Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: By6279gjRbHIpFmeUm1VQGbqnCxeX3syljIbWTH6w2Q=
Subject key identifier: F2:B7:04:A9:75:96:65:94:72:73:9F:35:38:83:D1:DE:19:5B:E0:71
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019CC9AD3698E160FB233CCD81AD464D6E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 61
Signing time: Sat 07 Mar 2026 19:01:37 +0000
Manifest this update: Sat 07 Mar 2026 19:01:37 +0000
Manifest next update: Sun 08 Mar 2026 19:01:37 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: wAfC/r0ngj2DnVcllBQ/hQaGE5gl7qbCFqLNvJr37r4=)
2: ndpzPSk3H3xw28qda6myjkObuX0.asa (hash: 1DRwpJ/PoAaH3WDBi1DxoV7aRX9CY7XDRgR72GoOVOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ad:36:98:e1:60:fb:23:3c:cd:81:ad:46:4d:6e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Mar 7 19:01:37 2026 GMT
Not After : Mar 8 19:01:37 2026 GMT
Subject: CN=f2b704a97596659472739f353883d1de195be071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:d2:2d:59:81:43:1a:dc:65:93:37:66:7a:
76:da:18:35:c2:f3:99:83:38:dc:91:30:b9:c4:bc:
bb:ef:db:49:08:c0:05:09:f0:f8:cb:7b:70:b7:59:
27:db:1d:1e:44:2b:ce:13:0f:c0:88:df:88:49:52:
aa:39:30:0a:99:d6:6f:a1:a8:eb:8d:4d:9d:23:13:
41:bf:5b:0c:03:9f:95:84:78:f2:fa:6c:2d:4a:7b:
73:0f:ab:f9:3f:97:58:33:d9:7c:1e:97:31:ee:54:
77:fa:a4:54:99:18:f1:e6:ee:e9:d5:47:f3:0a:1e:
5e:ce:1c:e6:6f:3a:15:31:04:4a:8b:a6:ce:3f:d9:
ee:3c:45:f2:7a:e2:ca:0e:4a:ec:af:b7:ab:7b:21:
bb:2c:c6:e2:ac:9f:f0:2f:dd:2c:16:ed:87:76:bf:
05:8d:72:c7:e6:85:9a:2c:22:7b:12:1c:72:07:4b:
3e:82:f7:7c:e0:22:05:17:cd:da:57:91:5d:1b:d2:
71:bc:59:49:03:87:41:dc:89:20:0c:e4:43:c1:06:
5e:23:2a:8e:96:bd:f0:c7:9e:f5:25:aa:45:91:92:
28:a2:d2:9d:f9:13:1d:77:66:77:5d:1e:00:d4:b8:
1d:b1:27:cc:84:c4:f7:9e:63:bd:58:56:f7:be:1c:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:04:A9:75:96:65:94:72:73:9F:35:38:83:D1:DE:19:5B:E0:71
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:46:b3:8f:9d:47:67:0a:73:f9:40:ec:2c:2c:a1:ec:d0:
d7:7e:60:5a:67:0a:da:ca:2c:1a:5d:0b:72:6e:75:a0:f5:51:
27:c2:1c:13:a8:66:d6:30:8c:ac:52:24:a3:a6:b4:66:39:05:
67:43:27:38:10:54:aa:63:0b:7a:12:7b:e7:63:df:b4:4c:eb:
00:f3:7c:16:c3:c4:c3:3b:2c:6f:a6:1c:99:4f:d1:ed:74:c9:
0f:03:28:98:18:4d:7d:ef:59:ed:01:35:d4:13:26:b2:75:3a:
9f:a1:2a:19:57:b5:bf:31:dc:7f:c6:5c:b1:d0:48:4e:8a:15:
2f:20:31:9a:13:93:8f:24:3b:92:ee:50:a5:08:d8:92:f9:77:
4a:27:90:54:f9:ac:98:e5:24:0f:52:a5:22:35:2c:e1:f1:69:
b5:9e:b4:f1:a6:15:26:77:07:78:41:37:2e:75:80:a7:2b:a8:
dc:e7:8b:ca:f3:07:9e:cd:04:84:c8:e6:1b:10:cb:0f:5d:18:
f0:80:71:4e:a4:8f:70:cf:52:5e:b7:ab:d1:8b:37:2c:39:64:
b2:62:b6:1b:71:c9:7c:07:34:fd:3e:c2:cb:a0:a1:fe:43:24:
83:77:24:90:26:b2:18:c3:50:85:e3:2a:21:92:e9:d8:52:9c:
a9:f9:c3:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJrTaY4WD7IzzNga1GTW50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTBjMGQ3MzA4MWQ3NTI5MTZiZTNiNmU2YzBhODdjMzBm
N2U0MTQwHhcNMjYwMzA3MTkwMTM3WhcNMjYwMzA4MTkwMTM3WjAzMTEwLwYDVQQD
EyhmMmI3MDRhOTc1OTY2NTk0NzI3MzlmMzUzODgzZDFkZTE5NWJlMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KfSLVmBQxrcZZM3Znp22hg1wvOZ
gzjckTC5xLy779tJCMAFCfD4y3twt1kn2x0eRCvOEw/AiN+ISVKqOTAKmdZvoajr
jU2dIxNBv1sMA5+VhHjy+mwtSntzD6v5P5dYM9l8Hpcx7lR3+qRUmRjx5u7p1Ufz
Ch5ezhzmbzoVMQRKi6bOP9nuPEXyeuLKDkrsr7ereyG7LMbirJ/wL90sFu2Hdr8F
jXLH5oWaLCJ7EhxyB0s+gvd84CIFF83aV5FdG9JxvFlJA4dB3IkgDORDwQZeIyqO
lr3wx571JapFkZIootKd+RMdd2Z3XR4A1LgdsSfMhMT3nmO9WFb3vhwL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK3BKl1lmWUcnOfNTiD0d4ZW+BxMB8GA1UdIwQY
MBaAFAzgwNcwgddSkWvjtubAqHww9+QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTkt
ZmViODQyN2NmZTIxLzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTktZmViODQyN2NmZTIx
LzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM99Gs4+d
R2cKc/lA7CwsoezQ135gWmcK2sosGl0Lcm51oPVRJ8IcE6hm1jCMrFIko6a0ZjkF
Z0MnOBBUqmMLehJ752PftEzrAPN8FsPEwzssb6YcmU/R7XTJDwMomBhNfe9Z7QE1
1BMmsnU6n6EqGVe1vzHcf8ZcsdBITooVLyAxmhOTjyQ7ku5QpQjYkvl3SieQVPms
mOUkD1KlIjUs4fFptZ608aYVJncHeEE3LnWApyuo3OeLyvMHns0EhMjmGxDLD10Y
8IBxTqSPcM9SXrer0Ys3LDlksmK2G3HJfAc0/T7Cy6Ch/kMkg3ckkCayGMNQheMq
IZLp2FKcqfnDPw==
-----END CERTIFICATE-----
Generated at Sun Mar 8 05:03:55 2026 by rpki-client