Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: cRccnirAfTnEKQ83lgsiNvKj2n4d5aBShFpWOOrLMQc=
Subject key identifier: 1B:B0:A5:88:29:8B:2C:5A:45:33:16:CA:FD:0B:70:96:13:2C:ED:76
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 019E2F5F7CA68F3BED0DCE700F3006B72047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 1626
Signing time: Sat 16 May 2026 06:00:47 +0000
Manifest this update: Sat 16 May 2026 06:00:47 +0000
Manifest next update: Sun 17 May 2026 06:00:47 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: xkWmbbrNQii10OeNRvk/rDaeyZ4GopR7a3mDja3aszU=)
2: ElYKGJbVCeO4nsMvf9tBERFCNgM.roa (hash: cWN/smFbi1ZXWCehyRRWo6Eskyvhd6DZroKP2osgc5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:7c:a6:8f:3b:ed:0d:ce:70:0f:30:06:b7:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: May 16 06:00:47 2026 GMT
Not After : May 17 06:00:47 2026 GMT
Subject: CN=1bb0a588298b2c5a453316cafd0b7096132ced76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:d4:60:a5:36:68:09:11:05:8a:1e:23:df:
5e:ae:d7:fc:90:38:86:e9:03:1e:2e:36:fd:ae:69:
c2:ec:00:83:dc:e9:20:8c:e7:b8:61:9e:d7:a2:71:
cb:af:d4:d8:04:f3:8e:60:84:11:f7:a2:1a:c2:ed:
ef:5a:31:65:04:63:f5:03:cc:44:28:a6:22:ce:d3:
45:0d:ad:bd:04:31:55:bc:52:5f:bf:76:fb:95:5c:
c4:9d:15:53:30:b6:26:b3:b5:58:ee:50:0b:a8:e0:
de:bf:50:25:36:d6:43:af:71:6e:10:a8:fa:57:fe:
f9:30:d1:3f:c6:ef:30:80:26:a1:ad:43:1b:f7:b6:
04:83:19:02:67:6a:8c:57:7b:43:f9:ca:a3:40:45:
9e:f7:e1:f8:76:59:5c:aa:3b:ef:0a:72:71:8c:41:
7d:aa:e1:4c:a2:33:93:32:ae:64:e9:6c:ea:5d:b6:
9e:db:4f:0b:43:8b:7a:b6:d2:61:bb:99:a0:80:f7:
18:a7:50:54:59:47:6e:3f:a4:ba:5b:1e:07:c0:64:
74:25:51:0b:dc:b0:2c:1a:f0:5d:e0:9b:90:0c:63:
bf:bf:36:bf:37:37:1e:72:6b:d7:95:22:dd:45:bc:
2c:fe:d5:49:30:40:0b:74:3f:17:45:00:5b:3d:36:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B0:A5:88:29:8B:2C:5A:45:33:16:CA:FD:0B:70:96:13:2C:ED:76
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e6:73:98:15:92:1e:c3:bd:7e:05:21:b9:21:87:b4:66:a1:
32:a1:f5:97:3c:bf:af:d7:32:d3:c5:6c:60:4f:f2:8f:b7:11:
a8:23:8e:c9:6f:93:c5:c3:ff:70:79:db:77:52:bc:43:bc:50:
7b:24:db:e5:b3:fd:43:51:fa:0b:04:dd:6c:9e:a9:98:bd:10:
db:2d:58:0e:86:46:90:5f:91:89:e0:e8:30:7f:3b:7c:e9:61:
cf:1d:d6:56:6a:c2:91:75:46:a3:2b:33:66:0e:4e:aa:52:cd:
0f:0e:84:cd:92:62:70:91:45:69:72:15:05:6c:88:f1:10:e9:
3f:54:64:7f:c8:10:bf:4d:6b:28:c9:90:09:cd:6c:4d:83:f3:
a1:ad:59:fd:8b:d1:00:4f:f4:41:aa:80:bf:83:05:2d:6b:ec:
e5:ff:8e:5e:a8:37:80:b5:7e:1d:4a:82:b8:5c:11:b3:f6:99:
47:c6:65:3d:67:2c:bc:a8:2f:d3:f1:19:7a:72:15:24:62:1d:
e2:c6:78:37:1a:90:36:29:c9:0a:ed:67:21:5f:8c:b7:20:66:
58:f4:cb:24:34:b3:ed:f6:0a:34:66:27:b8:7c:c8:37:7f:5a:
59:8b:f8:19:ca:d7:a2:2e:d8:18:c1:4c:c9:4c:43:b1:e1:78:
57:05:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:23 2026 by rpki-client