Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: sDxjPK16/A6tct2y7Gnn54RwURKrzGfhjWh48Ayoxl4=
Subject key identifier: DD:CE:29:E0:AD:8A:60:67:94:44:D7:3D:9A:A4:12:7F:2A:7E:BF:F4
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019CE4482AD5AA83460DFF98836A0244916D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0F13
Signing time: Thu 12 Mar 2026 23:01:00 +0000
Manifest this update: Thu 12 Mar 2026 23:01:00 +0000
Manifest next update: Fri 13 Mar 2026 23:01:00 +0000
Files and hashes: 1: W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa (hash: uj8H5eTLBr1gPNFQuaCxy8xIYKyHOwh/HEUJd6NH5bA=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: WOfFRCwLGu2I1t4dQPfoAu4pgqryPVMhBsClAcI0YGQ=)
3: qRvOBOttCCifdXKg-Zoy28a2Djg.roa (hash: 5kgQNG99oZ4RgWldWg89plnXeCTFfBF0bfhCfheFwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:2a:d5:aa:83:46:0d:ff:98:83:6a:02:44:91:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Mar 12 23:01:00 2026 GMT
Not After : Mar 13 23:01:00 2026 GMT
Subject: CN=ddce29e0ad8a60679444d73d9aa4127f2a7ebff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:3c:87:35:68:74:29:b2:bd:f0:ca:9e:f8:
fa:2f:7e:84:b0:63:b8:c6:ac:da:75:9a:9f:76:03:
4a:2e:87:d8:c4:55:2e:95:34:ce:6e:93:1b:64:3c:
24:13:58:c8:be:67:43:67:75:8c:ac:59:90:f2:e3:
d7:a4:fd:74:bc:53:9c:24:cf:df:3c:b4:42:16:36:
49:b1:f1:92:06:17:0e:58:2f:03:d2:76:25:b1:64:
73:70:69:11:8e:6b:62:ec:39:a3:fb:66:b6:b5:be:
48:51:e1:57:9a:6e:ff:0f:10:25:1d:39:7f:bb:f7:
4b:41:a7:99:6e:39:0d:de:32:89:30:4a:30:ef:8f:
eb:e5:ed:df:ec:d6:bf:32:2e:cc:45:ed:7b:eb:69:
49:a3:f2:40:42:cb:fb:06:bd:ec:81:a9:76:8f:12:
41:eb:76:24:8c:f3:63:0e:9d:2f:b8:bd:bb:3c:1a:
0f:d8:73:8b:d5:0e:b4:c4:42:b4:31:f2:aa:48:9d:
ac:6f:2c:5b:b7:d8:f3:39:44:cb:7b:82:b4:d8:ca:
94:3c:f2:ea:c9:65:55:47:8f:e4:34:78:14:ff:e4:
33:9c:08:31:b8:38:d1:4b:81:06:62:5c:fe:75:5c:
54:54:fe:c4:cf:f9:08:29:46:03:3d:53:a9:5a:ad:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CE:29:E0:AD:8A:60:67:94:44:D7:3D:9A:A4:12:7F:2A:7E:BF:F4
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ab:18:e8:e7:7c:82:7e:e4:7b:53:93:b8:79:3d:70:49:70:
a9:f5:12:03:46:97:24:24:7c:cc:d4:74:45:6f:a4:ed:36:27:
48:ee:d7:c4:42:ff:33:dd:db:eb:9b:86:90:29:81:49:c4:a6:
e8:9d:19:1f:10:c1:8b:b6:6c:14:8d:31:ca:99:49:aa:59:82:
64:0c:e9:f8:f4:a2:45:23:85:22:90:d6:42:e1:30:b4:5d:49:
2e:2e:a2:bd:cd:ad:f4:31:b1:6c:7d:ef:2d:16:30:30:ef:10:
41:4e:97:88:df:d9:7a:e7:f8:7c:2f:42:f2:37:11:78:32:84:
21:97:30:c7:ce:5d:f5:74:7b:61:ff:20:ac:74:eb:b7:81:65:
5a:46:e5:87:d6:16:e7:b5:a9:53:d1:19:63:d0:3a:f8:04:b9:
45:8a:a7:66:92:e4:69:dd:18:47:8b:0b:11:9b:6b:d2:64:46:
09:a5:d4:db:4e:e7:8f:f8:51:fd:9d:64:f5:4c:61:f9:f8:04:
bb:0d:fc:b1:c1:ea:20:51:dc:22:04:01:37:a5:a1:6f:74:65:
ce:45:40:c1:2a:5f:fb:6c:03:66:20:68:76:64:5b:94:8d:33:
c5:48:5a:de:5a:63:ad:b5:9b:c6:ed:54:33:0f:e2:ee:95:51:
57:65:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:49 2026 by rpki-client