Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: xq3dVfYuMz5ExHBcR70kB++VEDeC1ORDqW2zPnByrDk=
Subject key identifier: 22:FF:58:7E:03:83:2E:95:E9:66:0D:BF:E5:A8:0A:B9:0D:24:C8:35
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019CE5C8B905DBE36496CF3023F5013A896C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: EA
Signing time: Fri 13 Mar 2026 06:01:02 +0000
Manifest this update: Fri 13 Mar 2026 06:01:02 +0000
Manifest next update: Sat 14 Mar 2026 06:01:02 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: 6nyyCuw64cXNn0duwM26rYsa2wXavKx7Ieyo1SFz4fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:b9:05:db:e3:64:96:cf:30:23:f5:01:3a:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Mar 13 06:01:02 2026 GMT
Not After : Mar 14 06:01:02 2026 GMT
Subject: CN=22ff587e03832e95e9660dbfe5a80ab90d24c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:bf:82:4a:1a:93:64:d7:95:5f:af:08:6c:
de:49:34:59:25:95:e2:a6:bb:6c:14:d4:12:e0:fa:
40:13:81:83:66:46:31:9d:a6:5a:dd:fe:2b:58:f0:
8c:97:96:38:15:ea:b2:be:e5:cc:cb:8c:2c:b1:36:
16:83:08:28:4d:7e:87:a8:47:05:e8:9a:21:82:34:
3e:09:c3:e0:83:91:e2:d4:80:f5:29:25:de:4a:83:
5d:f6:1e:e3:77:7e:42:f0:c1:02:18:e7:f5:e5:a3:
3a:55:f3:1f:f2:2d:d5:94:e4:0b:e1:28:6f:d5:61:
7e:5e:a9:39:c2:74:31:8a:60:90:64:ef:e1:15:c3:
d5:be:b5:df:9d:ee:ff:85:6c:94:3a:c3:37:39:00:
8f:ff:ea:5b:e1:62:be:9a:b1:62:86:84:c4:f9:77:
8d:75:5e:df:1e:db:28:12:5a:44:5b:9e:88:f1:e0:
4f:7e:13:00:cf:40:7a:ca:cf:4b:aa:8d:ae:79:f2:
53:4b:d9:60:99:cf:10:0f:a7:e1:6b:48:ab:41:a1:
b9:ee:aa:5e:ee:b9:ec:17:04:11:4b:ea:00:41:45:
26:f7:1f:3c:1f:c3:ae:07:25:c3:ae:7e:b9:9b:7c:
dc:78:58:67:76:25:07:c5:37:ad:35:26:56:89:e8:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:58:7E:03:83:2E:95:E9:66:0D:BF:E5:A8:0A:B9:0D:24:C8:35
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:55:05:91:fb:3d:6b:82:6f:c8:6f:62:70:e5:2e:aa:de:4e:
ea:ad:15:42:b9:8a:d6:db:0d:b6:2c:c6:83:a1:72:95:c1:cd:
5a:f6:89:da:e6:4c:27:56:44:8b:22:03:0c:41:1a:73:4a:78:
56:ee:e3:32:45:34:be:a4:e6:67:bd:13:77:ce:c6:5d:8e:f3:
9b:5e:a2:1f:9c:c7:35:f8:af:88:3f:24:c8:6d:c4:3a:98:aa:
97:f2:97:fd:63:01:cc:f3:28:c3:e0:63:c8:81:bd:21:b8:f0:
cd:97:c9:55:94:ec:97:94:bc:9b:a6:1d:46:f6:8f:3b:c3:21:
ce:45:90:9d:eb:bb:04:7a:4c:d1:f9:b6:63:ba:bf:c8:8b:42:
2a:70:3c:22:fd:89:ca:e1:9b:dc:84:6a:48:8b:03:61:50:7f:
b9:8d:eb:a0:fe:21:a8:0f:98:3b:8b:a7:9b:2d:dc:07:fc:38:
2e:7d:09:ab:e0:a3:8b:3d:2e:2e:c2:80:9c:ef:6b:e2:15:b5:
c5:51:2a:65:47:bf:a2:94:64:dc:7c:1a:4c:39:4f:15:6f:35:
e6:a7:e9:e8:53:ba:e5:66:15:0e:73:ef:af:90:d8:07:19:00:
b0:66:78:75:c2:5b:8f:50:43:58:03:ff:5a:87:26:46:22:dd:
33:a1:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:55:14 2026 by rpki-client