Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: X92rr0CZIpKF7ljO/wtfCAGSAt74qRMVhYkC0u58u6k=
Subject key identifier: 42:2D:74:08:DD:AF:A7:BC:6A:AE:69:D2:74:79:AC:60:D9:8C:EF:E5
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019D378919F70AB3EEDBE44213AFDD7C4DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 9A
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: wR/iVzdlhsbSOGJISiOQMvmrB72jdCK1EuspqNRxqv0=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:19:f7:0a:b3:ee:db:e4:42:13:af:dd:7c:4d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=422d7408ddafa7bc6aae69d27479ac60d98cefe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:f7:d9:6e:a7:0e:3e:82:17:96:0c:f3:df:
84:d5:16:94:b1:8b:9c:ea:6b:de:6a:52:37:fa:b7:
dc:d0:3e:9a:78:7f:14:0a:f7:94:c2:51:d9:2e:a9:
2b:02:81:82:eb:f7:d4:d7:5b:05:a7:c0:9a:cb:d3:
58:5f:47:ff:e0:39:b1:e7:87:84:11:96:7d:b1:c6:
1e:7b:f7:c7:ad:90:c1:52:6a:9b:6b:d7:24:29:c6:
62:ec:0e:31:f7:12:24:7a:95:de:ce:55:e0:f5:64:
ef:64:9c:98:4d:c0:ea:61:e9:c9:1c:eb:33:69:2d:
3b:86:68:bd:5d:cb:9a:25:72:c1:24:f0:89:b5:e3:
b2:11:d7:c1:7d:01:19:bf:26:c5:5d:b5:86:8f:56:
26:b8:f8:ff:5b:51:85:b1:33:75:50:5f:19:a2:ef:
1d:f7:11:14:00:2e:41:3b:73:2d:22:04:16:55:7a:
a6:cf:ba:94:58:e7:b2:76:58:f7:05:d0:89:e1:f7:
be:9b:30:0d:fc:b6:e4:0e:6a:f7:eb:f2:bd:9f:9c:
82:59:e1:db:3c:6e:c4:15:96:04:ef:37:6d:26:94:
60:19:fd:cf:c6:6d:df:f8:95:c5:aa:97:14:55:1c:
b7:89:19:5d:aa:94:7b:4f:28:d6:b4:dd:e8:16:f5:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:74:08:DD:AF:A7:BC:6A:AE:69:D2:74:79:AC:60:D9:8C:EF:E5
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:25:c9:69:ff:87:00:55:80:b9:dd:a1:7b:e8:62:59:c0:28:
b5:24:b2:6e:bc:ac:60:89:91:bc:23:65:38:81:47:0b:be:24:
e0:cd:58:bf:64:26:f9:9e:9b:84:55:97:8f:76:16:78:b0:3e:
18:1c:e3:0e:1d:29:da:fb:1d:76:fe:a1:04:6b:18:93:c4:a9:
84:c2:ab:8b:a3:1c:d8:b1:60:d3:b3:9e:a3:af:f8:a6:65:1d:
ea:e1:2f:3d:96:c9:fc:c0:0f:d0:a1:8e:80:1c:b2:47:35:7b:
bc:51:dc:1c:58:5f:29:71:24:ec:21:f5:9f:09:e3:1a:09:85:
d4:9d:15:4c:5e:a7:33:36:d7:72:1c:1d:00:98:31:81:27:16:
b5:7b:d8:37:54:dd:cd:5d:60:e7:55:4f:fe:9f:34:cb:c0:7d:
e3:58:73:90:4b:c8:c2:07:56:44:39:b1:24:d6:4d:0e:c3:6e:
db:2a:1c:af:e6:9e:38:ab:6e:0a:ab:d5:e6:93:e3:44:90:c0:
be:3c:4d:1d:d1:6e:98:76:40:c0:0c:01:88:74:ea:d8:9e:8a:
aa:f5:30:da:a6:8a:6a:50:ce:9b:3a:48:c2:22:da:e7:2d:f6:
1e:93:03:0c:7a:ea:e7:b2:7b:7c:5b:aa:51:c2:de:67:77:41:
32:d4:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client