Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: B83a9zGD1qvV74KikzHAZRv2fidqh19wsaLZMao6QKc=
Subject key identifier: 39:B1:D5:11:E7:CD:B0:5B:10:4C:D1:08:8E:49:45:7D:A1:C0:87:49
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019DCDBD764D76D653A0B1D9951F86EAD43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0B6B
Signing time: Mon 27 Apr 2026 07:00:38 +0000
Manifest this update: Mon 27 Apr 2026 07:00:38 +0000
Manifest next update: Tue 28 Apr 2026 07:00:38 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: xZXX6k7SjjkhJgipXy0DXKIgSaWEMlWA89ViuSfgdLM=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:76:4d:76:d6:53:a0:b1:d9:95:1f:86:ea:d4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Apr 27 07:00:38 2026 GMT
Not After : Apr 28 07:00:38 2026 GMT
Subject: CN=39b1d511e7cdb05b104cd1088e49457da1c08749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:23:49:93:73:22:32:5b:37:55:58:7b:01:
c3:11:bb:2f:17:b9:41:15:42:7f:83:d4:ec:ca:98:
96:10:9f:6d:de:6d:be:db:94:80:a5:76:54:c6:d8:
fd:d7:a0:0a:0a:70:bd:49:d2:4b:44:a7:c3:3c:5a:
0b:90:72:63:bf:25:b1:08:5f:f4:f1:f0:a3:8e:b0:
49:37:3d:a4:09:8e:37:42:dc:26:04:28:e6:62:db:
ee:1d:9a:13:c6:f0:97:66:a0:9b:20:91:e5:f4:c5:
3c:01:56:6b:4c:8c:06:a1:2a:f6:65:b0:5c:90:b1:
ce:aa:f0:e1:3c:22:52:94:13:8d:1a:4f:c0:26:69:
3a:b8:aa:2a:22:af:18:e6:0d:0f:9c:c2:9b:c0:fd:
5d:75:01:78:37:2e:1e:eb:9b:b0:ee:0b:9f:ad:3d:
b8:e2:04:47:82:8a:68:e6:f6:d1:fd:1e:17:e6:b9:
93:f5:79:d0:2a:4c:4e:c5:0c:f9:8f:40:48:f5:c3:
5b:a8:0f:dc:4f:60:40:8c:62:94:60:9d:47:09:b5:
24:a2:25:5d:72:70:6d:93:d6:75:3e:44:8c:12:67:
9c:37:97:cc:b7:e8:1b:38:b1:30:e2:6b:01:cc:8d:
79:56:f5:ab:95:48:12:3a:3f:31:b5:d6:ff:a4:3f:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B1:D5:11:E7:CD:B0:5B:10:4C:D1:08:8E:49:45:7D:A1:C0:87:49
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a6:a1:53:8f:ea:fa:c5:a4:6c:7b:3c:37:b8:a8:7a:04:68:
7c:0f:28:cd:40:b3:59:88:e3:22:cc:63:6a:cb:8f:72:d9:8e:
7c:f0:24:56:a6:bb:be:e6:c1:5b:75:07:75:f6:bc:24:3e:9c:
d3:e3:0c:50:24:b4:46:78:b9:fb:4f:4d:5b:dc:a8:e2:7a:cd:
1b:1b:8f:9e:84:50:3c:95:73:43:eb:1b:dc:ac:86:b1:58:33:
0b:5a:4a:ef:81:88:6b:1a:b3:5c:08:a5:68:29:d8:bc:4c:b3:
3b:a6:33:99:15:ac:c0:a8:4d:b1:74:33:6a:2e:3a:46:6b:05:
81:7c:74:f6:cd:8f:ba:8f:22:c5:4d:ed:fb:17:fa:47:72:f9:
3c:70:88:dc:de:86:dd:53:fb:58:7a:00:e9:86:92:b3:c4:a2:
57:c5:34:fb:fc:02:5d:70:c0:e9:99:5c:7c:29:b5:b5:d5:ff:
a3:0d:2e:6d:6a:78:44:d7:82:18:d5:fb:1e:4f:fa:49:ce:b1:
58:1e:a8:a1:69:cd:94:a0:a1:69:3b:a5:96:3c:29:ed:55:8e:
d1:ac:aa:cb:39:9a:cc:86:2e:b7:e0:b5:24:76:e4:36:86:59:
5b:b1:4f:c8:fa:4e:08:75:73:0a:ef:50:5b:a7:34:70:bd:f4:
97:90:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:29 2026 by rpki-client