Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: WMHfVY47AQzhfV0PisHm+psYqN7khwHB3LiZUgMcwEg=
Subject key identifier: 91:B5:23:92:95:B1:61:26:4A:65:7E:AB:05:D1:A7:D4:F9:98:1D:26
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 01A08341405ECA8FD07827A1480A63573353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 1995
Signing time: Tue 08 Sep 2026 23:01:26 +0000
Manifest this update: Tue 08 Sep 2026 23:01:26 +0000
Manifest next update: Wed 09 Sep 2026 23:01:26 +0000
Files and hashes: 1: 4hFvzV4WrmiLIBpFJw9jPUjsv-0.roa (hash: SOzlsBSFn/lFTeVqU71MsP/XA8RfCBYPDkl2dtb8tLE=)
2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: 0XUW7OQIDWZS9AIRLdWwju80zMY5zTXmI10VXrKJHG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:41:40:5e:ca:8f:d0:78:27:a1:48:0a:63:57:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Sep 8 23:01:26 2026 GMT
Not After : Sep 9 23:01:26 2026 GMT
Subject: CN=91b5239295b161264a657eab05d1a7d4f9981d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:b2:8e:a4:38:f7:19:e7:c7:31:cd:64:df:
fb:a3:74:4b:67:42:48:7a:fa:ea:5a:47:88:00:63:
bd:30:8e:ce:20:6e:6a:f4:4c:7c:48:80:88:57:f5:
a3:6a:24:ef:66:84:76:ba:06:49:1c:c5:55:5c:6c:
77:43:36:63:5c:28:aa:e8:ea:73:0b:90:72:d4:e8:
0c:be:ff:98:a7:eb:c2:bd:d1:27:4f:98:76:71:02:
ab:e8:f3:f5:f8:68:28:6b:e7:e5:4b:65:e1:bf:f3:
46:9e:97:77:06:ef:51:02:06:6e:d2:99:ce:d9:f9:
0f:d4:9e:e7:5f:b3:47:26:99:cd:d3:77:a1:1a:03:
3e:8d:d7:08:00:65:48:dc:48:ed:ba:1e:85:50:4e:
bf:78:41:1c:b9:02:60:2c:e9:1d:60:18:cf:45:91:
13:46:8c:db:66:dd:8c:53:de:25:37:6e:03:86:99:
34:62:b1:44:a6:4a:6d:1f:1b:62:f3:a5:7b:61:71:
e0:51:98:25:00:e7:8a:e2:5a:3a:f5:06:a2:44:77:
38:ff:d6:53:4d:0c:5e:7c:4c:47:f9:05:dd:9d:74:
0a:cc:59:c2:b8:1d:78:8d:bc:12:91:16:11:13:12:
f5:bd:1d:18:7e:ce:b6:0a:ef:3b:a9:f4:9b:30:b4:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:23:92:95:B1:61:26:4A:65:7E:AB:05:D1:A7:D4:F9:98:1D:26
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:fd:7a:3e:93:61:ec:e3:6c:17:f1:df:3e:57:9d:f7:3c:
9a:68:7b:74:b9:73:dc:88:27:e5:19:86:dc:a6:f8:4f:92:df:
f8:ec:e0:87:aa:e1:4e:90:62:55:ed:00:1d:36:ea:1f:c7:86:
86:30:38:c1:6d:e9:56:14:26:b5:cc:f3:da:50:02:cc:b8:81:
a7:6c:48:26:6d:bb:34:c0:97:a3:60:fe:41:5c:ec:a7:65:55:
7f:44:fb:cf:dc:fe:f7:82:d8:7e:ba:1e:e0:0b:ca:a4:e9:63:
b6:22:69:9e:77:f9:66:c5:13:67:23:a0:1b:fb:1d:2c:7a:13:
40:b8:7c:15:b1:39:74:ed:6d:bf:7a:b8:b8:13:53:83:69:25:
83:c5:96:6a:c4:1f:e6:4c:80:2c:51:2c:8d:11:32:55:9a:50:
8e:69:f0:01:a7:78:9d:24:46:76:13:85:b9:09:af:83:8f:7d:
3a:3f:18:d9:b9:ce:8b:ca:8e:31:c0:32:85:e4:b7:92:ed:34:
37:6c:3e:20:17:ed:a1:67:e9:98:ff:1e:f3:0e:20:38:df:b4:
28:65:33:bf:1c:10:ad:61:e1:9b:34:54:08:e0:8d:ce:72:fb:
92:56:63:59:84:b6:bb:e6:42:15:60:17:37:f4:0b:c8:9f:92:
1e:a1:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:37:35 2026 by rpki-client