Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: lE6a4IL9o3aUZcaVmNSqxsB0GSgfVoIN06RkwUA4tw8=
Subject key identifier: A9:D5:7B:E9:09:69:78:11:F5:E8:57:A0:47:E6:57:0F:23:30:0B:0F
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019D382E9B80CF2C3AAC07535488BDA40C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0C4E
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: sqhxwU996XLvPVYYqLk7FDqFMLFrUY/RKD/6obKPATc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9b:80:cf:2c:3a:ac:07:53:54:88:bd:a4:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=a9d57be909697811f5e857a047e6570f23300b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:dc:3c:10:ae:3a:54:14:de:85:9c:9a:73:
53:dc:69:93:80:22:40:1e:e8:23:5e:0a:74:89:59:
4f:a2:19:99:6f:7e:bd:d8:5b:d9:cf:b5:de:52:88:
3b:ec:d1:b9:cc:7f:f8:65:b6:68:7a:e7:47:f7:b8:
f0:db:b2:96:8a:ac:85:62:2c:2b:98:c2:af:60:ca:
f8:3b:52:c5:79:c5:a0:68:c0:3d:09:1b:da:7c:7b:
b7:be:e8:f5:d2:ff:84:50:c1:8b:24:27:b0:f4:e4:
67:c9:4e:55:3d:24:c6:0f:de:5c:7c:7f:b5:1d:52:
ee:b1:3a:c7:28:d4:18:39:67:91:1d:97:55:f3:08:
c6:17:00:42:1d:92:ec:05:1a:5d:3f:ca:58:71:6d:
97:07:8d:4f:17:d4:72:d8:df:72:90:ef:b3:b4:4b:
32:c4:16:07:40:e2:ed:52:b7:7e:39:e8:b7:84:97:
49:02:01:85:39:ff:d5:58:b5:ac:60:2d:e5:be:19:
cf:51:f2:db:bd:fb:1d:4f:5e:88:5b:b9:a4:78:28:
fb:bc:b8:fb:7b:a9:0e:6e:10:93:8e:7e:90:93:82:
f4:59:ca:ea:8a:07:cb:a6:a7:b5:9f:6e:2c:00:ff:
3c:60:07:b9:3a:e1:19:6d:23:e5:6f:cb:4d:a0:5a:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:7B:E9:09:69:78:11:F5:E8:57:A0:47:E6:57:0F:23:30:0B:0F
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:01:fd:9c:fa:03:7b:40:b0:1a:7f:13:f6:88:7e:7c:b0:
8e:23:34:f3:6a:a5:5c:50:4b:46:2f:be:2f:17:2a:be:08:42:
08:cc:4e:5c:06:63:58:66:cb:ef:3a:f9:33:e0:e2:f8:84:bb:
97:3a:fd:20:d7:fa:e8:e9:90:41:7c:52:41:60:9b:f4:de:86:
b6:8d:61:ac:df:c4:3b:45:64:ad:8a:f0:a5:f8:36:f6:03:5a:
c8:1f:bc:43:02:56:89:e2:c7:32:3b:6e:fe:83:31:47:c8:6e:
b0:cb:41:1b:05:a5:32:9a:27:8c:0e:7f:d9:5f:e4:13:94:18:
b4:a8:81:a7:1a:72:63:6e:7e:dc:5d:d5:06:b9:f2:cf:10:83:
44:12:40:39:3c:af:fb:6f:ce:df:7f:55:92:f6:dd:85:f0:83:
bc:13:7e:2b:d7:ff:6e:72:73:d6:e1:d6:73:a6:58:a7:d7:3d:
9a:ee:a9:ad:ce:e3:ae:56:a8:cf:83:ca:23:13:b9:fc:3b:8d:
e4:8c:98:4d:59:2f:6c:3e:a4:09:ae:ea:7d:b0:be:31:ad:50:
b8:04:09:2f:e4:06:02:a9:ce:c4:4e:5b:8e:8a:74:26:ab:ef:
0a:c1:ec:bf:d9:0a:1b:ff:6f:96:f6:be:29:46:ea:5a:2a:1c:
49:7b:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:45 2026 by rpki-client