Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: gYRCJAj1Q8KjbqxBopvh2TnvxKebns3cMOuaBzv1HOU=
Subject key identifier: 50:F3:71:0D:31:19:51:E8:47:44:F2:E5:7F:24:87:0F:F9:39:0F:D0
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019D382E83318D281FFEBEA7F2EA4CE3F863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: NPBZejpWtU/2ACIA6K5VDhVoxWf2YQhrPna17nnabAw=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:83:31:8d:28:1f:fe:be:a7:f2:ea:4c:e3:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=50f3710d311951e84744f2e57f24870ff9390fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:f8:21:cb:7d:48:c7:3c:5c:ef:e2:64:f6:
5f:5e:b7:08:6e:51:5d:6e:48:5d:63:ce:51:98:6b:
5a:0e:54:c8:16:67:91:a9:be:c5:95:4b:b3:b4:17:
6e:98:df:10:5f:98:b9:64:94:c4:f2:d0:17:a7:4f:
2b:92:8f:16:a6:ac:a0:d1:3a:94:0b:6e:0b:e8:8d:
a2:70:5f:87:90:97:ba:f3:9f:8a:c4:43:fc:a0:1a:
93:f6:f6:2c:2a:41:60:65:d9:95:c2:98:cc:74:30:
93:cb:0b:6b:8a:94:ab:e4:0a:e5:ed:e5:9d:e3:a5:
bb:6f:d7:4e:a1:dd:7a:44:d2:de:2a:ab:15:e5:6d:
70:97:79:22:ca:0b:21:05:a8:af:92:42:8b:ff:6e:
de:1c:b4:a1:13:67:b6:11:f2:f9:5b:99:bb:40:83:
31:82:8e:c2:96:85:f0:fb:c2:99:c2:85:79:3e:17:
a2:c7:6e:1a:e0:db:23:23:29:b6:d8:ad:c4:35:ec:
69:b0:a5:32:8b:6a:47:9e:f4:27:73:85:6e:89:ee:
d0:26:8e:15:8c:d1:16:ee:4e:95:c5:38:7c:56:94:
66:1e:66:2c:6f:a0:6e:88:83:4b:e6:91:68:42:3c:
28:08:8e:96:ce:18:88:f2:c8:f2:24:e9:42:62:fa:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:71:0D:31:19:51:E8:47:44:F2:E5:7F:24:87:0F:F9:39:0F:D0
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ec:d5:5c:f3:30:46:70:85:0b:87:2a:20:0d:de:d3:31:4d:
ca:b3:d0:49:ca:d9:41:3a:eb:ca:b9:e3:50:79:6c:47:39:b1:
d9:1d:18:3b:a6:53:5e:9f:2f:8e:b7:a0:12:be:56:20:4f:88:
bc:15:8e:a0:1c:d9:b5:28:ba:bf:7c:21:95:44:34:e9:f3:1e:
fd:73:69:82:38:5e:d0:3a:c6:16:fd:8f:74:dc:da:15:99:cf:
2b:d1:87:2c:ed:61:ee:01:3f:04:73:a5:9a:f5:7e:2a:18:11:
f8:8c:52:03:80:f8:63:bb:cc:26:5e:14:46:aa:bb:08:ae:f3:
db:35:6e:f7:c6:b0:e2:c7:25:5c:b7:2a:41:d8:9d:a4:75:20:
4d:1f:85:e9:d4:46:69:d7:3d:de:41:c3:f4:2c:04:cf:7f:5b:
ea:3e:85:5a:c2:72:c8:6b:8f:c9:92:be:8f:42:62:79:61:8c:
67:ac:aa:dd:20:55:4c:bd:74:fc:df:5f:02:ce:8f:b5:d5:6b:
1c:e9:5a:7e:6f:16:be:7e:5b:43:12:0e:72:ba:f7:eb:05:51:
68:ee:a0:03:41:3e:c6:fd:22:b1:8f:a1:e5:28:ec:af:8d:10:
35:d7:bf:77:9c:02:67:7e:9d:36:17:55:55:a2:0d:cf:68:61:
69:96:83:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LoMxjSgf/r6n8upM4/hjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYzNhZDVmZjY1YjhkY2I0NzYyMjlmMTJkNDU3ZDc3NjFh
MGI5N2MwHhcNMjYwMzI5MDYwMTA1WhcNMjYwMzMwMDYwMTA1WjAzMTEwLwYDVQQD
Eyg1MGYzNzEwZDMxMTk1MWU4NDc0NGYyZTU3ZjI0ODcwZmY5MzkwZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKf4Ict9SMc8XO/iZPZfXrcIblFd
bkhdY85RmGtaDlTIFmeRqb7FlUuztBdumN8QX5i5ZJTE8tAXp08rko8Wpqyg0TqU
C24L6I2icF+HkJe685+KxEP8oBqT9vYsKkFgZdmVwpjMdDCTywtripSr5Arl7eWd
46W7b9dOod16RNLeKqsV5W1wl3kiygshBaivkkKL/27eHLShE2e2EfL5W5m7QIMx
go7CloXw+8KZwoV5Pheix24a4NsjIym22K3ENexpsKUyi2pHnvQnc4Vuie7QJo4V
jNEW7k6VxTh8VpRmHmYsb6BuiINL5pFoQjwoCI6WzhiI8sjyJOlCYvoKzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDzcQ0xGVHoR0Ty5X8khw/5OQ/QMB8GA1UdIwQY
MBaAFA7DrV/2W43LR2Ip8S1FfXdhoLl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzIt
YjhhYWIzMzIzNTI0LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzItYjhhYWIzMzIzNTI0
LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfezVXPMw
RnCFC4cqIA3e0zFNyrPQScrZQTrryrnjUHlsRzmx2R0YO6ZTXp8vjregEr5WIE+I
vBWOoBzZtSi6v3whlUQ06fMe/XNpgjhe0DrGFv2PdNzaFZnPK9GHLO1h7gE/BHOl
mvV+KhgR+IxSA4D4Y7vMJl4URqq7CK7z2zVu98aw4sclXLcqQdidpHUgTR+F6dRG
adc93kHD9CwEz39b6j6FWsJyyGuPyZK+j0JieWGMZ6yq3SBVTL10/N9fAs6PtdVr
HOlafm8Wvn5bQxIOcrr36wVRaO6gA0E+xv0isY+h5Sjsr40QNde/d5wCZ36dNhdV
VaINz2hhaZaD5A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:58 2026 by rpki-client