Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: x0UGD2KOsh0j3EWbFSTd8sbRBTfvGZYQ56Hd48+I/gc=
Subject key identifier: 85:88:5B:0C:41:E0:24:68:76:78:78:2C:D0:D4:07:18:9D:E7:62:E4
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 019E2F967C83781F77F5C2EF10F71AC13913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 174C
Signing time: Sat 16 May 2026 07:00:51 +0000
Manifest this update: Sat 16 May 2026 07:00:51 +0000
Manifest next update: Sun 17 May 2026 07:00:51 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: lvuKxdJvb5Va6fs/6Z1SDLVOtctXj9YJjSyj3Thr2a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:7c:83:78:1f:77:f5:c2:ef:10:f7:1a:c1:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: May 16 07:00:51 2026 GMT
Not After : May 17 07:00:51 2026 GMT
Subject: CN=85885b0c41e024687678782cd0d407189de762e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:d5:c9:11:27:ce:21:c3:76:1c:e5:6f:67:
b2:11:66:6f:12:43:0e:9a:d1:00:57:2b:f4:de:c1:
ac:21:bb:18:cd:24:17:2d:35:19:b5:f3:01:5a:94:
d8:c6:ec:71:6b:00:c6:94:0b:77:bf:eb:5a:33:60:
07:63:90:b9:0c:85:db:0e:1d:5b:d3:b6:0e:43:66:
41:f3:2b:e8:ad:c0:4c:85:10:52:ed:b0:1b:e0:4d:
65:94:c6:ae:9b:79:80:91:51:85:a6:a5:fa:0c:1b:
2b:aa:9f:ba:1a:9a:8d:02:ad:b9:f2:99:f1:d4:14:
5f:1c:17:b4:de:a2:92:62:f8:20:37:ba:7c:cb:12:
7f:d8:6c:46:5e:21:ef:3e:d6:f6:ec:b8:69:d6:0d:
c6:82:75:11:45:01:3c:8b:a2:d1:50:ea:8c:c1:94:
27:57:4c:1c:38:f7:08:ca:0a:84:5a:d0:b7:d2:5e:
ba:6a:95:7d:c1:92:c6:ae:6e:c2:b3:d5:c9:66:78:
3a:be:7f:50:0d:a7:29:95:dd:f8:5c:b2:ff:4c:dd:
b8:c5:14:16:28:1f:0c:ed:05:3e:bd:7e:85:b2:75:
8b:0b:3d:24:7a:23:dd:68:4e:94:ef:66:7d:45:6c:
06:0f:0d:c2:52:48:c6:69:5c:02:aa:68:a1:f1:02:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:5B:0C:41:E0:24:68:76:78:78:2C:D0:D4:07:18:9D:E7:62:E4
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ca:6b:c5:d1:42:29:a2:5d:90:8b:a3:ac:5a:f8:13:12:f6:
89:ce:66:05:36:c8:18:f9:97:d8:e7:e5:0c:8e:9f:e0:85:6c:
e6:62:27:6e:5f:9d:3b:b5:03:ae:ad:15:31:c7:db:91:4c:e2:
1e:b3:bd:0e:51:fa:df:13:cc:65:97:43:1d:bb:16:8c:5c:ff:
44:50:63:95:99:37:76:37:a2:81:38:c6:45:f6:2b:d6:33:15:
c7:af:c0:d0:77:35:1b:23:f4:ab:f2:5c:c4:c4:1e:9a:0f:be:
54:4c:06:b0:c0:29:57:03:55:f3:f2:bb:0c:e7:3b:44:99:98:
28:6c:0d:4f:b5:48:45:c7:a3:15:8e:9b:07:40:a0:17:31:0c:
c9:7d:2e:a0:2c:3c:af:ea:d1:6f:bb:81:c5:56:a1:8c:42:12:
a8:82:ec:95:10:0b:94:fd:86:10:c1:2b:7c:b8:d1:45:ef:45:
56:03:08:e7:77:b4:21:34:ab:85:3e:cc:1d:db:b8:7d:fe:04:
08:d0:46:ae:23:4b:28:33:26:0e:da:e3:98:73:c4:a0:60:4f:
57:17:99:6b:41:14:4c:12:be:5c:1b:ed:c6:df:26:9b:f8:38:
6d:c6:09:48:c8:0d:31:36:6c:ac:1b:df:bb:7f:ff:f1:3d:e6:
0c:e4:9c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vlnyDeB939cLvEPcawTkTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOGNlMGE2YWJiOGVlNTBkNDRiM2JhZTQyZDRhMjU0OWZm
YjgyNDAwHhcNMjYwNTE2MDcwMDUxWhcNMjYwNTE3MDcwMDUxWjAzMTEwLwYDVQQD
Eyg4NTg4NWIwYzQxZTAyNDY4NzY3ODc4MmNkMGQ0MDcxODlkZTc2MmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+DVyREnziHDdhzlb2eyEWZvEkMO
mtEAVyv03sGsIbsYzSQXLTUZtfMBWpTYxuxxawDGlAt3v+taM2AHY5C5DIXbDh1b
07YOQ2ZB8yvorcBMhRBS7bAb4E1llMaum3mAkVGFpqX6DBsrqp+6GpqNAq258pnx
1BRfHBe03qKSYvggN7p8yxJ/2GxGXiHvPtb27Lhp1g3GgnURRQE8i6LRUOqMwZQn
V0wcOPcIygqEWtC30l66apV9wZLGrm7Cs9XJZng6vn9QDacpld34XLL/TN24xRQW
KB8M7QU+vX6FsnWLCz0keiPdaE6U72Z9RWwGDw3CUkjGaVwCqmih8QJ4JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWIWwxB4CRodnh4LNDUBxid52LkMB8GA1UdIwQY
MBaAFA6M4KaruO5Q1Es7rkLUolSf+4JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAt
YzQ5OTc1NWEyNjg5LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAtYzQ5OTc1NWEyNjg5
LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcprxdFC
KaJdkIujrFr4ExL2ic5mBTbIGPmX2OflDI6f4IVs5mInbl+dO7UDrq0VMcfbkUzi
HrO9DlH63xPMZZdDHbsWjFz/RFBjlZk3djeigTjGRfYr1jMVx6/A0Hc1GyP0q/Jc
xMQemg++VEwGsMApVwNV8/K7DOc7RJmYKGwNT7VIRcejFY6bB0CgFzEMyX0uoCw8
r+rRb7uBxVahjEISqILslRALlP2GEMErfLjRRe9FVgMI53e0ITSrhT7MHdu4ff4E
CNBGriNLKDMmDtrjmHPEoGBPVxeZa0EUTBK+XBvtxt8mm/g4bcYJSMgNMTZsrBvf
u3//8T3mDOScTA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:14:23 2026 by rpki-client