Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: QdYgisHpe2nj3bfpZeGAOrF8Z803j1XgL/H4wntM2NM=
Subject key identifier: 95:AA:C1:A5:06:A8:C8:11:9B:94:1D:C3:20:91:9A:FF:5F:09:E1:4F
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019CA8A0ACC49713E7059589C92E01844B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 4F
Signing time: Sun 01 Mar 2026 09:00:28 +0000
Manifest this update: Sun 01 Mar 2026 09:00:28 +0000
Manifest next update: Mon 02 Mar 2026 09:00:28 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: +KWBFWnTHqR7eZgz3INv54jEt6Pr9oaFUIwF/P8zNXY=)
2: qkHSX9O62Gr3u5B_jqKGtT64dTs.asa (hash: q1ZwzuiDpgbVTD+461wBId3rL4sPAeAJlh+4P2xSgtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:ac:c4:97:13:e7:05:95:89:c9:2e:01:84:4b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Mar 1 09:00:28 2026 GMT
Not After : Mar 2 09:00:28 2026 GMT
Subject: CN=95aac1a506a8c8119b941dc320919aff5f09e14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:91:7e:51:93:5b:f7:ef:3a:0a:66:a1:38:
12:a8:b0:d6:92:50:48:b2:f9:ac:06:bc:a1:5d:d6:
71:ab:26:b5:36:37:02:ae:c5:7d:32:63:91:25:64:
af:e9:e1:97:5a:bd:1d:72:b6:bb:57:12:38:39:7b:
ef:8a:3c:6d:71:f0:8a:80:23:dd:6c:28:50:af:92:
36:fe:78:4b:97:0d:d6:9a:13:90:01:24:a0:d3:0f:
17:e6:85:61:81:ad:60:c2:fa:c8:a4:3e:ef:5e:42:
bc:49:ff:77:58:b8:3d:de:73:e8:ce:73:1f:70:d4:
2d:fe:a9:ef:c7:86:9e:2b:eb:7f:a8:19:fa:01:1b:
c3:97:85:28:d4:ee:44:9b:bc:14:37:41:b9:7b:54:
14:7c:db:e1:af:d8:1f:e1:81:4c:4d:92:c7:f4:34:
21:03:20:7b:01:a3:be:4a:47:25:7a:34:15:4f:bd:
72:d1:cd:ef:45:fd:5c:4d:8e:6e:60:75:86:96:b5:
d7:20:ed:da:97:1e:d4:76:0f:84:ab:df:93:ab:bd:
9d:b7:bf:c6:9c:90:d3:4d:f9:2f:18:4e:c4:00:25:
ea:e2:cf:90:1d:54:fa:9e:ec:14:b2:1d:bd:09:5f:
ee:dd:41:83:17:b1:9b:78:39:08:bc:86:2b:d2:f2:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:C1:A5:06:A8:C8:11:9B:94:1D:C3:20:91:9A:FF:5F:09:E1:4F
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:09:05:b5:5d:33:38:ac:9c:0e:50:b6:e6:22:2e:0c:b3:be:
b0:3a:35:bf:4e:e9:03:bc:2c:87:b2:e0:99:66:83:78:7d:b3:
81:30:aa:b1:76:9d:59:23:cb:11:32:dc:ca:65:6e:78:64:65:
f6:1e:b8:f3:7e:6a:04:67:c5:8d:99:a3:ed:55:c5:4c:1f:cf:
18:ff:38:ee:d6:e0:7b:3b:2e:f1:aa:0a:54:39:3d:17:94:b9:
6d:d2:2d:3e:2d:93:cc:4c:17:af:54:35:a5:91:90:78:cf:b5:
61:05:03:b7:0b:e2:8b:e9:70:7a:d9:60:f1:34:72:56:e2:99:
05:d2:cf:15:71:fd:8c:34:5d:fd:ea:7c:89:c1:c0:35:fa:39:
11:1d:02:e7:bb:83:f4:f8:00:38:a9:36:bf:f6:f7:42:f4:b7:
ea:56:1a:f8:c7:1d:34:9d:91:ae:ee:bf:a0:1d:cc:29:f8:3b:
79:9f:8f:b0:6c:82:74:ac:1d:45:c9:6f:5f:58:9a:61:94:24:
c0:69:07:f0:48:86:56:4d:33:10:39:c1:1f:45:37:0b:d6:5d:
3e:3f:29:da:f8:1a:34:fa:24:bc:8d:fe:d3:0d:52:3c:73:3f:
3d:fd:92:2e:83:eb:df:0a:28:d9:0b:75:77:67:ba:d6:f2:de:
86:ff:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:53 2026 by rpki-client