Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
File: DOf4uSjz9S4LuXZD007OWeuWNKM.mft (raw, json)
Hash identifier: Gbv5G3ylPEuS7kwvvx1I4bB+A0Nk0R4E6SjlHDioVAk=
Subject key identifier: 98:78:73:0D:9E:96:B2:DA:7A:D7:DE:53:57:27:6C:FA:C4:E0:FD:F4
Authority key identifier: 0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3
Certificate issuer: /CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3
Certificate serial: 019D386652B9FBE95F208F72BCDE9E7B01B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
Manifest number: 0223
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: DOf4uSjz9S4LuXZD007OWeuWNKM.crl (hash: LMTxvr7YORzIgjiQGAoZiFwI0wMP9b3H3jqc8+SAeJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:52:b9:fb:e9:5f:20:8f:72:bc:de:9e:7b:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=9878730d9e96b2da7ad7de5357276cfac4e0fdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:f7:a0:f3:47:6f:1c:03:1a:5d:74:4e:f9:
06:d5:ff:05:31:53:3b:9c:17:9b:4d:60:ff:72:05:
d5:d9:fe:16:a4:95:11:a3:71:ea:b9:13:ff:00:64:
7c:79:d3:e8:92:0e:f6:4a:4d:09:d7:c6:63:35:4f:
94:71:35:fe:64:0a:38:97:79:58:28:bb:f3:c5:7b:
67:ef:a1:48:e6:25:fc:a1:1f:8f:56:e9:71:c1:b4:
ee:55:a2:30:49:d9:c1:30:76:14:d5:fa:21:fd:6c:
55:ae:96:ff:c4:4a:32:b2:04:b8:12:a4:22:b3:68:
2f:3d:ea:fd:e7:23:18:de:71:b0:e5:34:6e:5c:56:
de:ea:e1:3f:98:9a:85:d0:6b:36:82:47:43:98:8b:
94:44:8e:09:36:18:fb:99:6f:e5:d3:80:ef:20:67:
b3:1b:05:18:26:5b:a0:f6:44:12:2e:9b:e2:02:48:
72:49:f1:a7:0e:ca:00:c0:b9:02:c3:5a:f4:b4:71:
48:1e:bb:4a:d9:31:68:de:c7:49:7a:37:cc:bd:67:
00:9a:60:59:a0:de:f7:16:7f:03:22:b5:2e:e8:e6:
1a:73:41:66:6e:77:d9:f2:c3:57:54:d6:0d:9a:e0:
da:d8:6d:25:0c:10:c3:14:62:b6:72:d0:7b:c6:dc:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:73:0D:9E:96:B2:DA:7A:D7:DE:53:57:27:6C:FA:C4:E0:FD:F4
X509v3 Authority Key Identifier:
keyid:0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:df:d2:b5:15:6c:89:03:e5:ba:21:8d:0b:78:25:46:66:e3:
ea:66:65:57:9e:da:18:4a:91:4f:8b:0c:8a:de:33:e5:43:ca:
ad:6b:44:5c:64:ac:83:b9:41:9c:44:9d:a7:48:fc:db:92:52:
ad:81:2c:9d:43:0d:35:3e:82:4e:70:d5:f1:ca:90:25:21:c3:
fc:fd:4b:78:24:d4:a5:18:6e:9a:61:be:7d:fa:f7:79:eb:c3:
f9:8b:a4:a7:0d:0d:33:c2:e4:e8:5d:ff:e5:05:ae:e0:ab:94:
48:6f:2d:f2:03:54:c4:4c:b0:48:48:e8:a9:09:12:bd:0d:f9:
da:04:c3:7c:b9:ef:1b:a1:6f:fe:21:87:e4:f8:63:81:b0:fd:
7e:21:06:66:a7:77:12:0a:4a:e7:ea:62:74:4d:a2:aa:64:67:
00:73:f6:da:83:28:98:8a:42:11:ea:37:6f:fe:c5:d6:99:77:
00:b3:89:01:f6:d9:ad:ac:81:74:79:90:bb:50:82:36:63:2f:
22:e4:61:96:8b:4c:66:17:6d:14:a3:bd:33:04:50:d3:f4:86:
63:68:70:a2:86:4d:e5:5a:a5:ce:86:f0:fc:f0:fe:27:58:25:
c8:82:8b:de:b1:b2:a0:84:8a:21:33:9e:62:d3:5a:f7:99:0e:
93:f2:44:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlK5++lfII9yvN6eewG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTdmOGI5MjhmM2Y1MmUwYmI5NzY0M2QzNGVjZTU5ZWI5
NjM0YTMwHhcNMjYwMzI5MDcwMjAyWhcNMjYwMzMwMDcwMjAyWjAzMTEwLwYDVQQD
Eyg5ODc4NzMwZDllOTZiMmRhN2FkN2RlNTM1NzI3NmNmYWM0ZTBmZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr133oPNHbxwDGl10TvkG1f8FMVM7
nBebTWD/cgXV2f4WpJURo3HquRP/AGR8edPokg72Sk0J18ZjNU+UcTX+ZAo4l3lY
KLvzxXtn76FI5iX8oR+PVulxwbTuVaIwSdnBMHYU1foh/WxVrpb/xEoysgS4EqQi
s2gvPer95yMY3nGw5TRuXFbe6uE/mJqF0Gs2gkdDmIuURI4JNhj7mW/l04DvIGez
GwUYJlug9kQSLpviAkhySfGnDsoAwLkCw1r0tHFIHrtK2TFo3sdJejfMvWcAmmBZ
oN73Fn8DIrUu6OYac0FmbnfZ8sNXVNYNmuDa2G0lDBDDFGK2ctB7xtxAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh4cw2elrLaetfeU1cnbPrE4P30MB8GA1UdIwQY
MBaAFAzn+Lko8/UuC7l2Q9NOzlnrljSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iZTM1OTMtNzk3Mi00ZGEzLWFlMTYt
MjkzZWM2MzIyOTY2LzEvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iZTM1OTMtNzk3Mi00ZGEzLWFlMTYtMjkzZWM2MzIyOTY2
LzEvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9/StRVs
iQPluiGNC3glRmbj6mZlV57aGEqRT4sMit4z5UPKrWtEXGSsg7lBnESdp0j825JS
rYEsnUMNNT6CTnDV8cqQJSHD/P1LeCTUpRhummG+ffr3eevD+Yukpw0NM8Lk6F3/
5QWu4KuUSG8t8gNUxEywSEjoqQkSvQ352gTDfLnvG6Fv/iGH5PhjgbD9fiEGZqd3
EgpK5+pidE2iqmRnAHP22oMomIpCEeo3b/7F1pl3ALOJAfbZrayBdHmQu1CCNmMv
IuRhlotMZhdtFKO9MwRQ0/SGY2hwooZN5Vqlzobw/PD+J1glyIKL3rGyoISKITOe
YtNa95kOk/JENw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:42 2026 by rpki-client