Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: MlNrJXuh6C6SxuLCmR6OO0Y90Z8/VmiwRmKiOx65NVE=
Subject key identifier: 8F:69:FC:75:63:30:14:29:BF:2F:FB:27:31:27:51:0F:53:28:F5:5C
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019EB76A982C608D2A7A3D5260D33D3CECFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0BE4
Signing time: Thu 11 Jun 2026 16:01:16 +0000
Manifest this update: Thu 11 Jun 2026 16:01:16 +0000
Manifest next update: Fri 12 Jun 2026 16:01:16 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: BGCkYD4oPQkliAZOwnXXWj1F8mHA3naJQ7df9597Ijw=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:98:2c:60:8d:2a:7a:3d:52:60:d3:3d:3c:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Jun 11 16:01:16 2026 GMT
Not After : Jun 12 16:01:16 2026 GMT
Subject: CN=8f69fc7563301429bf2ffb273127510f5328f55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:11:7e:4d:a1:30:19:6e:4f:20:6e:c9:1f:
06:34:6f:7a:25:fa:4a:ba:47:ed:ee:b4:fa:06:cf:
b0:81:7b:75:58:23:ce:23:df:95:54:32:5f:fa:f0:
4c:7e:75:19:66:be:b3:96:b2:66:b9:2a:8a:62:a5:
44:34:e2:93:6f:9c:da:05:9a:43:8f:1f:11:9c:00:
e9:72:ff:99:94:b6:3a:79:9c:ea:b4:87:cc:1a:8c:
4c:f1:e0:e2:87:7c:d8:ee:1e:b5:c5:b4:26:41:de:
c9:9f:b8:01:fb:bc:4c:47:59:ab:46:84:07:56:d7:
a8:15:98:c7:19:3d:ec:7d:0a:5b:9e:8f:21:52:ae:
3a:ab:d1:29:2f:53:32:e3:8e:00:54:2a:ab:97:52:
74:83:ce:8d:2b:83:5a:82:c1:14:71:67:a1:45:b8:
e2:45:2f:02:67:3d:52:74:d9:c4:91:0e:d7:b9:eb:
c1:05:24:c1:15:13:16:a9:61:f4:7c:24:33:63:34:
0a:79:7a:f9:a2:0f:69:19:2d:db:52:9b:45:df:68:
a1:41:d5:39:3f:3d:e7:24:41:12:12:c2:7a:95:5d:
10:24:52:9a:5e:91:4c:9e:a5:0b:0e:24:4e:db:26:
1b:98:a6:53:fe:cd:a0:ee:2d:76:ef:89:c4:e5:fb:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:69:FC:75:63:30:14:29:BF:2F:FB:27:31:27:51:0F:53:28:F5:5C
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:77:69:f5:be:86:3c:e3:1d:6e:0b:db:c0:a1:29:19:cd:34:
45:d3:eb:71:b8:12:23:71:67:91:f3:9c:75:70:c7:2e:ba:c4:
89:ab:39:04:1b:40:6b:de:a6:03:ac:32:c4:a3:c4:a8:08:04:
63:44:1f:29:05:6b:1c:5b:98:cd:4f:e7:d0:c6:86:73:d1:15:
41:2f:81:64:4d:33:94:28:69:98:fe:59:65:13:42:a2:d5:75:
13:cd:46:c9:a5:0c:d6:71:ed:f0:98:55:b6:29:d3:92:fe:19:
6b:b6:d7:ce:4b:c7:0c:d6:e2:6f:e5:78:f2:87:c6:b8:2e:c1:
e7:9b:29:6f:1a:c6:8e:1f:a6:48:06:27:fb:ce:fa:99:ab:08:
42:e1:3e:4f:9a:49:96:b9:60:02:06:84:cc:53:7f:57:97:56:
87:33:31:7d:ee:15:04:5c:71:40:5a:56:66:50:72:d3:67:c9:
f8:35:c2:42:06:0e:9c:e4:dd:b8:ca:04:a1:1e:37:6a:99:3e:
ae:82:c6:7e:a7:5d:ea:d8:bb:71:98:6b:ff:3d:e2:55:d1:4c:
af:71:08:1a:ce:93:53:cc:86:46:0c:46:56:cf:f5:49:23:c2:
69:b9:45:31:41:06:c7:a9:f5:8b:81:5e:7c:81:af:cf:05:22:
7a:35:8c:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63apgsYI0qej1SYNM9POz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4
NzJiMDUwHhcNMjYwNjExMTYwMTE2WhcNMjYwNjEyMTYwMTE2WjAzMTEwLwYDVQQD
Eyg4ZjY5ZmM3NTYzMzAxNDI5YmYyZmZiMjczMTI3NTEwZjUzMjhmNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt4Rfk2hMBluTyBuyR8GNG96JfpK
ukft7rT6Bs+wgXt1WCPOI9+VVDJf+vBMfnUZZr6zlrJmuSqKYqVENOKTb5zaBZpD
jx8RnADpcv+ZlLY6eZzqtIfMGoxM8eDih3zY7h61xbQmQd7Jn7gB+7xMR1mrRoQH
VteoFZjHGT3sfQpbno8hUq46q9EpL1My444AVCqrl1J0g86NK4NagsEUcWehRbji
RS8CZz1SdNnEkQ7XuevBBSTBFRMWqWH0fCQzYzQKeXr5og9pGS3bUptF32ihQdU5
Pz3nJEESEsJ6lV0QJFKaXpFMnqULDiRO2yYbmKZT/s2g7i1274nE5ft5OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9p/HVjMBQpvy/7JzEnUQ9TKPVcMB8GA1UdIwQY
MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et
YmE0ZmJkOGQ1ZDhlLzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl
LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHdp9b6G
POMdbgvbwKEpGc00RdPrcbgSI3FnkfOcdXDHLrrEias5BBtAa96mA6wyxKPEqAgE
Y0QfKQVrHFuYzU/n0MaGc9EVQS+BZE0zlChpmP5ZZRNCotV1E81GyaUM1nHt8JhV
tinTkv4Za7bXzkvHDNbib+V48ofGuC7B55spbxrGjh+mSAYn+876masIQuE+T5pJ
lrlgAgaEzFN/V5dWhzMxfe4VBFxxQFpWZlBy02fJ+DXCQgYOnOTduMoEoR43apk+
roLGfqdd6ti7cZhr/z3iVdFMr3EIGs6TU8yGRgxGVs/1SSPCablFMUEGx6n1i4Fe
fIGvzwUiejWM5w==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:38 2026 by rpki-client