Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: 3OYz9Eoe5b37AZH0BsIVPWE2uNe8DPFwIzYLCIcwWDM=
Subject key identifier: 93:33:AF:F5:2A:66:87:F8:F7:6F:7A:9C:05:5F:BB:21:2C:20:A6:E1
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019E2F5F95ADB149E968CA590FEEBC72FBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0CCE
Signing time: Sat 16 May 2026 06:00:53 +0000
Manifest this update: Sat 16 May 2026 06:00:53 +0000
Manifest next update: Sun 17 May 2026 06:00:53 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: E5pO6EkfteTCXK3QZgWyfIhapbzJ43pvgMaSimyBOQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:95:ad:b1:49:e9:68:ca:59:0f:ee:bc:72:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: May 16 06:00:53 2026 GMT
Not After : May 17 06:00:53 2026 GMT
Subject: CN=9333aff52a6687f8f76f7a9c055fbb212c20a6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:8e:00:9a:99:76:0d:45:1f:fc:cb:a6:92:
e9:0f:2c:07:ea:21:f6:4d:eb:96:87:d3:83:46:d3:
44:66:55:ea:b8:2a:b6:70:58:cc:1d:c4:23:c2:a4:
0a:84:d8:40:79:6b:12:80:c3:91:bb:5d:22:d6:83:
70:98:25:16:6c:5e:7a:6b:6d:4f:73:13:94:be:47:
ff:df:32:ed:5b:e5:6b:ab:75:2d:9f:a1:c9:55:87:
a8:e1:e2:05:ed:e9:95:0e:6b:ea:2c:7c:f8:f6:fb:
54:58:e4:55:71:cc:56:d8:38:80:f4:73:3a:55:65:
21:33:81:78:ef:39:78:95:4e:dd:eb:e5:a9:85:92:
42:b8:a9:34:04:ab:b4:08:f1:c2:e4:f9:6c:5e:1a:
90:4a:6f:8a:4f:ec:f4:58:c9:3c:ec:98:7e:7b:3a:
eb:ab:a5:05:45:31:87:fd:e6:b6:50:55:c6:2e:97:
dc:af:03:16:cd:75:aa:96:86:55:91:f1:9f:22:a2:
4d:80:68:96:63:2d:a6:9b:a4:cb:9b:d9:96:07:d2:
84:ec:1b:43:ea:d5:0e:51:dd:15:ee:39:89:6b:b6:
d9:4a:f2:3c:9c:8e:ef:8b:f9:b7:3a:ce:58:64:ec:
79:3a:8d:6d:60:03:a4:3c:5b:75:f8:62:39:18:55:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:AF:F5:2A:66:87:F8:F7:6F:7A:9C:05:5F:BB:21:2C:20:A6:E1
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:06:8c:4c:3d:de:0f:58:41:31:84:08:b8:5d:a7:33:8b:
c5:41:77:1a:a2:9e:5e:e3:4d:d0:1d:d4:f7:43:72:7f:b9:ab:
5f:11:81:cb:d6:a8:dc:91:63:1b:ba:b3:21:e7:f2:84:45:cf:
87:31:b7:55:d5:cd:6b:fe:1b:04:6c:01:8b:96:92:6c:d7:27:
62:d3:ab:0c:74:75:cd:f0:25:d2:94:3b:77:14:40:82:5b:63:
b7:81:1a:ec:3b:1b:37:66:8b:2a:8e:14:4c:bf:c1:0c:75:40:
9a:bf:03:d5:30:36:3c:1f:93:7a:5e:1c:73:27:7d:25:d0:5a:
e3:c1:d3:f7:59:2c:06:97:1b:5d:12:75:9d:39:d8:6a:82:bc:
06:15:cf:c7:26:46:af:b8:26:a1:a9:e2:08:76:5a:6b:11:24:
50:75:50:71:f1:30:f7:b8:88:4d:57:e9:dc:66:51:70:ff:61:
42:f9:9c:b4:30:85:12:d3:88:e1:f7:1a:1a:25:ff:18:71:4e:
8a:dd:23:f3:4b:f8:19:ad:78:9f:05:b8:49:d4:df:51:67:e2:
a6:76:a8:47:25:2e:aa:61:5d:d3:21:10:54:68:ce:6d:a8:69:
48:13:e5:f6:5f:21:e8:df:7f:69:9c:ec:1b:75:51:c5:48:14:
37:39:03:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vX5WtsUnpaMpZD+68cvusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWZhY2IzNzQ0MWRkMTkxODNiZDFjYjU3ZGI1ZWU1NTQ3
N2E3YTcwHhcNMjYwNTE2MDYwMDUzWhcNMjYwNTE3MDYwMDUzWjAzMTEwLwYDVQQD
Eyg5MzMzYWZmNTJhNjY4N2Y4Zjc2ZjdhOWMwNTVmYmIyMTJjMjBhNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoCOAJqZdg1FH/zLppLpDywH6iH2
TeuWh9ODRtNEZlXquCq2cFjMHcQjwqQKhNhAeWsSgMORu10i1oNwmCUWbF56a21P
cxOUvkf/3zLtW+Vrq3Utn6HJVYeo4eIF7emVDmvqLHz49vtUWORVccxW2DiA9HM6
VWUhM4F47zl4lU7d6+WphZJCuKk0BKu0CPHC5PlsXhqQSm+KT+z0WMk87Jh+ezrr
q6UFRTGH/ea2UFXGLpfcrwMWzXWqloZVkfGfIqJNgGiWYy2mm6TLm9mWB9KE7BtD
6tUOUd0V7jmJa7bZSvI8nI7vi/m3Os5YZOx5Oo1tYAOkPFt1+GI5GFVfiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMzr/UqZof49296nAVfuyEsIKbhMB8GA1UdIwQY
MBaAFAzvrLN0Qd0ZGDvRy1fbXuVUd6enMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQt
ZTNkZDUyNzk5YmRhLzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQtZTNkZDUyNzk5YmRh
LzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPgGjEw9
3g9YQTGECLhdpzOLxUF3GqKeXuNN0B3U90Nyf7mrXxGBy9ao3JFjG7qzIefyhEXP
hzG3VdXNa/4bBGwBi5aSbNcnYtOrDHR1zfAl0pQ7dxRAgltjt4Ea7DsbN2aLKo4U
TL/BDHVAmr8D1TA2PB+Tel4ccyd9JdBa48HT91ksBpcbXRJ1nTnYaoK8BhXPxyZG
r7gmoaniCHZaaxEkUHVQcfEw97iITVfp3GZRcP9hQvmctDCFEtOI4fcaGiX/GHFO
it0j80v4Ga14nwW4SdTfUWfipnaoRyUuqmFd0yEQVGjObahpSBPl9l8h6N9/aZzs
G3VRxUgUNzkD0g==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:24 2026 by rpki-client