Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: 2YVjzzfuUUHRx0Tt/ieIB9HayfXVsU6QSwCSmgwx0AY=
Subject key identifier: 41:C3:75:E1:32:84:7A:DD:51:29:09:83:36:81:66:C7:80:0C:C6:AE
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019F190C949F0308C65D1BC4FDDC4B138B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:22 +0000
Manifest this update: Tue 30 Jun 2026 15:01:22 +0000
Manifest next update: Wed 01 Jul 2026 15:01:22 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: iNtNXgspaB+T5fcw6XYLSQklVMxgKDW92b7AdeOGFRg=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:94:9f:03:08:c6:5d:1b:c4:fd:dc:4b:13:8b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Jun 30 15:01:22 2026 GMT
Not After : Jul 1 15:01:22 2026 GMT
Subject: CN=41c375e132847add51290983368166c7800cc6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:91:18:9e:e1:04:cd:b4:66:be:e3:da:bc:
73:0b:32:bc:58:ea:90:95:80:e0:32:09:77:93:2f:
d9:7f:39:3d:6a:ea:d5:67:d1:d4:37:5c:45:4e:06:
c4:7c:66:83:22:72:cc:78:c7:c5:91:16:83:04:82:
89:85:d1:59:40:64:8a:0b:48:6d:53:d4:8c:8d:93:
48:cd:af:2f:df:d4:c3:74:a2:a1:1e:61:28:4f:36:
e7:1f:69:33:29:37:64:0d:b4:b6:43:73:a3:0e:71:
af:9e:ee:c1:a4:a8:e2:53:4a:72:a4:2f:4a:e4:70:
35:fa:6a:45:9a:03:be:92:11:a4:99:81:7e:ab:12:
fe:e0:c0:12:73:5a:ba:c2:5e:fd:ab:14:93:fd:16:
5c:c0:43:d3:13:43:74:3f:a5:28:3c:21:10:69:ba:
5d:f9:29:73:b2:cc:64:6d:e5:f3:82:12:9b:60:6e:
7b:5c:5e:2d:f8:86:7c:65:ac:67:5c:07:be:28:39:
6c:20:a1:d3:71:8b:1e:8f:41:8d:45:74:b0:33:c5:
36:b6:77:3d:53:af:3f:25:ee:1b:bd:ea:9d:f1:ac:
8f:2f:84:8f:0d:1c:88:e3:09:67:18:fd:d9:49:29:
51:3c:26:ad:eb:51:d5:e6:b8:e6:ba:86:47:8c:35:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:75:E1:32:84:7A:DD:51:29:09:83:36:81:66:C7:80:0C:C6:AE
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:be:26:25:66:4a:cd:b6:ba:38:4b:11:5d:79:23:af:56:a0:
27:a4:23:70:1e:dd:3d:72:e2:df:4d:51:d8:01:ab:ba:0b:6f:
61:4f:9a:d7:d8:1a:9d:07:e0:43:c3:63:54:3b:e9:f6:cd:4d:
ca:d9:26:8c:08:7b:6e:3a:c5:6f:58:eb:0c:c8:ec:e1:6a:98:
14:9f:d0:b0:72:78:bc:a9:52:0f:47:a5:02:8d:1b:9a:e9:a5:
cb:5c:8e:47:e4:11:0a:b1:8b:92:ef:c6:0c:cb:20:69:39:08:
56:d0:cc:52:0f:c0:38:c7:78:37:f3:3c:f8:71:2d:64:29:02:
eb:1e:7f:44:a9:76:43:bf:c0:13:44:4d:cf:31:73:d6:c7:89:
6d:e1:36:12:5e:08:4a:9f:e3:78:ce:30:fe:1f:02:e2:0b:b6:
a9:5e:80:9c:0a:b5:6f:e0:50:e0:3c:10:19:2d:3b:fe:11:ea:
d4:f6:60:31:f7:37:06:d9:a6:46:56:27:ca:fd:8c:a2:2b:5a:
ce:34:be:ff:ca:bb:b9:02:14:98:65:1d:aa:b9:7f:1d:db:0f:
6e:ba:90:fb:f9:96:15:00:54:d8:d8:99:10:fe:da:9d:40:a9:
67:f9:7c:c1:1e:52:d5:76:29:8d:79:47:74:ef:6e:5f:2e:89:
5e:5a:98:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:45 2026 by rpki-client