Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: wsm0+B8TBOA/8eMrpWXFfczg03ccRpn0FCTuu1LQxTg=
Subject key identifier: 20:37:4E:C3:8E:00:5C:C3:F3:43:EC:02:8C:B2:B2:88:0B:26:E8:01
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 01A13F70013C2F413E1598E55368481AC18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 12:01:07 +0000
Manifest this update: Thu 15 Oct 2026 12:01:07 +0000
Manifest next update: Fri 16 Oct 2026 12:01:07 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: W/6BVGNWPApljfAGT7YIcZl14IALn0X/B32EUw/413g=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:01:3c:2f:41:3e:15:98:e5:53:68:48:1a:c1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Oct 15 12:01:07 2026 GMT
Not After : Oct 16 12:01:07 2026 GMT
Subject: CN=20374ec38e005cc3f343ec028cb2b2880b26e801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:d9:cc:cc:49:41:64:74:52:4a:5f:05:5e:
6b:15:74:73:5d:c7:4b:39:b0:47:a9:1d:0d:d7:02:
97:99:b7:db:a4:a1:c1:b9:cd:a9:16:f2:ee:aa:32:
0b:c7:12:55:5e:2d:98:0c:d5:7e:f5:62:de:ee:53:
5b:e6:7a:ce:62:9c:c5:39:94:14:24:38:33:3c:22:
e8:39:d6:66:4f:2c:3f:cb:37:a6:c2:42:99:28:bd:
1b:28:dd:4d:27:99:d6:12:d2:4a:36:1d:47:84:3b:
b4:1c:e1:9d:73:ba:2c:b8:4c:d4:1c:c8:80:84:d7:
c7:17:aa:d9:d7:6b:93:21:1a:32:e8:34:53:b8:4e:
22:16:72:89:89:ce:5f:89:82:e9:f6:a4:5d:45:2f:
12:a8:93:ac:0e:2a:06:09:a9:e2:71:89:d8:88:77:
72:b7:f9:b7:7a:7a:b5:2d:82:e1:7c:bc:63:06:fe:
90:d3:32:33:a3:05:36:ca:00:f1:c9:15:9e:ed:2a:
f7:9b:d1:4f:81:57:93:fb:b7:91:0e:94:c5:84:0a:
d5:b8:49:2a:4d:fc:04:f4:08:34:62:0d:6c:b0:a5:
ba:0f:b2:ca:1d:d0:a9:91:62:1a:69:21:21:af:6c:
69:c9:18:d5:3c:c9:b2:cd:1b:8f:0d:77:18:3b:37:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:4E:C3:8E:00:5C:C3:F3:43:EC:02:8C:B2:B2:88:0B:26:E8:01
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:52:4a:4b:fb:20:e5:6a:4d:a6:9d:c5:c1:36:aa:b8:0b:2a:
d6:9b:a3:8b:da:31:d4:fa:7e:3e:2f:c3:49:00:44:bf:80:13:
6c:36:c8:e5:3c:1a:96:a9:c5:f7:45:10:24:08:29:b0:83:a0:
4c:40:aa:f4:64:c1:2c:24:ab:d2:53:9f:08:13:e7:e8:8a:15:
c0:2b:34:87:da:ee:4c:73:b7:d3:19:16:6f:c7:c0:4e:5c:f8:
3e:10:ca:b4:a9:61:ff:af:0f:5f:51:af:d3:48:0d:a0:13:d5:
01:8b:69:73:fa:4d:d0:e7:79:63:f9:5e:af:b3:d5:cd:9f:70:
97:b0:19:cf:a2:72:bc:91:ab:f8:af:b1:8b:97:df:67:b2:e8:
de:7a:8e:3b:23:c2:ea:43:8e:de:3f:b0:f2:2a:86:7d:a7:8f:
f7:b1:3a:75:78:67:2a:0f:d8:43:08:57:79:aa:ad:49:ca:c4:
27:d8:e5:90:2d:0d:c7:c7:b6:5e:53:db:42:af:96:7e:54:a4:
98:e6:a5:96:cd:85:7d:c3:e5:e8:11:20:95:9b:3a:a5:e4:7b:
88:f8:eb:60:3d:27:9b:67:74:87:78:a7:57:79:89:8c:48:9f:
61:0f:e0:ef:a9:b6:76:aa:d8:40:9a:e3:ea:a4:69:0e:34:7b:
8f:a7:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:15:29 2026 by rpki-client