Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: THGcK3hjfgM1SCu/oYEgNcvJY6LxFemiXcd8cFdbnes=
Subject key identifier: 67:01:85:A3:A2:F7:0A:D6:B1:46:3E:7B:D2:81:6C:C3:D4:C9:49:85
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019FA9E3324A2C513D7C491BB512879AB454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:01:06 +0000
Manifest this update: Tue 28 Jul 2026 18:01:06 +0000
Manifest next update: Wed 29 Jul 2026 18:01:06 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: nsxfjqZQ5wn4z6hs7JlDz42yWlJRIDaEyp155nW+QFY=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:32:4a:2c:51:3d:7c:49:1b:b5:12:87:9a:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Jul 28 18:01:06 2026 GMT
Not After : Jul 29 18:01:06 2026 GMT
Subject: CN=670185a3a2f70ad6b1463e7bd2816cc3d4c94985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:20:bf:bf:20:ee:4d:f1:9e:2c:1d:a8:ed:
96:c6:6c:41:32:43:70:e8:38:ed:69:cf:fd:0f:6d:
ab:60:7d:a5:8a:87:21:a1:f3:0a:1b:8c:73:b8:e4:
7f:75:57:00:96:e5:27:20:c1:30:a6:d8:93:41:1e:
46:52:ac:f0:fc:e3:5d:fa:b0:62:e6:35:ed:b0:63:
eb:0b:43:69:c0:7b:0a:2f:84:d9:79:e8:e5:09:5e:
88:58:6e:97:0e:f6:f6:96:3c:98:b7:b6:42:bc:18:
31:0a:7c:1a:ad:a2:91:74:99:bd:c7:00:0e:65:a3:
bf:8b:46:b5:31:9f:6a:08:00:62:69:96:03:2f:4b:
96:5d:8b:b6:42:47:f4:98:87:b1:de:01:96:b2:80:
d5:58:97:93:4c:97:ef:a8:e9:f5:c7:77:f2:15:31:
42:6e:81:3d:2b:d5:db:94:5c:6d:20:07:76:22:bd:
27:d5:7c:c3:6c:b6:cb:1e:d9:7f:86:3d:b7:6e:40:
81:72:12:e8:b8:a9:c8:71:7c:36:05:c6:ce:e2:ad:
d3:75:12:47:78:37:7f:1d:26:b4:76:b1:86:e5:ed:
ab:b8:dc:95:4b:33:61:aa:80:5b:81:9c:0a:a2:5c:
2b:75:d0:b7:f4:97:22:e1:e5:31:05:b5:2b:92:00:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:85:A3:A2:F7:0A:D6:B1:46:3E:7B:D2:81:6C:C3:D4:C9:49:85
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:c2:e7:e3:ed:83:90:be:aa:c2:33:cb:1c:b8:b2:a0:5e:
6d:cd:cc:34:60:e8:90:ec:35:04:cd:9b:4a:02:e7:ce:84:46:
f1:0e:49:eb:2f:2b:39:04:9d:7d:87:ba:76:6b:74:fa:48:65:
6a:d6:a7:48:f6:f4:81:6a:1c:e3:e2:b6:6d:99:9b:57:98:57:
12:0d:5c:5c:fc:5a:0e:80:07:6f:3d:72:be:8c:eb:dc:4b:cc:
fc:98:cc:1b:38:97:65:c3:6b:7e:3f:21:c6:7e:3b:39:aa:6d:
cb:dc:74:84:29:8e:4c:91:c9:cb:84:9f:54:db:67:90:55:a9:
c3:74:0f:3f:89:f6:fd:a2:8f:a8:c0:ea:17:36:35:22:69:8d:
3c:62:55:fa:c7:74:f6:6c:48:08:3b:0b:31:41:88:85:4f:f6:
d2:3c:b8:3e:4e:5d:62:d2:1b:51:9b:cd:bf:69:d9:f8:ac:18:
4e:a7:49:51:26:c9:08:0f:bb:b2:2b:cd:44:87:48:01:a7:27:
81:3f:dc:c7:a6:17:b3:cf:35:05:12:3f:be:aa:b3:16:6f:53:
a8:3b:02:2b:2f:b2:1a:2d:21:86:72:41:43:3b:9a:d7:ac:85:
7f:43:08:5e:3b:25:e4:8c:cd:02:20:13:1d:61:ec:29:8d:75:
c3:02:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:48 2026 by rpki-client