Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: TcRS9uoqtUQDhM9ocCBZZu9Z401BHlyxFc0tzeK/7pc=
Subject key identifier: 90:71:E2:66:E6:C1:21:A7:E7:58:92:AA:4D:E2:A9:03:03:5C:A2:E2
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019CAB348FB51C531F499E103C06FA3B5915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: NMx7Gz7b9zwr9/8gP2mY3kyCl7KKEW3FYxgK+vptJfA=)
2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8f:b5:1c:53:1f:49:9e:10:3c:06:fa:3b:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=9071e266e6c121a7e75892aa4de2a903035ca2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:db:2d:53:68:99:72:79:5a:ad:53:e9:8a:
58:e3:3d:89:9d:53:f9:e6:b4:b8:2e:b0:a1:9e:0a:
c4:04:99:aa:15:8b:36:9e:63:e1:94:db:f2:70:fa:
7c:0c:d6:f5:cd:a5:ee:6c:fb:23:b5:66:af:34:e2:
5e:10:26:04:17:83:f4:ab:61:fc:c4:5c:b9:d2:1c:
89:c1:47:54:40:79:15:56:36:63:ca:63:9c:6c:66:
7d:48:dd:fb:62:49:93:a7:ea:31:0b:98:0e:5a:ba:
e3:fe:fc:73:2e:67:39:78:6c:48:95:c0:00:76:d5:
9b:f0:41:cc:5a:bd:32:42:38:8c:8e:21:50:51:be:
6b:ca:ba:f6:47:5d:72:c8:88:65:74:f1:ce:4e:25:
d7:4c:c0:20:30:a7:c7:80:e5:b3:aa:49:1d:f9:19:
c7:83:72:4c:38:18:aa:41:f4:38:b4:60:2d:7b:09:
e2:e5:f9:d8:64:40:35:f6:d6:e8:cf:91:81:60:05:
da:8e:3a:b8:e1:32:39:e3:50:bf:03:60:97:5c:7e:
f1:49:0c:fd:46:65:09:06:6e:20:3d:ed:ab:3a:4b:
dc:a9:85:a1:60:4d:aa:04:0d:0f:26:d4:40:7d:19:
bc:e6:b4:51:e8:71:a5:e7:b2:e5:d3:ea:06:2e:f0:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:E2:66:E6:C1:21:A7:E7:58:92:AA:4D:E2:A9:03:03:5C:A2:E2
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:06:5e:f0:7a:c1:5d:28:b5:b8:47:d5:55:0a:13:58:94:
9e:93:b5:b4:86:37:cf:9a:16:80:7a:90:57:f6:0e:05:30:4c:
ed:61:27:ec:fe:1a:33:f8:01:50:22:14:41:1d:41:4b:c4:26:
06:ed:b3:df:8b:ad:ba:d8:80:ca:15:76:c4:3c:19:23:92:93:
8a:35:c0:8f:93:33:72:8c:0c:43:c5:b1:05:da:7a:14:a8:69:
3d:d7:ab:e5:ed:b2:1f:5d:24:7c:79:56:8f:96:8b:5b:65:7e:
c4:1f:5a:5f:a9:71:fb:86:92:27:ba:dd:f8:04:2f:7f:84:e1:
75:c1:0f:44:fe:18:3f:02:5f:b6:92:27:00:dc:cc:c1:13:41:
76:af:aa:ae:14:ee:88:3c:a5:db:a3:a0:c5:ff:e5:3b:73:2d:
cb:31:46:94:9b:a6:36:e5:7e:0c:25:e7:d1:9b:36:9d:4f:6b:
63:08:2b:ac:e5:f2:d1:99:36:62:71:a9:61:30:bc:54:58:86:
d5:71:66:ac:2b:ee:68:28:81:8a:26:8b:09:02:14:75:d2:3c:
aa:31:e4:02:94:8e:c0:73:5d:b2:ba:a0:ae:22:d8:84:fe:4d:
a6:b5:e9:8f:33:be:15:f7:cb:02:d3:71:00:ee:3d:cc:81:05:
14:8b:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:01 2026 by rpki-client