Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: d5vUBxa3g8yA9/Vb5fFKPRoHnxpgbTkJkQaVTIGc3X0=
Subject key identifier: BA:02:34:37:63:F1:A4:CF:E5:7E:D0:2A:79:23:5F:E2:71:13:D9:CE
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 01A000C9F93FC2D94DB53802F954AAE18EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 15:00:31 +0000
Manifest this update: Fri 14 Aug 2026 15:00:31 +0000
Manifest next update: Sat 15 Aug 2026 15:00:31 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: /Ps1A7ttl6KIO6B9pwxLohB3F8X0d1r9PIdSWxNMOFs=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:f9:3f:c2:d9:4d:b5:38:02:f9:54:aa:e1:8e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Aug 14 15:00:31 2026 GMT
Not After : Aug 15 15:00:31 2026 GMT
Subject: CN=ba02343763f1a4cfe57ed02a79235fe27113d9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:00:90:8d:0b:16:55:fd:da:40:75:e9:e9:
7e:cd:cf:81:57:04:d8:63:a3:c1:11:a8:91:a1:1d:
b7:3f:b2:32:57:7f:87:b1:d8:2a:ed:b9:d8:c2:b1:
87:dc:0f:57:d6:c8:55:3f:de:13:d5:d4:83:a0:fc:
de:3f:f6:25:52:48:11:d4:86:1e:c6:e7:f2:e2:e0:
bf:62:33:05:42:99:43:3c:5b:75:b7:a4:60:3b:b8:
be:e6:4c:ed:65:cb:6a:54:db:15:76:34:75:0e:15:
93:29:7e:ff:cc:a2:c1:2a:90:b3:43:08:33:b2:5f:
1f:88:3b:d2:3d:d4:13:78:7a:d2:a6:4f:99:f6:81:
9a:6d:4c:fe:73:47:3f:93:5f:4d:f5:f3:01:be:5a:
d1:36:f8:c3:0a:62:c1:ee:92:71:76:8b:9e:be:6c:
31:01:1a:ee:cc:a7:77:7f:b5:bf:45:58:2a:e5:46:
91:61:0e:ab:5c:4e:1d:ba:1a:1c:70:eb:d3:6a:c8:
4e:18:47:eb:d8:5e:53:55:68:5d:ed:05:09:7b:91:
00:66:35:eb:06:fb:25:9c:b4:38:b7:f6:2c:a6:36:
c9:66:94:a1:9d:87:1e:7a:64:57:db:3d:2c:3a:36:
d9:9b:45:c5:86:5a:11:b5:66:fc:a0:dc:3e:3b:f5:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:34:37:63:F1:A4:CF:E5:7E:D0:2A:79:23:5F:E2:71:13:D9:CE
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:51:65:12:33:23:22:0f:73:74:ed:02:a1:8a:da:a5:91:e1:
61:e7:a2:79:52:d6:36:9b:e1:4f:cc:f1:95:96:2c:d8:72:cb:
1d:44:32:cc:b3:7e:d6:66:89:2e:08:c9:4f:ba:c6:8b:96:3e:
fc:ef:f4:5e:9e:b6:d0:24:0c:f9:3f:bf:a7:98:36:c4:fe:d7:
34:a3:87:03:b5:96:42:d2:af:1b:a7:77:df:4c:1d:69:65:bf:
62:73:b8:90:c1:ce:bf:aa:9a:a3:54:d3:17:d4:35:11:3a:9c:
a4:dc:e7:f4:a7:e7:7f:cb:b7:68:8a:af:ed:fb:64:b9:50:09:
f1:24:b4:95:92:da:72:0e:08:b4:e7:8f:94:f5:ac:fb:f2:0a:
48:7b:32:34:e3:4f:3f:4b:11:92:3d:d1:7f:03:d2:e9:a0:72:
b3:72:31:c6:f9:66:9e:f6:68:6f:02:37:b6:5f:ef:26:2a:1f:
f2:db:14:92:23:93:c9:9b:c8:72:88:49:30:4a:96:99:74:49:
c1:74:98:74:ae:d1:af:0c:23:84:29:89:9c:2a:9b:ae:78:59:
58:4c:f1:18:e1:83:8f:d7:71:ee:eb:ba:59:29:cb:07:17:6c:
f5:98:ad:d8:2b:0d:2f:97:c1:07:ed:57:c8:0d:b2:b5:65:e7:
9a:7a:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:44 2026 by rpki-client