Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: Y4swwhnqwbCmMpcHtgZIRGO0/V1cZs/ciPJCpJXC2S8=
Subject key identifier: 42:5F:DE:72:43:0F:D7:67:A8:1C:32:B9:21:FE:6B:2A:0A:A3:22:0D
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019EBF912854FFE498082B8D74854B231330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 0165
Signing time: Sat 13 Jun 2026 06:00:21 +0000
Manifest this update: Sat 13 Jun 2026 06:00:21 +0000
Manifest next update: Sun 14 Jun 2026 06:00:21 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: uHkT/zqAi+dukGx5K10a8KS9ZSO0Zx7UyXB97LV4HWY=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:28:54:ff:e4:98:08:2b:8d:74:85:4b:23:13:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Jun 13 06:00:21 2026 GMT
Not After : Jun 14 06:00:21 2026 GMT
Subject: CN=425fde72430fd767a81c32b921fe6b2a0aa3220d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:fc:41:a0:c4:2d:21:eb:98:d7:dc:b8:4f:
9d:67:96:d1:b9:e2:06:ad:9d:bd:c3:00:20:d7:df:
ed:2f:44:89:d8:09:de:e0:82:2a:b9:b2:f2:98:e7:
ff:e6:d4:e8:5a:61:e6:8c:67:c2:13:9d:51:af:8f:
6c:bb:09:00:e8:68:91:ba:d8:b4:d0:42:9b:05:77:
d2:9c:2a:ab:2c:2a:8b:39:f7:a8:ea:82:a4:79:72:
55:1a:c4:31:0e:eb:ec:3b:fb:18:70:bf:6a:18:ca:
fc:a4:ae:e2:a9:43:97:5a:2b:ed:96:19:c6:f2:b0:
cc:f1:69:0a:fb:5a:16:43:37:07:1a:ad:80:a0:69:
82:de:65:ed:fd:71:c2:72:04:e6:94:6f:29:4a:d7:
02:66:21:ef:73:97:f6:04:6b:3e:f9:e7:42:0c:d5:
4a:79:4c:f9:5e:ae:54:cf:16:bf:a6:85:a4:5a:f7:
22:ab:d9:9b:91:d5:39:b0:00:b4:8a:6c:a3:9d:99:
21:dd:de:db:7e:ca:3c:47:1f:fb:14:3d:a7:d0:cc:
00:22:5b:09:cd:8c:61:bd:e8:0c:e1:87:e9:fb:1b:
a3:ca:fc:84:d8:3a:39:9b:83:c8:95:68:9d:4a:12:
ca:44:4d:ed:15:dc:08:70:83:8e:fd:dc:fa:d3:cb:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:DE:72:43:0F:D7:67:A8:1C:32:B9:21:FE:6B:2A:0A:A3:22:0D
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:02:0c:5c:50:2b:b9:47:3f:b6:3b:52:9b:2d:dc:67:fb:
d0:fb:5e:fd:90:ba:be:72:fe:0e:8e:f4:e3:e1:5d:07:4d:d9:
03:f9:a5:4f:4f:95:7a:0b:6e:c3:df:12:11:69:8b:df:a2:2d:
6f:2f:79:c8:6b:fe:7d:de:fa:77:59:c4:84:0e:a8:24:27:73:
6d:6b:57:76:8b:86:71:66:aa:71:19:40:9c:53:dc:31:01:18:
c1:e5:5a:ff:80:44:ff:1b:ae:0e:b6:00:9a:b6:2b:7a:82:92:
94:54:cc:e8:20:cd:b8:f9:fd:a8:58:ed:f3:80:e8:e3:ef:f6:
95:52:38:af:e7:7b:ed:d9:e4:45:12:4f:0f:4e:e9:41:4f:c1:
0d:1b:2d:6b:d5:c5:96:c9:1c:89:b5:b2:b4:8f:69:54:a9:13:
b5:c9:ea:00:72:92:ca:cf:7a:39:a4:80:d5:f2:2b:32:9f:06:
19:f6:d1:45:ff:ff:1b:30:dd:c0:9e:20:3d:d0:ae:bc:29:22:
0d:61:14:c9:94:79:52:ef:12:4c:44:3e:1f:3d:91:8f:9f:8b:
2d:de:51:d0:af:9f:c6:d0:e6:e4:be:6c:b5:0b:f3:cf:c0:66:
ba:6f:0f:ad:da:72:4d:44:d2:17:95:c1:d4:c7:95:04:f6:36:
10:5b:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:02 2026 by rpki-client