Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: xrLTYFks5kPAY9/zkRKN6wbcaoKGaKvKJCJfE14e760=
Subject key identifier: 8B:0E:F9:CE:29:6B:13:7A:35:0E:9B:49:A1:45:A6:AF:7D:A5:6B:99
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 01A151086EC295A5E97667D42823FF09D552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 18EB
Signing time: Sun 18 Oct 2026 22:01:09 +0000
Manifest this update: Sun 18 Oct 2026 22:01:09 +0000
Manifest next update: Mon 19 Oct 2026 22:01:09 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: RnBMdoTPdIKHM3KdpeDrU+DylbAZOjB+gtW70SbTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:6e:c2:95:a5:e9:76:67:d4:28:23:ff:09:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: Oct 18 22:01:09 2026 GMT
Not After : Oct 19 22:01:09 2026 GMT
Subject: CN=8b0ef9ce296b137a350e9b49a145a6af7da56b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:c3:86:e5:09:91:59:41:7e:51:c1:30:38:
0f:8f:ef:7b:85:29:17:4e:55:e8:27:13:2b:3f:30:
ba:8e:37:9c:d0:76:96:3f:15:a8:35:d1:9e:d6:e7:
8d:d8:e0:42:ac:68:94:38:50:42:f6:bb:f2:df:bf:
e8:3d:80:b3:1a:81:1c:a8:c9:00:2e:7d:89:6a:21:
0a:1a:be:c6:18:84:bf:e7:04:a9:b9:f7:2c:89:e0:
70:be:bc:2a:38:b9:71:4f:64:57:e6:12:3c:f7:2a:
1c:41:e3:6a:ea:c9:ec:60:98:51:97:d5:12:6f:ee:
7d:c4:7f:f4:ee:57:6b:6b:6a:45:c1:e9:24:a9:03:
fc:b8:f9:a0:25:01:b5:59:4e:f8:e5:4e:c0:05:37:
7c:17:8e:6e:26:7d:35:c4:a0:1d:71:c5:bf:33:bc:
d6:47:38:6f:27:eb:72:e1:da:db:35:b6:37:21:61:
2a:7d:f0:86:e8:ad:ce:2a:73:0c:df:07:46:c5:b7:
1e:e9:f1:58:27:11:23:e4:57:69:96:75:c6:25:14:
9b:48:cb:76:22:05:dd:7e:dc:67:62:80:d5:26:f4:
66:35:4b:76:c9:30:5c:4f:25:4f:f1:99:4b:e1:5a:
4d:e0:8d:52:1b:b5:96:bf:24:50:13:af:59:b5:f3:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:F9:CE:29:6B:13:7A:35:0E:9B:49:A1:45:A6:AF:7D:A5:6B:99
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4c:51:4c:41:6e:9a:5d:f1:58:5e:8e:9c:70:36:b7:3b:a6:
f1:6b:66:a9:02:68:4c:8f:f4:b5:d4:b0:43:a6:df:d2:a2:81:
ae:e5:f1:ed:28:d1:2a:cf:8a:91:92:42:1a:86:bd:2e:97:c2:
51:33:23:1e:03:89:2b:db:6a:fb:83:38:13:25:3a:35:1b:65:
e6:90:bc:6d:41:d9:47:53:e0:e9:15:90:05:88:7c:84:7d:f8:
b8:87:b2:28:39:ba:81:a6:ca:b0:ef:da:19:f7:ee:d4:ee:69:
a6:e7:9e:79:2a:ee:6f:44:59:ac:29:d5:61:8b:c0:53:c6:f7:
58:34:7c:0c:68:03:70:1c:82:e1:45:8b:a0:bc:fd:10:59:e5:
73:e5:0f:a0:09:d3:c4:3a:a0:41:22:08:bd:93:0d:ec:4f:89:
6d:81:7d:54:63:11:fb:7e:6b:24:17:93:e4:d2:03:eb:c8:a7:
26:6e:70:f2:86:fd:68:fd:a1:d9:d9:54:da:e1:b6:26:fa:dc:
11:6a:a4:02:c6:94:f7:29:f5:ee:ca:af:50:8a:5b:af:2d:cc:
4d:e6:e7:93:22:f0:6a:50:fa:6f:11:14:05:d8:31:7a:e6:0b:
63:f9:69:f4:7a:c0:6b:28:a2:b3:80:5f:f6:bd:9f:66:73:21:
d7:bd:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:06:57 2026 by rpki-client