Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: Y8VZAEIqo87u1FreGZ/LEc6BZwcQv3+cPCxB5qqBfS0=
Subject key identifier: 43:79:24:2F:05:FE:2C:DE:AD:37:07:5E:F9:54:85:C6:71:3E:FD:CC
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 019D39E5A4887BD3ECD475DA671851B3D752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 06FC
Signing time: Sun 29 Mar 2026 14:00:44 +0000
Manifest this update: Sun 29 Mar 2026 14:00:44 +0000
Manifest next update: Mon 30 Mar 2026 14:00:44 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: xEPYZcuBM75+cxfeV+Znl9LEeur3FwNCcO8dvW4GsR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a4:88:7b:d3:ec:d4:75:da:67:18:51:b3:d7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Mar 29 14:00:44 2026 GMT
Not After : Mar 30 14:00:44 2026 GMT
Subject: CN=4379242f05fe2cdead37075ef95485c6713efdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:17:d1:69:6e:4d:16:85:d1:32:12:6a:43:
36:15:2f:02:cf:05:34:8f:ee:ea:86:cd:b4:76:a2:
4b:a9:88:2d:81:15:4d:de:9f:44:e4:42:4e:ba:c6:
81:04:c6:42:6e:6d:5c:5e:3b:68:e5:6b:3d:58:fa:
2c:a2:86:12:41:45:07:24:98:7d:85:2a:2b:88:aa:
af:8f:11:12:99:96:b1:ab:ae:5b:77:b4:9a:88:a9:
4a:68:20:bf:06:23:da:0b:f5:51:50:f7:86:58:f1:
46:5a:82:58:29:09:7b:96:cc:d3:38:b2:3d:d2:ed:
34:1f:73:14:0d:76:50:c2:bc:76:9a:e4:dc:04:72:
e4:c6:de:14:61:5b:5e:df:0d:05:62:84:8c:fa:2a:
b7:cd:f0:7f:de:69:38:bf:73:bd:aa:da:4b:27:25:
ad:34:67:dc:3c:62:f5:25:cb:b2:a4:39:80:46:31:
9f:6c:e8:09:54:15:be:23:42:84:01:94:1d:82:06:
22:ef:14:b7:4a:b2:d4:5b:ba:b9:76:74:1e:5b:24:
4a:89:15:88:45:f6:84:8b:af:43:a8:28:02:ba:b0:
cb:94:d6:6e:18:6d:8e:76:e3:55:30:e4:55:59:a3:
0e:c2:73:fb:24:ba:ba:1c:38:f7:8e:d9:6d:fc:ae:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:79:24:2F:05:FE:2C:DE:AD:37:07:5E:F9:54:85:C6:71:3E:FD:CC
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d5:01:d6:81:e5:89:7b:bb:69:56:43:c9:bd:15:91:0f:13:
a3:89:d5:b1:a0:f2:f5:27:da:ba:41:13:eb:a8:4a:63:6a:35:
2e:c5:44:58:9b:6b:31:00:8a:0b:e5:0f:9e:fb:a5:ad:82:98:
fe:88:44:5a:46:4b:cc:7e:9d:79:7f:da:25:52:ee:cb:cd:4d:
3a:c1:6d:ba:11:24:f6:a2:10:66:4e:5d:9b:93:36:8e:fb:a6:
9f:38:2c:15:23:2f:ec:f8:fb:bb:16:05:bc:17:2a:05:d8:85:
13:1c:23:e1:d5:f4:dc:90:97:dc:b7:8d:cc:63:57:14:e1:ff:
e7:0a:09:e9:ea:e3:b8:ba:6d:0f:f4:43:82:dc:67:a6:1d:3f:
0f:d4:a7:01:d6:88:a4:95:32:42:92:2f:0e:d1:2d:eb:04:51:
5d:02:bb:4d:e6:e6:2b:11:a4:6c:07:ff:d9:10:eb:0e:a3:c6:
91:2f:a8:e7:5c:0c:20:a2:6c:f5:5a:54:b5:71:65:d7:64:52:
7f:60:93:44:0e:29:a5:d5:9e:a6:02:5b:d2:4c:10:79:a3:45:
37:3d:20:92:0f:fd:03:17:5e:7c:c7:7f:5f:15:e7:6d:4f:85:
57:7b:dd:f0:10:01:77:49:a8:de:d4:0c:7c:60:99:f0:f0:aa:
47:37:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:28 2026 by rpki-client