
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: W1wRfuxXFIvdTna+FYB7fhekuhLRYWMDkZtTv5IL8Xs=
Subject key identifier: 81:4F:A1:CB:8F:EC:AE:15:3B:CE:FD:67:A1:82:0C:0B:15:BB:45:56
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 01A13D49FCEE5415A45ED6B1878A0C70783D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 0910
Signing time: Thu 15 Oct 2026 02:00:21 +0000
Manifest this update: Thu 15 Oct 2026 02:00:21 +0000
Manifest next update: Fri 16 Oct 2026 02:00:21 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: m0wM0v7WE8sEEkrmmP+3/PgevlSmN0ttTi4tFfnUprc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:fc:ee:54:15:a4:5e:d6:b1:87:8a:0c:70:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Oct 15 02:00:21 2026 GMT
Not After : Oct 16 02:00:21 2026 GMT
Subject: CN=814fa1cb8fecae153bcefd67a1820c0b15bb4556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:f1:c6:ef:11:ad:62:04:b0:e8:b3:dd:e6:
95:bc:00:5b:29:c3:94:e7:eb:4d:a9:3f:5e:7a:0d:
de:ab:50:7c:a1:cf:10:9d:ea:bb:76:ce:d3:ea:5d:
e7:d2:67:e4:c4:47:b4:df:37:d3:16:8a:9f:03:d9:
1a:3d:4d:b6:20:46:c9:67:11:70:14:09:0f:44:9c:
0a:7d:6d:e6:10:5b:7c:e8:76:85:b0:f2:d3:1f:c9:
b6:a8:f6:9f:2f:2b:38:8e:f7:85:18:04:e2:31:80:
29:d9:11:f2:83:bf:70:7d:6d:2a:ab:57:60:1e:f3:
d7:74:72:a3:98:b5:07:c1:0c:a3:56:b5:fe:c3:94:
62:f6:7b:f9:a7:62:f3:4d:2f:43:74:b1:e1:57:05:
59:95:d9:97:6d:b7:54:e7:47:ee:b4:f9:11:b9:85:
99:0a:fd:00:7f:15:83:d9:59:9e:db:7d:58:64:d3:
a2:5b:61:79:8e:c1:ed:4b:10:c0:f4:24:98:cb:96:
dd:a1:2e:d5:f3:32:9e:a9:77:d0:2c:18:74:05:0c:
0d:12:49:47:a4:36:21:aa:f7:07:b9:2f:a7:af:f6:
f5:52:b4:1d:d4:7d:38:f9:1b:77:d8:a9:72:d1:cf:
c6:30:b8:55:73:2a:96:bc:36:7b:bc:e4:32:f1:b4:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4F:A1:CB:8F:EC:AE:15:3B:CE:FD:67:A1:82:0C:0B:15:BB:45:56
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8f:f9:93:27:a1:00:09:87:d0:38:63:98:92:c1:8c:9e:ae:
1d:23:4a:9e:d9:f9:f0:7c:b3:33:43:0a:f3:1e:db:93:7e:5a:
b4:ee:fb:92:bf:3e:85:c8:3c:3d:c3:f2:7b:c1:98:e3:bb:b0:
ea:8d:a1:c9:f9:24:ca:d6:96:f3:76:23:50:45:aa:69:53:57:
1f:9b:0e:39:9f:9f:75:7d:6d:fd:38:c2:48:5d:ea:92:f7:7e:
5b:47:88:36:67:39:f1:24:db:96:fd:4e:db:f1:0a:27:90:2a:
1d:9a:7b:cd:3c:06:99:20:61:d5:b3:5d:71:f4:4a:74:7a:5d:
10:4f:06:4b:46:50:c5:f8:a3:7e:25:7f:4f:7c:e8:96:79:91:
56:b4:34:72:04:c0:30:6b:83:59:77:fd:d6:98:28:c6:ad:b9:
a8:c1:63:0b:a9:37:18:73:bb:ec:51:f9:36:c3:15:14:21:94:
54:ea:ae:4c:84:f6:c1:c7:fc:14:98:89:1c:06:29:57:50:3f:
f9:e9:9c:98:d5:31:90:48:bc:70:7d:12:e8:92:ce:51:a9:28:
3c:98:df:64:eb:14:5f:2a:b3:d0:b7:3d:9b:79:a5:63:32:80:
40:5f:2d:74:4b:f0:4c:e5:78:6f:f5:02:54:44:b9:00:f6:c4:
ac:ce:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:00 2026 by rpki-client