Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: zqBWqAIJLPCyvaO+w/MG8A9HT1zu9yO7Y7ZcR8nOhPw=
Subject key identifier: 15:62:1D:2F:F4:94:33:7D:DC:79:5A:00:9F:EF:3A:74:41:AE:FA:EA
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 019DC0700CF448E1240306B63175AFCC6BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 1827
Signing time: Fri 24 Apr 2026 17:01:01 +0000
Manifest this update: Fri 24 Apr 2026 17:01:01 +0000
Manifest next update: Sat 25 Apr 2026 17:01:01 +0000
Files and hashes: 1: 4hFvzV4WrmiLIBpFJw9jPUjsv-0.roa (hash: SOzlsBSFn/lFTeVqU71MsP/XA8RfCBYPDkl2dtb8tLE=)
2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: A9a2tk63k3HFqFJT6lYivUCYj7OYNWHk6eHmdYa7vaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:70:0c:f4:48:e1:24:03:06:b6:31:75:af:cc:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Apr 24 17:01:01 2026 GMT
Not After : Apr 25 17:01:01 2026 GMT
Subject: CN=15621d2ff494337ddc795a009fef3a7441aefaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:2c:f0:53:40:d4:53:4b:fb:bd:e4:aa:3d:
da:c1:90:23:ba:67:96:2e:96:33:23:f1:c3:6e:a6:
7d:a0:3f:34:bf:f2:48:32:3e:b1:33:a3:cb:50:12:
2d:6a:83:75:90:0f:8f:a6:9c:6a:2e:88:04:bc:19:
9e:82:c2:9e:49:bf:18:35:22:b0:73:3b:0e:25:6c:
88:5a:7b:b5:c8:c1:54:be:56:99:9b:62:61:69:58:
ae:2f:5c:39:7a:92:b2:65:bb:a1:3b:4a:ac:fe:33:
17:f6:3c:71:50:33:90:98:1f:dc:e6:c2:52:ed:18:
a9:03:8d:8b:0e:f0:92:bf:e5:e3:91:41:40:fc:72:
89:84:31:96:cb:06:09:28:f1:ac:8f:4e:d3:fe:d3:
62:65:f5:2b:a2:5e:34:d6:36:37:7f:93:66:ba:e9:
30:b4:6b:2d:09:21:c3:7e:40:68:33:e8:88:bd:4d:
43:e6:5f:c5:44:fb:3d:91:18:d0:bb:ee:e5:fb:c3:
3f:66:09:73:2c:b6:a7:b4:47:06:66:dd:71:a5:08:
1f:dc:7b:01:fd:cb:0d:74:c1:fe:6b:af:b4:0b:32:
01:34:ca:70:10:7f:66:c0:fd:93:f6:58:19:b2:db:
18:ba:66:ba:c1:b9:18:23:58:ec:60:ff:9b:10:4b:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:1D:2F:F4:94:33:7D:DC:79:5A:00:9F:EF:3A:74:41:AE:FA:EA
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:ed:5c:e1:19:b7:cb:ea:a8:2c:e5:32:95:58:a4:70:1f:
fa:6a:cb:8d:d4:3f:b8:e0:c9:17:25:b9:0b:46:36:7e:a8:3f:
b3:9f:b6:a7:19:db:3b:92:b1:03:09:4e:9b:b1:8b:7f:2a:bb:
25:3c:82:34:36:bc:ae:c0:1e:b9:2e:ba:f1:24:b5:32:a0:16:
ea:1e:aa:c5:f5:f3:89:5b:3d:10:83:6a:5a:8e:0f:a1:7c:db:
7c:ef:b4:6f:e9:a2:36:66:99:45:de:8d:91:0b:3e:79:5c:a4:
cf:62:41:b5:5a:d0:36:13:2a:69:da:3b:56:ef:1e:b5:4d:ff:
d1:d4:7f:a2:8d:85:2b:91:f4:1c:f6:a9:b4:1b:27:35:00:de:
b2:eb:b5:04:c5:a6:cb:41:cf:b8:7c:b3:7c:42:73:a2:64:86:
96:b4:78:8d:03:b1:4d:40:d7:97:0e:e6:65:bb:dd:e3:4f:8d:
d7:e2:7a:9d:a4:c2:c9:46:8a:98:d5:22:84:bf:96:c4:82:cd:
d8:f0:a5:2a:48:87:60:6b:7f:95:d7:90:15:9e:0f:ad:84:dd:
55:0a:0c:7a:fc:a5:e3:7f:2a:bb:4b:5c:45:9d:16:08:2e:16:
28:85:1b:bd:bb:60:07:85:98:e4:81:c4:02:73:40:f8:62:75:
bd:b7:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 01:45:57 2026 by rpki-client