Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: Ziqbe/ky0CXuYCA+LdErQ2oy06yjYCjwFHsb9N+D+QU=
Subject key identifier: 53:58:AC:D0:E7:65:38:87:55:E8:8A:2E:DB:C2:5A:0F:09:2C:79:C6
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 01A19130A799684B34825394ACA0B88ADCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 0355
Signing time: Sat 31 Oct 2026 09:00:47 +0000
Manifest this update: Sat 31 Oct 2026 09:00:47 +0000
Manifest next update: Sun 01 Nov 2026 09:00:47 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: lJhI4Kh+AM3PpWxhwO/rwqf+//tZvDM7Q39etpd14Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:30:a7:99:68:4b:34:82:53:94:ac:a0:b8:8a:dc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Oct 31 09:00:47 2026 GMT
Not After : Nov 1 09:00:47 2026 GMT
Subject: CN=5358acd0e765388755e88a2edbc25a0f092c79c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:f2:5d:f9:bc:0c:67:31:c3:6c:12:d7:08:
ab:46:a7:85:fb:93:e0:1e:0b:d1:eb:47:93:31:bf:
ef:50:ee:56:e0:19:01:f2:60:ed:6b:86:31:6f:d9:
a3:6e:5d:c1:01:06:c9:04:85:b2:35:5d:0e:e0:8c:
18:6c:71:2e:49:1d:2e:51:47:ec:3d:c2:61:d4:ce:
58:a9:eb:dd:4f:e4:57:7b:60:cf:9f:a3:ed:65:5f:
de:4d:15:65:89:cd:6e:4e:38:74:87:b4:a7:23:03:
6b:09:27:4e:35:ee:2f:70:cc:b1:f6:d9:bb:20:c0:
5b:4a:10:5e:b0:47:36:f8:12:da:68:5d:f3:24:39:
fe:7d:02:b4:ee:96:ad:29:5c:6f:eb:91:2c:43:eb:
2d:a2:1d:d0:4c:81:e3:bb:94:d3:e1:68:67:68:85:
8a:ff:5f:6b:86:50:d1:7f:66:58:67:8a:8a:11:b1:
af:9f:bb:46:f3:aa:db:71:76:cc:6a:b1:a7:38:5a:
d2:97:2a:70:dc:1c:75:85:81:6e:bd:0e:6a:61:88:
9a:79:26:f7:a0:8a:e1:82:51:cf:04:2f:0d:7b:1f:
68:2f:a4:a2:2b:08:cc:4f:d4:30:ac:16:ca:31:3b:
4d:73:9b:ca:f7:77:74:32:26:44:1d:9e:e8:de:72:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:AC:D0:E7:65:38:87:55:E8:8A:2E:DB:C2:5A:0F:09:2C:79:C6
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9b:75:5b:d8:fc:de:4e:ba:ed:6d:ab:49:2d:c8:b3:7d:fd:
2c:00:fd:ab:7d:4b:d0:4a:e8:b7:24:b0:2b:bb:ab:19:f9:c8:
7b:f9:e0:86:76:8e:fc:2b:ca:12:26:b9:e3:77:19:ad:c0:79:
ad:27:d7:5a:90:df:e7:bc:15:ef:f5:cd:7f:c7:55:39:d3:a8:
d9:f3:79:29:a7:f2:8f:46:b9:43:ca:44:f9:6d:ca:dc:7c:0a:
bd:0a:11:36:e4:8c:cf:28:84:17:87:59:b1:30:c1:50:08:01:
28:c8:82:6d:50:d2:9c:9f:c1:7b:3f:f2:d6:92:60:52:dd:5b:
bd:9c:e2:85:a8:34:fb:e0:91:b2:34:8c:bf:b6:8a:34:85:f1:
58:a3:e9:23:bf:f7:0e:4d:4e:57:04:ad:73:4c:47:d6:1e:4d:
75:24:96:6b:da:d3:3b:b7:13:d5:bd:f9:69:66:56:31:e0:60:
85:63:83:25:03:07:4c:b2:80:59:d9:0b:94:09:01:e8:80:e9:
d0:fb:77:5e:a2:78:38:0b:22:f4:ca:07:d5:ea:46:c4:49:56:
68:7e:a8:b2:ad:59:d4:f4:f9:96:a1:45:66:11:fc:df:99:84:
d6:4d:c0:ba:be:ab:5d:f8:52:a0:6d:d9:2f:f6:4c:df:1e:1b:
90:ab:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:11:20 2026 by rpki-client