Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
File: DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft (raw, json)
Hash identifier: d+NjJFv+NmBTs/V0CUXaTzuV1KGuM7RLfhoKsl5ljBM=
Subject key identifier: C3:AA:B7:F6:07:D7:09:DC:B8:3D:49:0C:04:D5:50:0E:5B:3A:CA:3B
Authority key identifier: 0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
Certificate issuer: /CN=0e85fd3c9f9558b218022ff409fc554faee79090
Certificate serial: 01A001A640F18D95BFDBE32B33695A0D2065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 19:01:07 +0000
Manifest this update: Fri 14 Aug 2026 19:01:07 +0000
Manifest next update: Sat 15 Aug 2026 19:01:07 +0000
Files and hashes: 1: DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl (hash: NKv7Owb9f3Au1aloEwOsbRrynfO6S3Y0U76x1uzV8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:40:f1:8d:95:bf:db:e3:2b:33:69:5a:0d:20:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e85fd3c9f9558b218022ff409fc554faee79090
Validity
Not Before: Aug 14 19:01:07 2026 GMT
Not After : Aug 15 19:01:07 2026 GMT
Subject: CN=c3aab7f607d709dcb83d490c04d5500e5b3aca3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:21:95:4b:40:ae:43:4a:84:c5:c5:69:a2:
8e:90:64:3d:3b:55:7c:32:8b:bb:81:7c:b8:17:ac:
e8:20:e1:6a:ac:51:8e:10:5a:9c:67:3a:e1:ed:3c:
6a:9e:e8:39:c3:b1:b8:07:41:bc:07:17:f8:5e:93:
7b:b2:30:fd:9b:b8:01:fe:a2:a6:9b:b5:d4:1b:d0:
00:fd:df:03:12:07:f6:75:e8:ac:67:75:81:24:e8:
13:a5:21:65:21:21:f8:e5:4d:ff:ef:c3:bc:33:77:
2b:b9:cb:fd:3b:e2:28:64:94:54:8b:c5:97:1e:76:
a4:ac:43:d0:cd:30:af:f2:d8:40:c4:da:70:20:73:
70:c2:56:6a:15:8b:70:16:bd:3d:2e:39:1b:77:41:
d0:56:2a:13:b8:d6:41:33:b5:82:a6:ff:07:8e:d2:
64:5d:33:f4:cf:5a:ae:bf:04:27:22:d6:4e:68:53:
f3:4d:f7:19:22:13:6b:ed:2d:d1:1c:22:be:8e:6d:
5d:be:76:b2:77:ed:8b:a5:05:a2:c9:aa:37:5d:9f:
89:5f:c6:7c:ca:f5:15:93:1a:9d:0e:95:58:54:d7:
1c:0d:34:d1:0d:bc:f9:e0:3f:9e:0b:5b:03:30:83:
ad:8f:52:b0:db:ba:bc:6e:be:6f:ca:ca:7c:95:f1:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:B7:F6:07:D7:09:DC:B8:3D:49:0C:04:D5:50:0E:5B:3A:CA:3B
X509v3 Authority Key Identifier:
keyid:0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:57:a8:5b:91:9b:21:48:5a:7d:89:2f:3a:d6:81:17:f2:e8:
f4:0c:5c:30:a8:1c:7c:55:29:17:5f:4e:b4:90:1d:9e:d1:c2:
7a:71:94:0c:0c:3d:fa:2d:3c:44:17:22:4e:0a:25:93:31:d3:
ce:43:77:47:b2:e2:bc:fd:bd:20:d6:f9:04:f6:77:61:81:a5:
92:eb:e4:54:9d:fe:c3:bd:92:d3:8a:79:76:f9:74:cb:05:f3:
02:96:be:09:a0:42:ff:a6:3c:d6:66:79:31:1b:aa:c6:f2:a8:
bb:64:3e:e7:2e:a1:ea:08:62:b0:72:7f:fc:38:e7:52:c3:ca:
fb:a7:d5:f2:e8:a0:64:65:ef:f6:56:04:52:7e:6b:f2:92:a3:
f2:c3:f7:7f:f0:db:37:ae:d8:e3:01:1e:de:a4:64:2b:f4:43:
36:f0:f2:5f:dd:23:ee:e3:28:49:4d:b9:6d:77:2f:ec:11:41:
2a:22:23:47:8e:e8:52:c9:5e:52:48:90:32:7a:fd:26:e8:5d:
e4:86:a2:79:17:80:c3:e0:64:a5:a4:19:d0:72:4f:23:83:50:
ff:26:4e:3d:c8:f5:dc:0a:d9:fd:9c:d8:aa:f9:0a:e9:0d:8d:
9d:e8:33:53:8e:17:ac:aa:86:c5:dd:81:3c:27:35:a8:a8:f6:
11:84:45:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpkDxjZW/2+MrM2laDSBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODVmZDNjOWY5NTU4YjIxODAyMmZmNDA5ZmM1NTRmYWVl
NzkwOTAwHhcNMjYwODE0MTkwMTA3WhcNMjYwODE1MTkwMTA3WjAzMTEwLwYDVQQD
EyhjM2FhYjdmNjA3ZDcwOWRjYjgzZDQ5MGMwNGQ1NTAwZTViM2FjYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv38hlUtArkNKhMXFaaKOkGQ9O1V8
Mou7gXy4F6zoIOFqrFGOEFqcZzrh7Txqnug5w7G4B0G8Bxf4XpN7sjD9m7gB/qKm
m7XUG9AA/d8DEgf2deisZ3WBJOgTpSFlISH45U3/78O8M3crucv9O+IoZJRUi8WX
HnakrEPQzTCv8thAxNpwIHNwwlZqFYtwFr09Ljkbd0HQVioTuNZBM7WCpv8HjtJk
XTP0z1quvwQnItZOaFPzTfcZIhNr7S3RHCK+jm1dvnayd+2LpQWiyao3XZ+JX8Z8
yvUVkxqdDpVYVNccDTTRDbz54D+eC1sDMIOtj1Kw27q8br5vysp8lfFikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOqt/YH1wncuD1JDATVUA5bOso7MB8GA1UdIwQY
MBaAFA6F/TyflViyGAIv9An8VU+u55CQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9YOVBKLVZXTElZQWlfMENmeFZUNjdua0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iM2QzZDktNzkyOC00NThkLTgzNmUt
MzMwM2FmZTVjODliLzEvRG9YOVBKLVZXTElZQWlfMENmeFZUNjdua0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9iM2QzZDktNzkyOC00NThkLTgzNmUtMzMwM2FmZTVjODli
LzEvRG9YOVBKLVZXTElZQWlfMENmeFZUNjdua0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1eoW5Gb
IUhafYkvOtaBF/Lo9AxcMKgcfFUpF19OtJAdntHCenGUDAw9+i08RBciTgolkzHT
zkN3R7LivP29INb5BPZ3YYGlkuvkVJ3+w72S04p5dvl0ywXzApa+CaBC/6Y81mZ5
MRuqxvKou2Q+5y6h6ghisHJ//DjnUsPK+6fV8uigZGXv9lYEUn5r8pKj8sP3f/Db
N67Y4wEe3qRkK/RDNvDyX90j7uMoSU25bXcv7BFBKiIjR47oUsleUkiQMnr9Juhd
5IaieReAw+BkpaQZ0HJPI4NQ/yZOPcj13ArZ/ZzYqvkK6Q2NnegzU44XrKqGxd2B
PCc1qKj2EYRF+Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:34 2026 by rpki-client