Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: /zIB6PiLsEysYxqmGVeYraD9hlSIi628eXdgo/V4/5I=
Subject key identifier: A6:F0:E9:82:B3:BA:7E:09:1C:36:85:1E:3E:73:E1:46:E0:08:AC:7F
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 01A1AAF0836D25E4F0818BFB542F419FAF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 02E8
Signing time: Thu 05 Nov 2026 09:00:51 +0000
Manifest this update: Thu 05 Nov 2026 09:00:51 +0000
Manifest next update: Fri 06 Nov 2026 09:00:51 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: cMshkElEXphB1LMbShvVWWAeoGQwPeDwC3CcFT0B/0U=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:83:6d:25:e4:f0:81:8b:fb:54:2f:41:9f:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Nov 5 09:00:51 2026 GMT
Not After : Nov 6 09:00:51 2026 GMT
Subject: CN=a6f0e982b3ba7e091c36851e3e73e146e008ac7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:ab:0c:8b:a1:e5:54:7a:88:5b:64:2a:22:
7e:c6:2e:e4:54:a2:02:7c:bc:95:64:57:a5:51:25:
7d:f9:c9:4b:4d:e7:6c:f2:93:86:2e:34:0b:75:62:
2d:b5:87:20:fc:cc:60:86:a2:a6:9b:71:5e:aa:0a:
f9:30:c9:75:db:a9:9c:60:10:fc:a3:20:12:0d:37:
0d:d9:60:53:e4:4f:81:71:82:e7:2c:17:15:7c:e4:
d1:3c:2f:0c:da:59:c9:a0:47:b3:ec:7a:32:53:f6:
d4:45:40:5d:03:25:7c:8b:f1:df:1c:f0:e3:1c:56:
52:9a:89:3d:3c:6f:2e:59:12:2e:99:6c:64:d1:f7:
30:cf:f1:8c:9e:7b:bc:3f:b3:fd:4a:38:57:14:8f:
f2:a4:1c:70:7c:4d:b3:1f:66:e1:a9:96:ff:75:8e:
a7:8c:de:4c:46:07:a7:29:26:4a:e9:25:fd:04:29:
f3:ad:18:71:4a:fc:07:08:8d:8f:b2:e1:3d:77:5f:
3d:55:cf:5f:96:fb:b0:d5:e2:6c:08:f3:5c:c3:b1:
32:4a:f2:f4:74:0c:d9:30:f3:86:4f:f9:ff:00:2c:
c9:17:70:6f:c0:cc:48:b1:62:09:f0:8a:ec:39:71:
51:7c:7b:a8:d9:e0:92:22:15:6a:22:90:e0:aa:09:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:E9:82:B3:BA:7E:09:1C:36:85:1E:3E:73:E1:46:E0:08:AC:7F
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:34:40:70:4b:9f:21:8f:28:80:1d:94:5e:d5:b8:21:e1:bb:
15:07:16:33:d2:02:f5:3c:ae:8c:1a:8d:9a:7f:a7:04:38:35:
54:d2:43:55:16:a7:ae:7a:1e:5e:71:3c:5e:38:73:3c:a5:e1:
37:c9:e6:94:d3:4b:04:0f:da:c3:9b:eb:66:75:fa:19:67:c3:
7f:a8:b8:84:76:e7:41:ba:da:df:d9:18:f5:45:4f:61:a4:7d:
22:32:36:31:59:c1:9c:ef:e1:55:10:08:09:72:8f:68:8b:00:
65:9a:59:ee:53:44:09:c1:c1:d2:fd:61:26:25:42:d4:52:b6:
f5:ab:70:ea:50:87:4d:50:bc:3d:bd:e6:89:bb:5a:91:fe:87:
05:f1:5d:7b:36:4a:ab:3f:72:60:7f:d6:d6:33:64:0e:ce:6c:
05:47:a9:e3:d3:23:33:d1:48:fa:e5:a6:ff:83:d8:0b:d1:e9:
17:6e:b1:d2:5e:60:72:d0:96:69:84:25:5b:f3:3d:4f:d4:25:
04:c4:23:08:a4:4c:8c:6e:c2:f1:83:e5:e0:b8:ce:d6:5d:48:
0a:cc:93:25:4e:b1:82:b7:f9:66:ce:e3:5a:5b:df:1d:ef:7b:
c2:7d:53:5b:94:37:28:11:be:2a:2d:2b:86:a9:7a:06:ca:0d:
cb:46:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:44:58 2026 by rpki-client