Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: A3xq67r5HvO8hmXfkqs5Ug/eHv62wCFBrYfQit1LMS0=
Subject key identifier: 1B:50:48:0A:C6:B0:55:76:2C:2F:FC:78:B1:88:43:A4:78:1F:30:EB
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019D2C29FABA4878E09A19A12853E3E71FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 0563
Signing time: Thu 26 Mar 2026 22:00:41 +0000
Manifest this update: Thu 26 Mar 2026 22:00:41 +0000
Manifest next update: Fri 27 Mar 2026 22:00:41 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: 3aSNsw379Zee6fItyWWUAHizricIQg8oijYua5saVCY=)
2: PRykERc8g2pEPeMeJOkzyRIHsss.roa (hash: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:29:fa:ba:48:78:e0:9a:19:a1:28:53:e3:e7:1f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Mar 26 22:00:41 2026 GMT
Not After : Mar 27 22:00:41 2026 GMT
Subject: CN=1b50480ac6b055762c2ffc78b18843a4781f30eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:d6:84:ae:4d:ed:9a:af:86:e8:24:19:7e:
90:0b:73:0c:a2:46:b8:da:6a:d6:04:32:1a:62:0f:
2e:3e:15:de:f5:b3:44:4d:66:76:8d:82:c3:b7:02:
29:aa:e2:3b:c9:f8:d8:0b:dd:84:8e:47:d4:99:fb:
53:c3:5e:18:7b:89:6f:29:5d:90:00:01:a0:dc:cc:
b6:0c:71:c8:ab:57:c8:a8:85:01:15:69:a8:67:83:
7b:77:b2:be:ed:39:93:14:8e:c8:ce:f6:52:73:a7:
8e:8e:50:04:e4:d5:43:67:b4:6d:7f:d4:d7:d4:2e:
6d:61:8f:d1:33:08:4e:7a:2a:87:55:68:61:75:68:
06:24:5a:85:f7:84:74:d0:20:0b:13:b5:97:68:a1:
9a:40:0d:54:77:32:ae:d9:25:23:d4:ef:94:29:c5:
da:f7:2d:c2:5c:fe:3e:2c:ca:e2:a8:db:8f:b4:aa:
2f:88:e1:2f:92:72:f7:e4:c8:6f:58:d8:45:f7:6c:
2b:26:94:97:c5:df:af:56:f8:e9:03:32:c8:40:ca:
99:b2:fc:62:e6:af:10:a6:a0:e0:1e:03:29:06:d2:
e8:c0:bd:fc:64:5d:70:15:1c:5c:d4:a7:7a:ea:f7:
08:84:97:c5:d1:6f:ab:f7:28:e0:c4:71:46:28:18:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:48:0A:C6:B0:55:76:2C:2F:FC:78:B1:88:43:A4:78:1F:30:EB
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:50:c1:f7:ad:c0:e5:f1:f0:bc:47:9b:e0:e3:64:ff:67:c4:
1e:b0:2c:82:8d:a6:b3:4a:7b:37:1d:12:ad:68:37:29:72:a4:
ed:df:67:a1:53:8a:56:32:46:c5:de:af:ca:ad:a3:e3:f6:d4:
84:57:70:62:dc:de:ba:e9:f0:8e:90:58:11:3c:75:db:3d:c3:
84:26:a7:87:e0:93:d5:77:1c:34:f7:73:bb:55:d6:50:0e:e8:
16:c5:ec:b4:26:7f:e1:c9:bb:b9:66:21:60:3f:d0:c0:b8:ee:
03:13:60:57:6a:cd:7c:ee:6b:f0:37:66:f1:57:d6:0e:4f:3b:
5b:64:f6:87:ce:90:9d:db:04:6c:b5:bc:e6:45:37:15:6e:e3:
3b:dd:74:d3:89:fb:0a:c1:4b:6e:74:76:a3:7d:63:09:8f:c8:
82:4e:76:f7:bf:d7:8e:43:ef:75:e2:18:fb:71:4f:b8:32:50:
4c:46:d6:d1:bb:5e:c5:ae:4d:0b:82:5b:4b:14:40:14:16:ae:
23:ba:10:ae:43:93:9c:2d:4e:b3:cd:cf:ca:bf:78:70:60:eb:
e4:e8:54:15:37:da:5f:69:6f:22:52:04:1c:52:43:80:04:5c:
46:08:d0:0a:fc:4e:17:78:eb:75:d3:95:bf:a4:92:40:a3:d9:
6d:47:a1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sKfq6SHjgmhmhKFPj5x+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5
MDg2YWYwHhcNMjYwMzI2MjIwMDQxWhcNMjYwMzI3MjIwMDQxWjAzMTEwLwYDVQQD
EygxYjUwNDgwYWM2YjA1NTc2MmMyZmZjNzhiMTg4NDNhNDc4MWYzMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKTWhK5N7ZqvhugkGX6QC3MMoka4
2mrWBDIaYg8uPhXe9bNETWZ2jYLDtwIpquI7yfjYC92EjkfUmftTw14Ye4lvKV2Q
AAGg3My2DHHIq1fIqIUBFWmoZ4N7d7K+7TmTFI7IzvZSc6eOjlAE5NVDZ7Rtf9TX
1C5tYY/RMwhOeiqHVWhhdWgGJFqF94R00CALE7WXaKGaQA1UdzKu2SUj1O+UKcXa
9y3CXP4+LMriqNuPtKoviOEvknL35MhvWNhF92wrJpSXxd+vVvjpAzLIQMqZsvxi
5q8QpqDgHgMpBtLowL38ZF1wFRxc1Kd66vcIhJfF0W+r9yjgxHFGKBhXfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtQSArGsFV2LC/8eLGIQ6R4HzDrMB8GA1UdIwQY
MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt
MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5
LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFDB963A
5fHwvEeb4ONk/2fEHrAsgo2ms0p7Nx0SrWg3KXKk7d9noVOKVjJGxd6vyq2j4/bU
hFdwYtzeuunwjpBYETx12z3DhCanh+CT1XccNPdzu1XWUA7oFsXstCZ/4cm7uWYh
YD/QwLjuAxNgV2rNfO5r8Ddm8VfWDk87W2T2h86QndsEbLW85kU3FW7jO91004n7
CsFLbnR2o31jCY/Igk5297/XjkPvdeIY+3FPuDJQTEbW0btexa5NC4JbSxRAFBau
I7oQrkOTnC1Os83Pyr94cGDr5OhUFTfaX2lvIlIEHFJDgARcRgjQCvxOF3jrddOV
v6SSQKPZbUeh2g==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:50:23 2026 by rpki-client