Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: 2Zr5z5F1IoQjpNHqfU4Jlw9carYApWXBtHWZKPnCSJs=
Subject key identifier: 1F:B4:92:CB:40:5F:CE:D0:40:99:7A:C3:04:6C:8B:66:B0:E6:B4:2E
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 019D3865D3A61B82689C606C87D8E7D33768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 16CC
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: GkHjr6G/yEoaiGag788HiLKf/GnAcLZqkulHzN8dG0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d3:a6:1b:82:68:9c:60:6c:87:d8:e7:d3:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=1fb492cb405fced040997ac3046c8b66b0e6b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:3f:1f:26:c8:d4:32:68:0b:2e:d7:9a:b9:
7a:45:6e:00:ed:6c:2b:cb:05:64:26:a7:8f:27:70:
5e:2b:e8:5a:bb:fa:ab:aa:a6:f9:19:c0:6c:1b:76:
6e:f5:62:f9:30:6b:a7:76:18:88:90:d3:ce:44:7f:
7f:23:2e:1d:62:6c:fe:3e:a7:4b:ea:67:1c:c8:8f:
cc:a8:c6:e8:6f:c9:71:19:a6:80:1e:d8:be:5c:44:
f4:03:9e:87:87:61:57:b5:a6:83:ec:10:b3:fe:ef:
18:bf:c4:3e:f3:3e:85:7d:4a:b4:1d:d9:c3:80:3b:
8a:15:57:24:77:7f:f4:18:1c:76:60:91:c2:b7:80:
3f:b1:4c:f0:9d:a6:1c:7a:4c:a0:ae:a3:25:a6:f4:
b4:e0:04:54:c0:d7:a2:ed:2c:d8:9d:26:b1:1d:0c:
51:7d:04:81:eb:39:42:1f:be:3f:2d:89:e2:aa:90:
dd:bc:32:ed:e3:28:b0:4d:b0:98:4b:5d:4d:1b:0d:
14:76:ef:ee:64:eb:a8:a4:0e:86:47:c2:bb:67:8c:
be:d9:16:0f:a5:f4:8d:36:75:58:a9:51:1f:68:49:
98:43:9a:e1:7c:4c:b6:a7:97:54:a0:2d:cf:ae:8d:
c4:e4:6d:d9:f4:a7:2e:30:48:65:c7:e2:2d:07:4d:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:92:CB:40:5F:CE:D0:40:99:7A:C3:04:6C:8B:66:B0:E6:B4:2E
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:09:90:5f:44:74:a1:c2:d1:33:5d:0e:6e:e8:b8:63:46:4f:
74:a8:c6:6a:5e:de:0b:2a:06:14:ec:22:19:50:bc:38:d2:fe:
03:09:96:b2:d1:12:c5:50:fc:fd:4d:63:37:48:7c:36:e4:78:
f1:c0:b0:62:93:42:a5:70:69:8a:6a:83:5c:67:a1:f5:93:e1:
6f:91:05:f2:36:af:6e:25:61:81:dd:96:4c:93:b7:9f:41:85:
52:b0:e0:ee:75:86:26:eb:8d:d5:fe:d7:f6:b7:72:16:6d:f9:
0d:8e:4e:53:e1:11:ac:0b:73:f9:53:2c:ea:67:0c:dc:00:cc:
e5:9e:85:5b:8d:c2:7d:2b:0e:77:80:b0:90:92:7b:0b:92:bb:
af:fc:1a:fc:75:3c:cc:4e:a1:08:b9:9c:23:06:bd:1b:aa:37:
c0:16:91:4b:4f:6a:6c:d4:9b:68:96:7e:5b:15:3a:8a:26:92:
5b:3d:2c:ff:2c:aa:7e:91:38:18:78:33:49:ac:f8:df:7c:10:
dd:ff:88:e7:2d:ae:59:1b:45:ed:9f:6d:88:27:55:bd:24:a4:
1b:5a:07:50:30:9f:4d:7b:53:c5:5c:9d:21:fa:d5:4c:c5:08:
00:a5:84:2b:ae:0c:a4:1f:62:42:a7:f1:0b:f8:9e:43:3a:53:
74:f3:95:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZdOmG4JonGBsh9jn0zdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOGNlMGE2YWJiOGVlNTBkNDRiM2JhZTQyZDRhMjU0OWZm
YjgyNDAwHhcNMjYwMzI5MDcwMTMwWhcNMjYwMzMwMDcwMTMwWjAzMTEwLwYDVQQD
EygxZmI0OTJjYjQwNWZjZWQwNDA5OTdhYzMwNDZjOGI2NmIwZTZiNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOQ/HybI1DJoCy7Xmrl6RW4A7Wwr
ywVkJqePJ3BeK+hau/qrqqb5GcBsG3Zu9WL5MGundhiIkNPORH9/Iy4dYmz+PqdL
6mccyI/MqMbob8lxGaaAHti+XET0A56Hh2FXtaaD7BCz/u8Yv8Q+8z6FfUq0HdnD
gDuKFVckd3/0GBx2YJHCt4A/sUzwnaYcekygrqMlpvS04ARUwNei7SzYnSaxHQxR
fQSB6zlCH74/LYniqpDdvDLt4yiwTbCYS11NGw0Udu/uZOuopA6GR8K7Z4y+2RYP
pfSNNnVYqVEfaEmYQ5rhfEy2p5dUoC3Pro3E5G3Z9KcuMEhlx+ItB02BkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+0kstAX87QQJl6wwRsi2aw5rQuMB8GA1UdIwQY
MBaAFA6M4KaruO5Q1Es7rkLUolSf+4JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAt
YzQ5OTc1NWEyNjg5LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAtYzQ5OTc1NWEyNjg5
LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgmQX0R0
ocLRM10Obui4Y0ZPdKjGal7eCyoGFOwiGVC8ONL+AwmWstESxVD8/U1jN0h8NuR4
8cCwYpNCpXBpimqDXGeh9ZPhb5EF8javbiVhgd2WTJO3n0GFUrDg7nWGJuuN1f7X
9rdyFm35DY5OU+ERrAtz+VMs6mcM3ADM5Z6FW43CfSsOd4CwkJJ7C5K7r/wa/HU8
zE6hCLmcIwa9G6o3wBaRS09qbNSbaJZ+WxU6iiaSWz0s/yyqfpE4GHgzSaz433wQ
3f+I5y2uWRtF7Z9tiCdVvSSkG1oHUDCfTXtTxVydIfrVTMUIAKWEK64MpB9iQqfx
C/ieQzpTdPOVZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:03 2026 by rpki-client