000
Manifest next update: Fri 30 Oct 2026 07:01:13 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: cYsDrviLpeVVhlvIY9rFq1ixG949DNkFI8m9fNZs2tQ=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:79:ea:c8:7c:55:45:c8:cb:04:88:21:7b:a4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Oct 29 07:01:13 2026 GMT
Not After : Oct 30 07:01:13 2026 GMT
Subject: CN=7c4e6a84c020a41135fff7e8476fa57c5415135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:de:32:7e:b4:4c:81:ed:1f:c7:50:91:cd:
b7:ca:78:48:25:9e:8d:74:0e:04:1c:33:8a:0c:6d:
29:1e:7d:93:95:ac:ab:ff:3e:b6:22:2e:82:f2:1f:
81:76:d5:0c:21:f2:71:e5:91:ed:86:c6:98:f2:d0:
22:b1:c9:0b:4c:8c:40:4b:06:58:9a:d3:c9:5f:92:
7b:61:9f:3f:e5:d6:fe:32:f9:53:9c:21:07:c2:98:
5a:5d:53:9f:3a:91:90:4e:01:d2:a1:71:4d:22:20:
38:d6:72:5f:d7:c8:81:40:af:30:ae:ac:8e:2e:31:
11:e9:80:ce:54:5b:8f:8c:be:ed:2f:ac:d0:1a:c4:
83:4c:06:8d:d7:4c:94:17:4c:37:1d:96:fb:48:45:
ec:db:76:75:96:7c:df:05:28:55:47:64:77:85:bc:
0f:ae:4e:d0:71:d3:e6:cd:c1:24:ef:02:a4:c9:d0:
dc:95:bd:94:e2:ea:7a:e2:94:4a:61:ab:ca:30:57:
c6:2b:4f:3d:33:26:ca:f0:67:e4:45:de:dd:38:90:
9b:0f:a4:ad:9e:67:d1:32:91:98:30:bb:14:78:eb:
77:3a:a0:4e:d1:ce:54:5f:b1:e5:c3:ed:93:1a:36:
16:c1:17:67:d8:4e:c0:6f:68:76:70:91:23:c2:65:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:6A:84:C0:20:A4:11:35:FF:F7:E8:47:6F:A5:7C:54:15:13:5C
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:77:ba:a8:9d:c3:d9:7e:87:cf:9c:39:f3:14:e6:e7:4e:b0:
9c:ba:1d:8b:4d:bb:d0:a5:fa:5a:14:7c:2d:aa:d2:96:58:fa:
25:53:84:bc:8e:95:c1:95:01:16:56:a1:23:c1:52:53:94:af:
73:b9:33:e3:66:0e:54:2b:5b:b1:b6:28:6e:1b:68:de:ab:b8:
b6:90:44:42:33:3e:69:d6:4a:74:5f:95:ea:94:90:80:4d:01:
ea:a1:93:ea:8d:ad:d8:2e:c7:28:53:24:2e:f0:df:93:28:22:
40:10:85:a0:85:f9:15:38:17:99:1d:09:fe:fe:72:d2:bf:49:
29:19:a9:40:b8:0a:c3:b1:4c:8b:fa:fc:84:f3:56:72:88:a9:
f9:22:a9:f1:8a:f4:e4:69:7e:57:e5:f0:e9:7b:69:e5:9f:48:
90:a2:86:c6:5c:c0:5a:2c:04:0c:75:ba:7f:0b:82:a8:8a:9a:
43:36:81:6f:47:01:38:66:64:f3:23:3a:60:00:ce:cb:82:98:
21:74:be:8c:65:83:dc:fe:19:cf:92:ee:69:a0:18:0a:49:ea:
d5:11:55:22:97:c2:25:a6:15:19:35:51:21:59:17:4c:96:a0:
60:33:69:ad:14:4d:ed:4e:b3:83:f1:5f:e6:cf:d8:4d:4d:84:
d5:24:f7:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGdnnqyHxVRcjLBIghe6QWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5
MDg2YWYwHhcNMjYxMDI5MDcwMTEzWhcNMjYxMDMwMDcwMTEzWjAzMTEwLwYDVQQD
Eyg3YzRlNmE4NGMwMjBhNDExMzVmZmY3ZTg0NzZmYTU3YzU0MTUxMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2reMn60TIHtH8dQkc23ynhIJZ6N
dA4EHDOKDG0pHn2Tlayr/z62Ii6C8h+BdtUMIfJx5ZHthsaY8tAisckLTIxASwZY
mtPJX5J7YZ8/5db+MvlTnCEHwphaXVOfOpGQTgHSoXFNIiA41nJf18iBQK8wrqyO
LjER6YDOVFuPjL7tL6zQGsSDTAaN10yUF0w3HZb7SEXs23Z1lnzfBShVR2R3hbwP
rk7QcdPmzcEk7wKkydDclb2U4up64pRKYavKMFfGK089MybK8GfkRd7dOJCbD6St
nmfRMpGYMLsUeOt3OqBO0c5UX7Hlw+2TGjYWwRdn2E7Ab2h2cJEjwmUYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxOaoTAIKQRNf/36EdvpXxUFRNcMB8GA1UdIwQY
MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt
MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5
LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGne6qJ3D
2X6Hz5w58xTm506wnLodi0270KX6WhR8LarSllj6JVOEvI6VwZUBFlahI8FSU5Sv
c7kz42YOVCtbsbYobhto3qu4tpBEQjM+adZKdF+V6pSQgE0B6qGT6o2t2C7HKFMk
LvDfkygiQBCFoIX5FTgXmR0J/v5y0r9JKRmpQLgKw7FMi/r8hPNWcoip+SKp8Yr0
5Gl+V+Xw6Xtp5Z9IkKKGxlzAWiwEDHW6fwuCqIqaQzaBb0cBOGZk8yM6YADOy4KY
IXS+jGWD3P4Zz5LuaaAYCknq1RFVIpfCJaYVGTVRIVkXTJagYDNprRRN7U6zg/Ff
5s/YTU2E1ST3zw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:11 2026 by rpki-client