Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: C5wbrSN4DNMv5ImRX0gTe4KODwCm5tmHIjV7GYSWQxU=
Subject key identifier: B8:76:A9:38:72:D6:33:75:29:79:28:68:6D:0D:16:3D:C8:A0:13:C3
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019F190D3BD13D55A9EDE2888AC951F5C864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0D47
Signing time: Tue 30 Jun 2026 15:02:05 +0000
Manifest this update: Tue 30 Jun 2026 15:02:05 +0000
Manifest next update: Wed 01 Jul 2026 15:02:05 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: L0cA/vo8rPqx4PHuVV5QqbOqAUxK1cmAMtaiySZvhP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:3b:d1:3d:55:a9:ed:e2:88:8a:c9:51:f5:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Jun 30 15:02:05 2026 GMT
Not After : Jul 1 15:02:05 2026 GMT
Subject: CN=b876a93872d63375297928686d0d163dc8a013c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:e4:57:d2:29:20:84:15:28:f5:cc:5b:a8:
e3:10:bc:0c:2c:ff:45:46:03:bd:d8:cc:cf:38:94:
74:8d:d2:e0:ef:32:2b:a6:4f:28:e1:9b:6f:32:b4:
c2:fc:2e:f6:3a:71:ad:75:5a:bb:a8:b7:4b:e3:b6:
df:e6:9e:6e:8b:1e:19:14:08:1d:d3:ee:1a:0e:ee:
2b:ec:6d:27:c1:e0:94:5f:59:9a:a6:7e:36:7c:66:
69:82:85:79:68:44:47:7c:df:fa:e3:ec:01:f0:03:
59:de:6f:93:d5:b8:56:e7:a1:03:3e:5b:f5:95:f0:
fa:fe:cc:fa:68:23:66:b5:00:76:00:66:3c:c9:a2:
8f:98:94:53:61:a0:86:4a:3c:33:c5:84:cf:f8:94:
05:05:fb:7d:12:7b:9f:e6:c6:e3:c6:ac:3d:c1:f7:
10:b8:70:2f:e9:1f:5f:24:b2:ae:29:ad:fd:e1:a6:
47:68:21:96:47:38:3c:b6:56:b5:78:5f:d9:1c:1e:
7b:9c:f3:71:e8:71:77:6a:f2:25:37:5d:f2:85:7a:
4c:35:89:da:d4:3d:0c:f2:2a:51:e8:76:91:d1:2c:
f2:25:96:a6:c9:20:26:37:0f:cc:ad:94:d2:b2:2e:
98:ee:1f:30:7f:ae:20:0e:eb:fb:f2:68:61:c6:7f:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:A9:38:72:D6:33:75:29:79:28:68:6D:0D:16:3D:C8:A0:13:C3
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0c:43:96:15:90:6c:6a:f3:be:62:89:50:9f:71:8f:7f:c9:
87:68:b2:80:de:77:61:43:3c:bc:5d:99:3c:a7:8c:53:91:53:
7a:3e:ca:66:e7:93:54:16:08:d3:17:3b:5b:21:4d:6b:41:98:
e6:66:04:23:b8:3b:f1:e6:a0:e2:40:db:41:6f:fc:c8:7c:ce:
85:a9:5c:4f:ed:ac:f7:09:fd:56:2e:00:63:7c:00:e8:12:f7:
94:13:b6:1e:5d:b7:07:cb:52:4c:f4:ab:d2:89:54:6e:d2:e2:
77:f8:f4:a6:79:e4:2d:60:ce:4f:2f:5d:2b:32:db:a3:ef:07:
20:24:4a:35:1d:eb:b3:22:ba:51:a7:ef:b2:d2:a5:4a:b5:13:
f8:a4:f3:49:10:e9:78:33:44:12:7b:85:c4:d2:73:3c:ad:cf:
79:d5:4b:2c:84:13:93:a4:d8:2b:7d:d7:fa:c9:aa:ba:38:b3:
83:73:53:95:15:1a:d3:23:36:83:db:45:07:64:1c:c3:9c:84:
81:57:68:67:eb:17:c5:36:81:05:53:b0:ff:a5:4e:13:64:6b:
71:06:8f:66:55:93:6e:50:97:33:28:8e:74:1d:51:da:4f:70:
98:35:bc:ab:63:42:21:6c:43:d2:e9:39:65:8e:f8:1c:4a:49:
f1:29:60:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDTvRPVWp7eKIislR9chkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWZhY2IzNzQ0MWRkMTkxODNiZDFjYjU3ZGI1ZWU1NTQ3
N2E3YTcwHhcNMjYwNjMwMTUwMjA1WhcNMjYwNzAxMTUwMjA1WjAzMTEwLwYDVQQD
EyhiODc2YTkzODcyZDYzMzc1Mjk3OTI4Njg2ZDBkMTYzZGM4YTAxM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFrkV9IpIIQVKPXMW6jjELwMLP9F
RgO92MzPOJR0jdLg7zIrpk8o4ZtvMrTC/C72OnGtdVq7qLdL47bf5p5uix4ZFAgd
0+4aDu4r7G0nweCUX1mapn42fGZpgoV5aERHfN/64+wB8ANZ3m+T1bhW56EDPlv1
lfD6/sz6aCNmtQB2AGY8yaKPmJRTYaCGSjwzxYTP+JQFBft9Enuf5sbjxqw9wfcQ
uHAv6R9fJLKuKa394aZHaCGWRzg8tla1eF/ZHB57nPNx6HF3avIlN13yhXpMNYna
1D0M8ipR6HaR0SzyJZamySAmNw/MrZTSsi6Y7h8wf64gDuv78mhhxn+w5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh2qThy1jN1KXkoaG0NFj3IoBPDMB8GA1UdIwQY
MBaAFAzvrLN0Qd0ZGDvRy1fbXuVUd6enMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQt
ZTNkZDUyNzk5YmRhLzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQtZTNkZDUyNzk5YmRh
LzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQxDlhWQ
bGrzvmKJUJ9xj3/Jh2iygN53YUM8vF2ZPKeMU5FTej7KZueTVBYI0xc7WyFNa0GY
5mYEI7g78eag4kDbQW/8yHzOhalcT+2s9wn9Vi4AY3wA6BL3lBO2Hl23B8tSTPSr
0olUbtLid/j0pnnkLWDOTy9dKzLbo+8HICRKNR3rsyK6UafvstKlSrUT+KTzSRDp
eDNEEnuFxNJzPK3PedVLLIQTk6TYK33X+smqujizg3NTlRUa0yM2g9tFB2Qcw5yE
gVdoZ+sXxTaBBVOw/6VOE2RrcQaPZlWTblCXMyiOdB1R2k9wmDW8q2NCIWxD0uk5
ZY74HEpJ8SlgRw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:45 2026 by rpki-client