Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: NvIQXbxz6jGVpvQUAb0Po7qe7UAscT++kZ8nIKys6l0=
Subject key identifier: 2E:12:1A:D0:6B:DD:67:CC:AA:D9:02:CE:D9:12:32:E2:DF:10:3D:3E
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 019D28BB0FBFF8FD8919C8FF1D2B7C484E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 159E
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: tgKvZqqhqtdZvqnqS/nL0PHDmb1hFQlX4afiGZItjwU=)
2: ElYKGJbVCeO4nsMvf9tBERFCNgM.roa (hash: cWN/smFbi1ZXWCehyRRWo6Eskyvhd6DZroKP2osgc5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0f:bf:f8:fd:89:19:c8:ff:1d:2b:7c:48:4e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=2e121ad06bdd67ccaad902ced91232e2df103d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:c4:5b:38:0b:9b:8c:93:0b:5b:0d:e8:aa:
c7:e3:d9:07:3a:21:3e:38:2c:b1:f2:e9:8e:d3:3c:
b7:88:10:e8:93:0c:f6:bc:36:a4:75:8e:cb:98:e7:
88:db:cd:0d:06:52:c3:8d:1e:dc:82:ae:7e:f1:50:
f0:02:4f:c2:42:04:00:22:e3:ab:c5:a3:91:19:20:
4c:79:37:9e:cd:97:bc:d4:b0:71:a3:dc:50:d8:b0:
0b:6f:e2:ca:12:3c:0f:e6:a4:d2:ec:cf:af:21:cc:
f4:80:49:6a:bd:96:c2:7a:aa:9d:f3:ce:c8:bb:26:
e4:2e:b5:be:b9:58:c8:ea:3c:91:ba:14:f3:a5:c6:
48:39:c3:b4:76:02:93:0d:18:a1:ce:2d:c2:d5:b3:
ab:e4:0c:ba:a8:d0:4e:29:85:88:64:49:6e:71:7a:
95:a7:a0:cf:9b:77:ca:1d:dc:6d:eb:7e:b7:00:6e:
9f:23:98:d9:3e:98:08:fc:7b:76:1a:53:c0:81:32:
70:b5:75:83:45:ad:84:cb:e2:69:bd:ce:87:7a:a4:
82:2e:8e:d5:e0:4b:53:a1:83:b0:bc:19:17:90:d2:
3f:db:0b:c2:fa:53:80:f5:cb:56:1e:fa:52:89:77:
e4:00:55:02:2d:d5:68:fd:57:75:2f:94:16:d4:cf:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:1A:D0:6B:DD:67:CC:AA:D9:02:CE:D9:12:32:E2:DF:10:3D:3E
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:fc:e3:a5:f8:1b:b7:07:cf:53:1e:ed:fd:db:7d:9d:76:
e6:e4:5a:0f:cc:d8:db:16:29:11:b7:36:65:5b:05:d2:18:34:
29:1b:ad:b6:74:0a:9b:51:11:01:41:df:3e:d9:5d:78:5a:54:
bd:b4:e4:d0:58:ec:ee:d6:af:54:64:fb:98:1e:0b:19:e5:4b:
2d:04:f1:8e:f5:5b:11:e8:ed:32:3e:0f:05:04:ba:4a:b5:6e:
fd:b5:2b:4d:b2:a2:af:29:68:da:30:d4:c4:60:82:49:1a:46:
4c:57:1e:a1:18:b2:99:56:fd:43:4d:99:57:c0:fe:1c:2b:eb:
0d:75:39:db:48:80:e4:1e:d7:02:30:f1:51:00:73:f6:8c:16:
a5:8c:cd:24:b6:a8:f0:1f:e8:98:5b:c5:0e:51:17:59:62:01:
9d:c0:c4:4e:39:ff:5f:2f:36:d0:4d:5e:4b:fe:4d:c7:32:db:
58:cb:3e:6b:f2:64:81:54:2b:e6:f4:1a:11:5c:9c:f1:8f:f7:
8a:34:ee:ee:5b:22:d8:9c:75:b5:06:d9:45:c6:e5:9a:f1:16:
eb:92:55:4c:16:d3:73:c1:56:21:4b:e5:be:a4:b8:7f:e6:4c:
59:c5:5d:9c:19:92:9c:09:15:1a:47:d6:b8:85:c8:cb:fd:cc:
0a:b2:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:51 2026 by rpki-client