Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: 95NJCS+Bx/0VK909H1UHH1MPmbrgYtoGBqMgAVbpGzE=
Subject key identifier: E1:7D:0B:8E:F9:54:59:FD:52:43:E4:90:34:23:05:EC:DE:77:2C:0F
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019EB921CD86108B3670863EDF6E31B18E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 01DC
Signing time: Fri 12 Jun 2026 00:01:00 +0000
Manifest this update: Fri 12 Jun 2026 00:01:00 +0000
Manifest next update: Sat 13 Jun 2026 00:01:00 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: /lr3ok8taBA6Pa688MAmDR5A21C8Nsb5YBomryYCawI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:cd:86:10:8b:36:70:86:3e:df:6e:31:b1:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Jun 12 00:01:00 2026 GMT
Not After : Jun 13 00:01:00 2026 GMT
Subject: CN=e17d0b8ef95459fd5243e490342305ecde772c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:04:bc:2a:d7:43:de:d9:3a:f6:fb:79:b7:
19:ad:ba:fc:0e:d3:54:cd:b8:93:c5:db:65:36:ca:
31:dc:e0:22:6c:06:72:b3:3e:03:e0:1c:01:35:c3:
80:be:56:e2:f5:86:e3:bd:a5:9f:0f:36:4c:4f:f0:
ad:2e:5d:cd:36:27:d7:22:c6:34:a6:78:c6:35:58:
46:fa:6a:cc:b5:03:e7:84:8a:e0:83:7e:8f:a6:f4:
de:89:d5:64:27:d9:8c:10:d2:92:f3:4d:9f:08:fe:
9f:d4:ce:39:2e:2a:c3:7f:6a:a0:a2:d0:9f:c8:52:
b2:77:5e:cd:85:86:c5:de:b7:ff:5a:c5:ce:1c:9a:
b5:67:55:8c:40:af:59:55:60:f3:8e:08:f4:a4:5a:
e5:4e:5e:20:38:ef:e4:5d:e8:75:b3:db:c7:a1:a6:
53:1f:15:04:f9:30:17:cc:b5:26:13:47:f5:a2:29:
80:72:8e:db:29:33:dd:8c:a6:93:17:3b:22:c9:5b:
9a:08:a9:aa:4f:c7:b9:c0:d3:6e:b0:07:76:ac:b3:
44:4b:3e:4c:83:22:14:f1:ae:46:4b:e3:4f:8f:74:
c5:b7:29:d6:1c:79:a6:81:45:cf:af:6d:ce:70:c2:
89:83:c0:85:dc:ad:09:15:c7:9a:12:8c:fc:6a:d3:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:0B:8E:F9:54:59:FD:52:43:E4:90:34:23:05:EC:DE:77:2C:0F
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:22:88:d1:e3:86:37:64:29:4b:d7:33:85:9d:50:07:fd:3b:
a8:11:3f:ea:cc:90:1d:4f:6d:69:63:2c:86:e0:7c:e9:20:20:
d3:2a:e2:b6:87:37:6a:ba:6c:a0:7b:b9:6c:d5:3e:a9:00:72:
c6:f8:6a:2e:d3:8e:07:d4:aa:e2:8a:c4:4e:64:b5:f4:72:db:
4f:fb:d0:1f:c7:e7:24:72:2a:c3:ad:d6:73:db:b7:39:e8:e2:
2e:1f:38:bb:96:04:7f:7d:a2:49:53:08:77:8f:8a:99:eb:58:
d3:48:3a:e0:bf:a8:88:13:07:6d:e7:34:20:7d:b3:dc:4d:27:
b0:53:da:96:74:03:b9:04:b4:d8:b1:e7:0a:20:cf:4d:77:78:
57:73:e5:4b:fd:c4:dd:fe:c2:80:be:9d:d3:70:f9:6e:d5:6d:
e7:71:b1:50:c5:e0:fd:c4:70:9e:b9:a6:1b:b3:b9:7e:b5:21:
61:e3:62:ed:b9:91:ac:bb:29:46:af:9b:d8:39:0d:e0:68:60:
82:19:1d:00:e7:d5:4f:63:3f:7d:ef:34:d2:7b:39:57:20:31:
17:39:69:21:a5:89:43:0b:a7:55:98:a0:ec:d7:2c:a0:c6:f5:
44:06:a8:e6:ba:82:78:23:5d:a4:6e:a1:b3:c9:4f:c6:8e:32:
26:88:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:00:03 2026 by rpki-client