Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: Qnw9ODOy/iRLNIjjwWtootZX12pRiq0u9NbsiokLgbA=
Subject key identifier: 48:29:AF:16:70:3D:2C:65:D6:FE:1E:D7:DF:6B:9D:E7:2F:5B:6E:B5
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019FA74F722862E6170AC4B54D6ADC6E9E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 01DD
Signing time: Tue 28 Jul 2026 06:00:29 +0000
Manifest this update: Tue 28 Jul 2026 06:00:29 +0000
Manifest next update: Wed 29 Jul 2026 06:00:29 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: Y2oKtO3BreBY2ukN7WuHmDhZmAPg1k5lkPKQ357N+ms=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:72:28:62:e6:17:0a:c4:b5:4d:6a:dc:6e:9e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Jul 28 06:00:29 2026 GMT
Not After : Jul 29 06:00:29 2026 GMT
Subject: CN=4829af16703d2c65d6fe1ed7df6b9de72f5b6eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:39:e9:00:cf:18:6a:a0:3a:8f:95:90:e8:
57:97:18:0f:e9:be:d6:13:70:2c:b8:11:da:ba:3c:
c8:f6:74:5c:65:f8:bd:78:54:25:d0:87:43:6a:cd:
2e:c6:8c:a2:83:c7:3c:3a:75:51:7b:f3:ab:19:ad:
d7:2c:ef:37:a5:fe:ab:74:91:cb:a2:11:51:de:2e:
4c:0c:c3:a7:43:f0:cd:08:f1:fd:5e:70:31:f0:f1:
13:fa:c9:83:49:49:ba:a3:22:ab:d4:3c:a6:b6:04:
ea:03:c7:93:1f:33:22:c4:e9:28:5d:0a:80:6c:7d:
46:d1:88:eb:03:a8:05:82:8a:9c:3e:75:03:be:9b:
5d:79:62:fc:2b:ec:c2:3e:af:a9:ea:37:64:f0:83:
f9:0e:c7:c5:a2:7b:bc:6c:a7:8f:c7:f1:0e:cc:6e:
29:21:c5:05:e2:d2:17:07:92:25:9e:f6:a4:40:76:
ac:ce:36:fd:6a:8b:79:db:d5:d6:39:d7:62:38:45:
12:89:41:75:a2:f1:f7:8f:b8:b5:15:4a:66:b5:37:
1f:99:b0:98:a9:c6:04:56:34:e9:5b:19:a2:74:31:
1f:ed:04:c5:d7:86:c7:2e:ca:dc:85:a0:7a:18:59:
99:98:ef:78:6d:b1:f7:df:95:50:d3:4b:05:c1:f1:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:29:AF:16:70:3D:2C:65:D6:FE:1E:D7:DF:6B:9D:E7:2F:5B:6E:B5
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:94:c3:60:3e:90:ef:57:8c:6c:17:a1:8c:2d:7c:3a:9f:c1:
6d:54:1b:38:37:66:6a:84:7e:b4:f4:5b:8f:4c:ec:7f:ce:84:
d6:77:bf:d5:b2:40:e7:60:4f:61:6b:5c:e1:e9:33:fd:b5:6d:
eb:05:c2:7f:d4:d7:51:fe:48:14:54:83:5e:f1:77:05:5a:47:
6c:7d:f5:8a:4b:50:75:7e:66:b4:16:f7:ce:82:cc:5f:8b:b6:
17:63:57:b7:e4:75:22:62:e8:e1:76:6d:b7:95:b1:f3:8b:5e:
a3:23:09:f8:70:88:c4:82:96:da:39:94:bf:48:ac:12:02:8f:
3d:fe:0f:3b:62:e1:17:73:73:a9:74:29:37:cd:40:74:d3:4e:
45:da:17:db:e4:ef:a1:3c:b3:b3:7c:77:f0:8c:bc:91:a9:f4:
72:ef:00:a7:5f:56:3d:53:f3:1b:a1:3b:d0:3e:f6:00:8e:93:
29:44:f7:48:12:44:ef:50:95:a7:3c:d6:ba:47:27:33:5c:84:
46:ae:be:19:11:8c:06:15:23:6a:fb:b0:6a:df:aa:cd:d0:b1:
4a:44:58:8c:84:5d:84:cc:e3:e3:29:14:7b:ea:78:11:f5:a3:
4e:77:06:03:31:a9:8b:12:42:54:4a:ab:e8:f4:fd:b9:6b:8f:
17:cc:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:16 2026 by rpki-client