Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: OvItDtx4U1BLRaWbdwQoDdy6ah1faCqoKtIooJyDdR0=
Subject key identifier: E4:81:B2:86:22:E2:92:D9:74:AE:F9:74:9F:2D:6C:73:9B:CA:9F:F3
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019DA453866EBE60DE18400BB4E6ABA16253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:00:30 +0000
Manifest this update: Sun 19 Apr 2026 06:00:30 +0000
Manifest next update: Mon 20 Apr 2026 06:00:30 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: 2GLto8g1Sl5t3TPB/905hhCDNl9tesC66NKX7oLK5xs=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:86:6e:be:60:de:18:40:0b:b4:e6:ab:a1:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Apr 19 06:00:30 2026 GMT
Not After : Apr 20 06:00:30 2026 GMT
Subject: CN=e481b28622e292d974aef9749f2d6c739bca9ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:95:20:50:52:0c:45:a5:d6:15:40:c1:da:
4c:e5:24:e0:3c:cc:cb:e6:ae:ad:78:58:14:88:b0:
32:3a:7c:d9:aa:3b:c5:52:58:df:b6:be:68:76:6e:
4b:57:31:86:81:bf:b9:a0:21:e6:bc:e8:68:c1:ac:
19:e8:e5:2d:81:29:50:4f:fb:5e:6f:c9:ef:ca:7c:
63:b4:5e:5d:6b:0e:c4:9e:32:e5:20:2d:e7:e8:86:
6b:4a:96:ee:9c:61:cb:d9:ac:b9:c5:7b:5b:49:5b:
bb:c0:1f:e6:27:15:76:c5:1f:fc:df:f1:57:b6:d1:
c0:b0:ea:7e:fe:3c:6e:b5:9f:3e:8b:5a:e7:a9:97:
6a:0a:d9:27:08:ed:46:06:09:7e:54:65:36:ec:c5:
41:7a:30:82:2f:35:f5:d4:4e:1e:35:00:d3:ae:21:
4e:3c:23:e8:c5:62:31:5f:98:e8:20:67:a4:41:dc:
f4:e9:52:75:91:33:c7:a0:86:1c:7f:bf:82:98:f2:
e3:cf:e7:b4:6a:34:08:86:23:2b:c2:3c:5a:31:eb:
af:94:62:4b:12:3c:05:c4:3a:ec:29:44:c5:1b:58:
a8:08:76:96:c9:7d:75:0d:ee:23:49:42:07:71:ac:
7d:8d:69:93:9e:69:36:1e:ab:f3:c9:03:de:59:6b:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:81:B2:86:22:E2:92:D9:74:AE:F9:74:9F:2D:6C:73:9B:CA:9F:F3
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:54:e8:8f:8d:56:e5:9e:c8:9b:28:c4:73:fd:6b:4b:9a:
9a:98:0a:6a:01:21:2a:97:52:10:16:13:02:2f:13:90:4b:61:
a7:8d:37:00:b7:3f:d1:84:0f:db:70:c6:1a:ef:3c:a1:22:14:
72:31:b9:02:7f:95:4e:d0:9e:ce:f8:6f:7a:a4:4f:d7:74:f0:
7c:fb:f8:67:01:77:7a:44:e3:ca:19:09:57:af:8e:b0:f5:85:
be:36:41:3a:f5:6c:81:45:ae:be:71:92:2e:94:39:1b:3e:31:
35:5d:cb:2d:81:dd:c3:ca:b1:06:55:a5:7d:bf:11:e9:8e:24:
e6:c9:c4:35:06:1d:dc:49:0a:6b:c1:81:a7:79:a3:6b:da:50:
90:86:da:80:ab:32:26:fb:0e:ed:c2:f2:33:fa:e0:06:0b:18:
ee:c8:02:ff:17:f1:44:c8:fa:8b:63:5b:90:0e:c3:f0:24:f3:
2b:36:15:2d:a7:52:a8:e9:74:b6:8e:dc:3c:09:7a:ff:f7:c4:
8a:67:fc:3e:22:2e:a5:25:04:c4:01:15:95:88:b3:e8:c4:22:
ea:30:56:34:9d:83:60:69:16:c3:6b:32:1e:1b:b3:4e:9e:6c:
7a:c6:7f:c4:c0:4f:68:df:c5:2e:7f:a2:20:79:9a:b0:5e:8e:
7b:74:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:30 2026 by rpki-client