Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: /IG6HHfSmVye41OInRJyV2G8zaNbHfP9TGYIne4PZBI=
Subject key identifier: 67:85:60:63:25:EC:7C:E2:0F:AF:63:D0:0E:51:3F:6D:FF:1C:21:54
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019FA2CDA9E8BAB1E0E3CCA10DE83E88AFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 0255
Signing time: Mon 27 Jul 2026 09:00:15 +0000
Manifest this update: Mon 27 Jul 2026 09:00:15 +0000
Manifest next update: Tue 28 Jul 2026 09:00:15 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: dP/oJGnOmavyYAMsrk1JYWaWj+K9ZZjJGbZa2p/YKc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:a9:e8:ba:b1:e0:e3:cc:a1:0d:e8:3e:88:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Jul 27 09:00:15 2026 GMT
Not After : Jul 28 09:00:15 2026 GMT
Subject: CN=6785606325ec7ce20faf63d00e513f6dff1c2154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fa:63:af:fc:48:78:58:b2:71:57:93:51:33:
28:23:d9:76:26:1e:00:66:bf:8d:0e:7c:65:20:ed:
73:3d:fc:8f:5f:a5:43:5b:b5:a6:07:3f:75:a5:86:
5c:ae:46:39:3c:d9:e0:d0:e7:4f:be:4b:f5:db:d9:
bf:1c:09:84:eb:5b:80:5c:b6:0e:a3:d9:95:fd:26:
17:7b:89:27:12:ca:fd:00:98:61:24:1a:d0:8b:cb:
59:aa:4d:b6:0a:ec:80:da:f9:f6:38:56:b1:39:30:
e9:8a:43:54:f2:58:a1:11:69:fb:7a:64:06:84:67:
72:3b:b6:06:f6:5e:12:0d:7c:2b:5d:1d:3b:7c:b1:
26:ce:22:bd:dc:2f:67:5d:c2:2e:cd:c1:9a:f1:be:
d6:f6:85:11:55:dd:64:9c:47:5d:1d:74:76:8e:f3:
21:64:d2:81:96:1b:8f:f1:25:7b:b9:ff:ff:30:9c:
06:e0:ab:80:98:09:7e:a1:a5:93:90:a5:4b:51:d1:
69:a7:76:16:d6:dd:9c:d8:58:7d:c5:6a:94:02:d0:
16:c1:52:13:a1:68:80:4e:68:65:00:5e:3c:84:d9:
3c:aa:83:16:33:1b:a2:59:62:7b:a2:c0:6d:30:cd:
c4:e4:89:52:03:32:df:77:dc:60:7f:32:3c:1c:4f:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:60:63:25:EC:7C:E2:0F:AF:63:D0:0E:51:3F:6D:FF:1C:21:54
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:13:c3:4e:11:61:4e:4d:c3:b7:30:14:ed:31:23:b1:84:
b0:35:a4:c0:17:84:32:63:ea:a5:fe:a6:14:c5:51:3e:e5:9a:
8c:b9:ed:58:27:2d:ab:8b:69:31:28:b0:7f:27:4a:7d:f3:96:
4a:ed:4e:38:3e:7a:b9:dd:f2:df:72:72:fe:7e:04:ba:7e:7c:
45:63:6f:be:28:6a:69:af:2c:a0:07:d8:17:f8:21:a2:55:34:
ac:d4:7d:df:9a:93:1e:88:d1:c9:1a:7c:1d:85:5f:08:5d:e4:
8e:6d:ef:eb:2c:16:a1:b7:c5:78:30:5f:86:23:65:1d:f3:55:
c3:96:4d:16:d4:20:35:9c:5a:19:15:e9:cf:4a:3a:7c:0f:92:
3f:cc:05:1f:85:c4:15:a2:2d:7e:53:1b:9b:c0:4b:1f:c3:4a:
a4:ed:ab:6f:8d:95:08:c7:7c:8c:eb:5e:5e:be:20:06:21:3e:
09:04:d6:01:13:3b:14:df:c3:e5:71:09:af:ad:98:8e:1d:db:
92:26:cf:f3:72:57:48:ca:b0:ad:c6:c9:60:e3:10:99:32:af:
36:25:34:d2:4e:14:d3:4f:d1:80:e9:b7:30:aa:21:65:47:4e:
1b:f5:c9:0a:a5:4e:5b:d1:63:07:5e:50:5e:26:ee:ea:5a:88:
74:fb:62:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izanourHg48yhDeg+iK/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWM2Zjc2Mjk4YzVmNWZlMjZiMWU5MzJhNDUwNTEzZmNj
MzliMzgwHhcNMjYwNzI3MDkwMDE1WhcNMjYwNzI4MDkwMDE1WjAzMTEwLwYDVQQD
Eyg2Nzg1NjA2MzI1ZWM3Y2UyMGZhZjYzZDAwZTUxM2Y2ZGZmMWMyMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/pjr/xIeFiycVeTUTMoI9l2Jh4A
Zr+NDnxlIO1zPfyPX6VDW7WmBz91pYZcrkY5PNng0OdPvkv129m/HAmE61uAXLYO
o9mV/SYXe4knEsr9AJhhJBrQi8tZqk22CuyA2vn2OFaxOTDpikNU8lihEWn7emQG
hGdyO7YG9l4SDXwrXR07fLEmziK93C9nXcIuzcGa8b7W9oURVd1knEddHXR2jvMh
ZNKBlhuP8SV7uf//MJwG4KuAmAl+oaWTkKVLUdFpp3YW1t2c2Fh9xWqUAtAWwVIT
oWiATmhlAF48hNk8qoMWMxuiWWJ7osBtMM3E5IlSAzLfd9xgfzI8HE/9DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeFYGMl7HziD69j0A5RP23/HCFUMB8GA1UdIwQY
MBaAFAzsb3YpjF9f4msekypFBRP8w5s4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2Ut
ZjlmMzg1NTcyNjk2LzEvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2UtZjlmMzg1NTcyNjk2
LzEvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXcTw04R
YU5Nw7cwFO0xI7GEsDWkwBeEMmPqpf6mFMVRPuWajLntWCctq4tpMSiwfydKffOW
Su1OOD56ud3y33Jy/n4Eun58RWNvvihqaa8soAfYF/gholU0rNR935qTHojRyRp8
HYVfCF3kjm3v6ywWobfFeDBfhiNlHfNVw5ZNFtQgNZxaGRXpz0o6fA+SP8wFH4XE
FaItflMbm8BLH8NKpO2rb42VCMd8jOteXr4gBiE+CQTWARM7FN/D5XEJr62Yjh3b
kibP83JXSMqwrcbJYOMQmTKvNiU00k4U00/RgOm3MKohZUdOG/XJCqVOW9FjB15Q
Xibu6lqIdPtiTw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:57:56 2026 by rpki-client