Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: CEFMNKJSyNGdf7KtdrJoTwSnv9H7zaWW/9spgpnDf/w=
Subject key identifier: 03:E1:DC:BB:07:50:2C:35:F0:09:F4:3B:59:05:26:74:85:FC:AA:F8
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 01A13F70DBBE3EC41A89FB9330769B03101D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0E64
Signing time: Thu 15 Oct 2026 12:02:03 +0000
Manifest this update: Thu 15 Oct 2026 12:02:03 +0000
Manifest next update: Fri 16 Oct 2026 12:02:03 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: I7/OuiDqDgi3EYjEbQk2NdiAEASfJSbYp+vHr8gPZPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:db:be:3e:c4:1a:89:fb:93:30:76:9b:03:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Oct 15 12:02:03 2026 GMT
Not After : Oct 16 12:02:03 2026 GMT
Subject: CN=03e1dcbb07502c35f009f43b5905267485fcaaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:9e:85:21:f1:f7:81:bb:eb:cc:a6:75:44:
ab:a3:fc:fd:cd:85:bf:c5:b8:b1:db:16:5f:ab:d7:
5c:af:89:66:86:ce:51:3b:12:05:be:32:47:5e:b9:
a4:54:a8:ac:75:8e:f9:76:19:a4:26:3c:27:f7:80:
fe:8f:b8:82:2e:be:a4:63:d8:ee:4a:be:6a:c0:a0:
64:12:a9:2f:2d:53:20:09:f1:7e:57:f3:01:82:0c:
10:ca:bb:f6:10:3d:b9:7e:a5:dd:a0:fc:f2:ed:5c:
a4:8e:e3:92:1a:c5:a7:54:c4:b3:05:e9:fb:8c:7f:
4a:52:a4:44:3e:c3:66:84:4d:4c:e9:48:24:14:fb:
7c:cf:3b:d0:81:ad:c7:29:27:06:bd:ca:46:b6:80:
5d:72:b6:45:11:71:c6:9f:75:e2:74:a0:06:31:0a:
9b:f1:6e:c2:da:85:d5:39:41:f6:42:6e:a1:8e:1f:
5b:02:40:b9:9a:48:e0:20:bc:b4:42:78:4a:3c:cb:
e2:2b:83:bf:0c:71:37:53:17:17:1a:ba:a0:61:ed:
61:b0:5e:75:0a:66:c0:ae:a3:5a:63:40:6c:94:30:
4a:83:e7:90:cf:13:7d:9d:51:4e:6a:6c:8d:1a:c1:
74:4d:1a:0d:88:41:a5:22:b7:a8:f1:7f:93:d3:22:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E1:DC:BB:07:50:2C:35:F0:09:F4:3B:59:05:26:74:85:FC:AA:F8
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:59:b4:ec:c2:2c:b5:26:b1:7d:7d:0e:3d:08:ee:73:44:
17:f1:ea:4b:3c:57:98:f1:f6:4e:0f:51:94:93:b9:34:cc:45:
72:cd:56:1f:dc:04:fe:d3:b0:5e:89:ce:ca:58:d5:1a:3f:a8:
5c:e1:ef:48:bb:c3:46:61:69:b2:cd:22:0e:76:00:75:7d:8b:
e0:b2:1e:ec:29:d5:d2:58:e1:1a:bf:79:50:ab:1b:da:1d:5d:
f4:a2:ab:67:b9:86:d3:4b:32:88:1b:c1:7a:8c:51:3a:18:78:
02:b7:49:92:cb:f4:66:a8:c2:1a:56:4c:48:fb:c4:0a:14:25:
52:4a:f4:51:ef:fb:76:1f:fb:6a:72:a8:0e:d2:1d:36:b3:54:
f1:fc:e5:fc:72:20:3f:8f:65:c0:1d:dc:fd:57:ef:f6:81:d9:
5d:43:1a:94:1a:f5:bf:96:3d:7f:17:aa:15:4a:df:79:a4:a4:
ac:df:6c:41:63:59:e4:66:a1:86:74:3a:29:01:23:ee:b5:68:
ae:bd:a6:b4:38:e6:2e:13:70:74:88:99:8d:4d:a2:c3:48:56:
b2:8a:87:a2:f5:aa:f4:d6:cc:03:e9:32:4c:a5:c3:53:82:d6:
b2:7b:96:c4:81:33:b7:c6:8b:03:fa:f7:e6:47:50:2c:a3:31:
70:fc:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:35 2026 by rpki-client