Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: KekuofwQxZzkEdVSdX0dF4bqR+d5i064Ym7C8ai2flo=
Subject key identifier: 12:90:9A:E5:F3:49:D4:99:FB:5C:09:48:A8:45:14:EF:6F:45:3D:2F
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 01A0C9A1BCCC0D9BA4E1D466068AC8DFEDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 15:00:15 +0000
Manifest this update: Tue 22 Sep 2026 15:00:15 +0000
Manifest next update: Wed 23 Sep 2026 15:00:15 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: 3/E9CPQL5juF5qb4tEaFl4I+0AKDk0gKJhknX4MtZo0=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:bc:cc:0d:9b:a4:e1:d4:66:06:8a:c8:df:ed:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Sep 22 15:00:15 2026 GMT
Not After : Sep 23 15:00:15 2026 GMT
Subject: CN=12909ae5f349d499fb5c0948a84514ef6f453d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:aa:d6:5c:1e:16:a4:42:be:e4:00:70:39:
22:4c:50:01:52:b6:d5:33:08:35:d8:9b:fb:23:da:
fd:3b:c5:19:71:0b:a7:ca:5f:e3:83:de:4a:bf:0c:
69:ef:f7:8e:af:ab:61:02:46:ad:32:15:12:bc:3a:
8f:37:54:82:ae:ec:d2:88:f6:bc:ca:03:d4:64:5a:
93:6b:cf:c6:de:cd:0b:90:c9:38:5d:26:ce:76:b7:
8a:16:a4:60:5c:87:4b:57:0c:f5:db:e9:08:c2:ff:
4a:57:ed:c5:80:d1:1f:74:a4:61:e8:ab:46:1e:43:
d4:9f:3b:fc:1b:7d:89:f6:9b:54:90:4d:64:c5:da:
65:5b:82:12:b5:60:84:bb:df:4a:88:0a:c1:67:39:
0b:71:6a:e8:98:c7:7a:cf:be:5c:cd:86:0b:30:f9:
05:9f:63:8e:45:8b:54:5b:03:21:76:64:84:3d:6a:
df:98:9c:66:07:c6:ea:d7:f9:fc:aa:bf:05:b3:0e:
26:b8:89:fe:b6:b8:3f:fc:44:19:9b:67:4f:23:7a:
e8:dc:fb:da:21:3e:6f:b4:ff:7e:b0:96:fa:f2:c2:
bb:97:8d:bb:f5:ac:b1:59:56:27:d6:74:b8:69:09:
1c:c0:d7:0d:c1:c3:75:d2:f9:7c:9f:f3:0a:4b:d3:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:9A:E5:F3:49:D4:99:FB:5C:09:48:A8:45:14:EF:6F:45:3D:2F
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:79:37:9c:7d:0e:47:05:fa:5b:56:6f:24:18:c6:83:b6:18:
58:34:00:7d:d0:eb:ee:32:e2:88:be:3f:28:5d:88:94:bb:14:
b8:95:9a:e0:41:d9:f3:fa:90:c4:08:e7:b5:b3:d9:a4:88:40:
60:70:7b:b6:42:a7:11:25:b6:52:92:99:6a:d7:5c:83:b2:0d:
b6:3f:6b:6b:4c:20:e2:a7:2a:59:32:46:6a:1c:18:43:e0:2c:
b0:48:b2:40:0a:2a:3e:d1:25:4b:9e:7d:d9:2d:a5:76:dc:73:
aa:55:22:85:8b:c3:26:7c:c5:68:d2:ee:7c:f3:15:4e:c2:d5:
bd:bd:a0:35:24:54:7d:3d:25:34:58:8d:7a:2b:02:14:c8:4a:
d6:10:e5:37:97:53:01:8b:81:e6:a3:97:79:2b:e3:b6:95:bf:
fe:25:55:b5:45:24:5c:d1:7d:98:dc:bd:06:e2:f0:51:20:15:
b3:8b:5c:5e:5c:f1:ce:5f:29:58:6e:78:a9:53:88:f4:83:0b:
33:ee:b3:de:60:73:69:b9:1f:d2:cf:24:e1:c2:40:c8:d3:63:
99:2e:ef:59:d5:b9:26:e3:dc:2d:04:c9:83:70:0e:c7:91:22:
8c:b9:f6:63:06:14:f9:1c:47:d9:b5:65:24:3f:d1:72:72:68:
d6:99:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:23:30 2026 by rpki-client