Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: ZhHCZOHh/iKhrPZER+SIJvu0QyX2BYhmTv14EicbXZc=
Subject key identifier: 03:5B:2C:0A:48:88:15:B5:1F:E0:3A:17:24:44:8C:D4:D3:15:15:F1
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019DCF74C2500BD27A089FC66CD630397D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 0163
Signing time: Mon 27 Apr 2026 15:00:28 +0000
Manifest this update: Mon 27 Apr 2026 15:00:28 +0000
Manifest next update: Tue 28 Apr 2026 15:00:28 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: 0GRzTCYnUjB4xDIc7Qm1uynk+1uc6jYJApx9NaEIJF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:c2:50:0b:d2:7a:08:9f:c6:6c:d6:30:39:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Apr 27 15:00:28 2026 GMT
Not After : Apr 28 15:00:28 2026 GMT
Subject: CN=035b2c0a488815b51fe03a1724448cd4d31515f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:43:46:f7:bb:1a:1d:12:3a:37:77:cc:2f:
8d:1a:c7:a7:f5:61:97:93:a9:24:85:59:a9:3a:4a:
9d:32:43:22:5d:03:3d:f4:72:dd:e7:f4:cc:75:8a:
69:e3:7e:cf:23:bc:54:2e:91:bd:ee:3b:da:78:ee:
ac:a2:6e:50:ad:23:ff:95:5f:f9:09:50:07:0d:03:
38:b2:5b:86:c2:f7:f1:cf:03:fa:4c:21:b1:c5:56:
8f:db:7f:33:1e:06:3c:66:95:e0:34:ee:13:c8:de:
4b:e3:e2:af:bf:f9:91:6a:3f:c3:9d:64:9b:49:e4:
d9:37:c4:27:19:f8:5e:8e:de:e5:0c:39:f9:ca:12:
ef:45:cf:2d:0f:24:8e:16:73:ce:9f:9f:41:ca:09:
2a:45:46:5a:a9:fb:df:92:b8:a1:ec:c2:4d:10:7f:
17:77:6e:ad:3f:0f:9c:8f:6e:e7:fd:a5:d1:2e:0c:
d6:39:c4:e1:3d:64:0d:ba:08:c3:9e:f6:98:0c:2b:
ff:1f:49:04:0f:07:bb:f1:d3:5a:f6:6b:9e:9e:36:
40:bd:b2:c0:f1:1a:05:23:e8:1d:3b:cc:fd:50:e5:
aa:d1:20:e6:9a:9f:81:e3:2e:ef:77:49:81:d8:d1:
a6:fd:ff:fc:bf:a5:08:9e:3f:30:34:5c:60:f8:bf:
71:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5B:2C:0A:48:88:15:B5:1F:E0:3A:17:24:44:8C:D4:D3:15:15:F1
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:22:cd:65:fb:45:ff:10:a5:6b:92:33:53:82:d5:83:06:4a:
30:41:d4:ce:cd:82:6a:47:1d:df:41:bd:df:1b:07:5e:6e:cc:
68:65:65:48:c8:61:84:59:15:b8:e7:eb:15:3d:91:f2:c8:44:
cb:ef:9d:05:e6:51:9b:1d:3b:b4:c8:f8:46:15:34:e7:f3:95:
f4:bf:c3:f2:9e:ec:8c:92:bd:7d:c2:b9:ac:f4:75:d1:22:7e:
1b:5d:32:a3:7e:67:eb:65:fa:4e:cb:7e:95:b3:99:97:48:f9:
7d:bd:d5:24:58:24:b8:05:4e:ed:92:52:b8:20:c9:bf:ad:c3:
fe:7a:fe:9f:6e:be:57:1a:0a:4e:27:1b:d3:6c:11:8a:21:d6:
87:86:1a:c1:71:f6:0a:2d:9d:9e:88:a9:ff:b4:3f:08:d2:d9:
c7:42:a3:32:f3:79:17:ed:31:cb:5e:3e:ed:50:bf:b1:e3:d8:
89:a6:f7:a3:a7:9f:a2:39:20:e3:99:70:86:aa:be:07:e7:be:
be:41:ce:f9:8f:d8:dd:26:8f:69:72:63:69:1f:4c:c7:a9:5a:
49:b0:2d:f6:29:dc:93:f3:6f:24:44:49:0d:9f:cd:be:1d:aa:
54:74:2f:a0:ce:c6:c9:9d:fc:a3:05:6b:4f:bb:96:c7:51:52:
8c:d6:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:46:11 2026 by rpki-client