Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: WUPPobhj8HnByRVF1oOtSAkzdUPKKWUKrZDwqvAFAko=
Subject key identifier: 2C:CE:DF:51:58:DB:71:34:62:B5:45:B5:C0:E3:13:47:9B:FA:23:FF
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 01A1404BF734EEF8C9E3EB77C83B90D8EB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0D34
Signing time: Thu 15 Oct 2026 16:01:22 +0000
Manifest this update: Thu 15 Oct 2026 16:01:22 +0000
Manifest next update: Fri 16 Oct 2026 16:01:22 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: aJvHg8+nGtZMlLbI8/kmDj6mO7u4jzNoZROsQPPlYRc=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4b:f7:34:ee:f8:c9:e3:eb:77:c8:3b:90:d8:eb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Oct 15 16:01:22 2026 GMT
Not After : Oct 16 16:01:22 2026 GMT
Subject: CN=2ccedf5158db713462b545b5c0e313479bfa23ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:0e:70:60:18:78:e9:77:cd:17:2c:be:74:
a3:55:f3:5c:e8:a6:aa:27:12:97:08:c2:5a:c2:03:
7e:f7:e6:09:d8:a9:94:e7:cc:83:63:78:2f:a6:a5:
f3:7d:ec:98:20:2f:82:a9:65:0b:36:d9:b5:fa:20:
87:2f:16:e4:ab:72:f2:6d:f5:85:c0:c6:72:32:11:
d1:bf:b2:34:49:3e:fe:20:51:fb:50:58:84:4e:9d:
62:2d:27:8a:6a:48:39:8b:d7:fa:c9:9c:53:e1:f9:
b6:fe:5a:c6:1f:a7:de:d3:67:31:8d:85:4c:20:7a:
6e:86:a1:8d:46:f8:5d:49:ee:4f:73:fb:84:49:a9:
d0:eb:95:25:16:79:5e:7b:7a:65:18:bc:1b:70:98:
be:d0:cd:39:41:18:66:39:dd:97:7d:80:71:87:c7:
1f:84:0b:09:9e:b2:62:0d:b0:67:29:f5:25:2f:e8:
ec:27:64:76:72:db:03:4b:76:a9:8a:86:31:32:3e:
5a:6d:66:6a:13:e4:25:46:b1:bf:1a:2f:ce:a1:f5:
bd:87:9e:a0:b1:8b:73:47:f1:aa:ae:58:15:90:68:
bd:12:82:fb:1d:67:f3:45:11:28:a6:44:e7:27:d7:
0a:e3:db:61:18:4d:2c:34:f2:1a:6c:89:79:c2:e1:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CE:DF:51:58:DB:71:34:62:B5:45:B5:C0:E3:13:47:9B:FA:23:FF
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:e1:84:b1:c7:ec:2f:bb:64:23:70:5b:41:f1:af:fd:42:
1a:06:c9:df:c9:5a:66:af:bd:f0:76:64:a4:7b:b6:59:2b:6c:
ca:16:1b:a1:8b:b3:c0:fc:ff:0b:d3:38:6b:b4:cb:65:7e:7c:
7e:92:09:84:4e:8e:d0:97:10:58:13:66:ce:1e:1b:f6:ea:3d:
bc:72:1c:87:96:3e:ba:49:4f:6d:04:86:8a:96:b0:42:4c:b7:
a0:d3:8d:45:2c:a9:17:be:66:cd:96:21:21:0f:d9:16:b6:68:
3f:d9:a4:e6:d9:27:e1:fd:99:73:4c:70:60:53:ce:ae:b4:c9:
7e:40:24:35:36:3e:4b:89:91:f2:b3:6b:92:6e:a5:ec:27:7c:
0d:dd:e1:fb:a3:34:27:f9:a7:00:46:44:2d:62:bc:4f:97:c6:
df:af:2c:0c:76:06:30:e9:54:d6:cc:62:88:55:af:5f:e1:3c:
1a:22:13:1a:27:d6:bc:ec:da:34:aa:ec:f9:c8:a0:ea:ec:d1:
3d:67:45:fd:14:ae:37:95:7a:9b:70:d2:c8:ff:76:ed:a7:17:
11:10:73:f3:f0:51:15:29:8b:dd:83:74:aa:d0:5a:7d:7b:43:
ad:53:39:c2:5d:36:c9:bf:ec:92:66:e2:6b:52:dd:66:5a:76:
7b:16:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:57 2026 by rpki-client