Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: 1rSxB22HVYR7afurxP+XeL3PLp7EAAj5egVLi67f2kw=
Subject key identifier: 14:9E:F7:AE:86:3D:C5:FF:AB:3D:04:78:D3:EE:E2:71:56:BB:F9:56
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 01A03C033B41F83325116E3DDD3AEECAC21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 022A
Signing time: Wed 26 Aug 2026 03:00:39 +0000
Manifest this update: Wed 26 Aug 2026 03:00:39 +0000
Manifest next update: Thu 27 Aug 2026 03:00:39 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: POTl9dBg1Xt4gs+KAhtLJDV1238e4TSXpbZIjKF2NJQ=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:03:3b:41:f8:33:25:11:6e:3d:dd:3a:ee:ca:c2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Aug 26 03:00:39 2026 GMT
Not After : Aug 27 03:00:39 2026 GMT
Subject: CN=149ef7ae863dc5ffab3d0478d3eee27156bbf956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:0a:ef:da:bf:6d:1a:39:85:7e:30:27:19:
3b:e6:46:10:eb:cb:62:bc:b4:2c:2f:6c:44:4d:ca:
c5:be:2e:0f:69:09:ac:32:75:b7:b1:fb:a9:df:24:
ee:c7:a5:11:b5:f0:f4:87:5c:a9:80:23:c7:7d:03:
76:a0:83:15:67:74:e5:47:72:3b:ae:b2:91:9d:c0:
6c:17:3f:12:84:1b:7d:bb:8a:30:7a:7f:32:3d:6c:
f2:1e:13:0c:d1:dd:34:93:50:89:61:ce:3b:66:89:
65:48:09:09:79:0f:62:d9:1f:45:84:cf:5d:5b:99:
05:15:2a:ef:aa:23:9d:b9:de:b9:fa:f7:29:51:df:
0a:65:2d:14:81:cd:d6:01:b2:55:f0:42:37:c9:1f:
c2:f6:95:57:5a:4c:bc:52:27:a6:64:e9:bf:36:da:
5f:e1:19:ed:1b:aa:14:3b:b5:fc:c7:af:50:2b:fa:
c2:3b:ca:ee:49:eb:0a:97:1c:3b:29:c6:d3:60:dc:
d0:c5:c7:ec:9c:04:49:df:a9:97:c0:2f:ea:36:46:
cc:4e:9f:4b:dc:8d:9d:c1:42:da:2c:36:03:74:ed:
c1:75:e0:3b:b8:2c:09:10:94:59:93:eb:8e:42:92:
5d:f5:41:71:13:27:dd:ab:26:46:86:02:6c:8f:ea:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9E:F7:AE:86:3D:C5:FF:AB:3D:04:78:D3:EE:E2:71:56:BB:F9:56
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:b1:e7:f3:a8:5a:e8:e2:48:44:b8:a4:98:6b:37:34:7d:
cf:e1:ba:ea:a1:bd:25:cc:68:28:a9:77:32:1a:d8:4b:b6:dc:
08:21:c4:ee:a4:7a:a3:bb:9e:bd:11:fd:5a:35:57:dc:71:e2:
35:56:88:f1:c1:00:e9:34:d7:ce:c1:5a:63:d8:2b:44:46:ee:
07:61:8d:c9:f6:53:95:f9:11:4e:ee:63:6d:de:86:74:96:a5:
86:b8:fc:f0:0b:b1:7a:35:88:ba:ba:99:11:a0:c6:9c:72:62:
e6:fb:04:b4:57:9b:71:06:49:ad:73:ec:e5:43:9e:a4:e5:ce:
6e:c0:15:03:b5:53:28:64:f5:8c:3e:71:02:96:79:76:f7:93:
8a:e5:48:41:8c:1b:d7:42:c1:fa:4c:fc:28:c2:35:46:74:96:
26:81:96:bf:54:a8:f6:d1:36:3a:de:ee:41:72:d6:1f:63:f7:
a4:15:ba:42:c7:1e:62:9b:19:7a:c6:6f:6c:a7:6a:bf:5f:52:
bd:f1:64:6b:34:e2:6d:e2:1f:f9:90:ba:c0:60:50:c0:fe:f0:
75:73:4f:a3:5d:23:54:7a:8d:38:cc:4b:ee:34:51:7b:d8:97:
fd:9c:3c:bb:ae:b7:74:ea:75:c2:45:d6:8e:ab:5c:ab:4a:a8:
50:08:a2:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8AztB+DMlEW493TruysIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTBjMGQ3MzA4MWQ3NTI5MTZiZTNiNmU2YzBhODdjMzBm
N2U0MTQwHhcNMjYwODI2MDMwMDM5WhcNMjYwODI3MDMwMDM5WjAzMTEwLwYDVQQD
EygxNDllZjdhZTg2M2RjNWZmYWIzZDA0NzhkM2VlZTI3MTU2YmJmOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSoK79q/bRo5hX4wJxk75kYQ68ti
vLQsL2xETcrFvi4PaQmsMnW3sfup3yTux6URtfD0h1ypgCPHfQN2oIMVZ3TlR3I7
rrKRncBsFz8ShBt9u4owen8yPWzyHhMM0d00k1CJYc47ZollSAkJeQ9i2R9FhM9d
W5kFFSrvqiOdud65+vcpUd8KZS0Ugc3WAbJV8EI3yR/C9pVXWky8UiemZOm/Ntpf
4RntG6oUO7X8x69QK/rCO8ruSesKlxw7KcbTYNzQxcfsnARJ36mXwC/qNkbMTp9L
3I2dwULaLDYDdO3BdeA7uCwJEJRZk+uOQpJd9UFxEyfdqyZGhgJsj+oL2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSe966GPcX/qz0EeNPu4nFWu/lWMB8GA1UdIwQY
MBaAFAzgwNcwgddSkWvjtubAqHww9+QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTkt
ZmViODQyN2NmZTIxLzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTktZmViODQyN2NmZTIx
LzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2ex5/Oo
WujiSES4pJhrNzR9z+G66qG9JcxoKKl3MhrYS7bcCCHE7qR6o7uevRH9WjVX3HHi
NVaI8cEA6TTXzsFaY9grREbuB2GNyfZTlfkRTu5jbd6GdJalhrj88AuxejWIurqZ
EaDGnHJi5vsEtFebcQZJrXPs5UOepOXObsAVA7VTKGT1jD5xApZ5dveTiuVIQYwb
10LB+kz8KMI1RnSWJoGWv1So9tE2Ot7uQXLWH2P3pBW6QsceYpsZesZvbKdqv19S
vfFkazTibeIf+ZC6wGBQwP7wdXNPo10jVHqNOMxL7jRRe9iX/Zw8u663dOp1wkXW
jqtcq0qoUAiiLA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:07:33 2026 by rpki-client