Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: 8NxvoZv5mQjqe9b5XNvAaEKdjbORGfa/IdCR8WcqXlA=
Subject key identifier: 41:01:B1:C7:CA:84:A8:AC:7D:7D:16:7F:2D:D1:A3:F2:CA:0C:43:43
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 019D382E52CB3885365E58C953C48F45410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 15A6
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: SR6FseeXlUhwPeaPPDtwhAYqdOugKhKg2f90Li0/vDk=)
2: ElYKGJbVCeO4nsMvf9tBERFCNgM.roa (hash: cWN/smFbi1ZXWCehyRRWo6Eskyvhd6DZroKP2osgc5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:52:cb:38:85:36:5e:58:c9:53:c4:8f:45:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=4101b1c7ca84a8ac7d7d167f2dd1a3f2ca0c4343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:29:98:cc:ac:c3:cd:08:8b:13:fd:90:42:
88:21:b1:9c:f7:2f:39:2c:14:c0:0f:3e:94:35:99:
ec:fa:d8:e5:b9:c4:72:b5:e7:c7:96:8d:4f:49:a3:
c4:4e:f0:2d:59:9b:ef:47:bd:37:ac:b0:d3:a4:fd:
40:3d:e1:84:a4:78:d2:48:dc:c0:33:54:af:47:63:
21:76:11:90:93:60:1b:c7:d6:b1:1d:f5:a8:f4:9e:
a8:b1:fc:ff:c1:7f:b3:2f:57:22:92:ca:58:63:70:
3f:7d:65:45:d6:46:36:c5:09:09:7d:b4:80:fc:2d:
9e:7e:2e:b1:d4:a7:17:a9:51:75:67:75:fd:3b:14:
e5:b6:cc:18:9d:1e:68:08:c4:49:7f:15:e8:69:86:
1c:97:06:c7:a7:7c:43:43:c4:6d:98:aa:75:ed:bd:
74:c3:0e:c0:27:e5:d8:10:2d:e7:d7:09:80:ea:ae:
bd:14:ca:5a:0a:2b:89:c6:52:50:e9:64:62:4f:a5:
f4:a8:fc:97:b8:57:2f:9a:06:e0:d7:cc:a1:bc:00:
68:01:df:1f:38:bc:9a:82:fe:df:5f:4a:09:cb:25:
24:bb:2d:59:1e:c8:07:a3:ea:55:a1:57:06:e0:cd:
3e:53:ab:c1:a8:5c:97:24:99:92:a5:cf:0e:74:4a:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:B1:C7:CA:84:A8:AC:7D:7D:16:7F:2D:D1:A3:F2:CA:0C:43:43
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:b3:61:49:a4:a1:67:53:9d:3e:47:32:c5:d3:c1:89:48:
b7:71:cb:18:ce:e9:43:08:56:68:ae:fc:60:1e:de:47:a9:82:
26:55:f2:64:4a:8e:53:3c:db:7b:d3:e2:6d:89:e3:9a:65:e2:
33:21:c9:31:93:0e:e3:6e:05:37:eb:79:8a:25:db:20:6e:e9:
6b:63:11:93:ed:7c:59:c1:f9:4b:c7:b8:64:88:74:a4:a6:f8:
6f:33:ff:67:4b:3e:33:3b:6f:f0:db:87:36:e2:6c:3d:de:a7:
60:a8:c7:98:1e:70:15:9f:29:43:f6:e5:cb:d2:12:21:80:39:
0b:a0:f5:eb:e2:08:13:a9:11:0e:47:1c:b9:4e:30:1c:25:b5:
dc:48:f8:07:5c:fa:d0:55:c3:cd:d6:68:05:0e:49:7b:07:24:
92:f9:fe:20:5b:43:16:9d:03:2c:3d:70:a5:ba:0d:ad:f4:e4:
b0:95:4a:a8:6f:93:49:f6:1b:0a:74:66:f6:bd:92:14:62:31:
87:b1:c3:9d:3d:b6:26:1e:68:9a:d4:21:37:7a:3d:0a:41:4d:
0d:6f:39:7c:a2:44:34:e3:5b:7e:00:07:48:62:13:d8:54:3c:
71:77:bb:fc:43:37:1a:20:87:08:91:11:1a:35:ce:83:c1:2e:
d2:b9:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client