Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: R40djienlqSODmQX5YnOWsuRpc/ouvHUDLQrC0pSrg0=
Subject key identifier: 52:95:53:FE:7A:7B:62:EB:F2:29:CB:DE:0D:E6:E2:D9:3D:3E:04:35
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 01A18F42492D57EB94B314F22C9449AD137D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 0354
Signing time: Sat 31 Oct 2026 00:00:48 +0000
Manifest this update: Sat 31 Oct 2026 00:00:48 +0000
Manifest next update: Sun 01 Nov 2026 00:00:48 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: SU67N1c1yWzt+s7ZHNtUM7c3/mzeYFwLghkhqdd7hFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:49:2d:57:eb:94:b3:14:f2:2c:94:49:ad:13:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Oct 31 00:00:48 2026 GMT
Not After : Nov 1 00:00:48 2026 GMT
Subject: CN=529553fe7a7b62ebf229cbde0de6e2d93d3e0435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:5a:c4:aa:12:3c:23:c3:7b:93:7b:dd:2b:
44:cd:9b:ff:7a:d7:f8:6b:c5:0e:7d:ec:02:5d:57:
36:f5:b8:89:c8:24:10:34:ab:11:0a:0f:20:c1:86:
1b:c1:e8:92:53:c5:36:29:29:3c:4e:99:ee:70:ed:
24:bc:e8:e5:ee:29:f6:46:1b:2a:cc:e0:21:01:c7:
8a:9a:66:90:65:db:0c:ab:96:9c:11:c8:d3:63:22:
7d:66:ef:d4:58:6d:12:c4:f4:5a:0e:ba:bc:0e:3e:
1f:9e:13:01:9a:72:1a:50:43:8b:63:59:b3:4f:64:
d4:f7:2f:2a:89:b1:ca:1f:ed:65:57:48:b4:5a:bc:
aa:19:95:42:fc:c9:40:48:aa:c9:e3:f6:71:18:27:
7b:b4:93:9c:62:cc:1a:26:0d:d1:28:48:c1:a5:f1:
7f:69:00:84:c3:13:cc:ec:f1:a7:d0:a8:25:d0:48:
f3:d7:4b:aa:5a:d1:6a:8f:62:ab:5a:fe:5a:42:45:
de:84:5a:50:67:34:fe:2f:29:c5:de:cd:3f:b0:c7:
e2:a6:df:27:90:6c:a4:6e:2a:14:25:30:61:12:0e:
74:b6:9e:9a:94:f4:e3:d4:9e:b0:a1:bd:68:6a:cb:
73:52:09:83:bf:80:9d:82:6b:5b:65:b1:e6:9f:33:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:95:53:FE:7A:7B:62:EB:F2:29:CB:DE:0D:E6:E2:D9:3D:3E:04:35
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:40:ab:5a:a1:01:b2:c0:b0:0e:53:c2:a1:7d:5d:36:bd:fc:
59:84:5a:83:22:7e:1e:2e:99:40:f5:3d:3b:09:e1:fc:25:06:
46:91:a4:4b:fa:ad:0c:10:ba:e0:7b:34:d5:d9:c5:0a:16:44:
85:4f:4e:9a:e9:9f:9a:46:63:e9:0c:78:0b:a5:5e:7f:d6:d8:
ec:6b:22:e8:92:db:82:c4:28:d5:62:d8:3d:60:9a:15:13:95:
f6:11:60:99:5f:79:22:2f:44:10:4c:f3:9e:b8:0c:77:57:c6:
92:9b:70:de:ac:79:22:3e:21:c5:37:50:a6:f6:d8:b2:8a:47:
b6:40:95:6b:5d:c6:8a:75:e5:b2:b5:18:2d:a0:65:c8:8a:5f:
5b:22:3e:94:bf:62:3e:b9:26:4a:4e:ec:da:70:b2:93:17:60:
19:67:e1:4d:f9:28:2d:c9:12:d5:b5:1d:25:01:b3:79:d3:62:
84:0f:f1:a5:e4:e7:f4:48:70:27:8c:f5:8b:ad:4e:ad:25:45:
fb:c9:fb:5f:87:ef:84:a0:c3:3c:3d:a7:8d:a5:28:c2:8e:2a:
87:5e:22:86:39:c2:97:fb:25:91:b9:80:5a:9c:ed:df:46:f5:
a5:39:30:6a:b3:d5:da:2f:b8:ec:f3:10:bd:33:9d:31:e0:05:
23:92:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:50:14 2026 by rpki-client