Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: o+DjD7cy94ZDYaJhDZ2b2TNJdWySh3OP93T6lfP5cOc=
Subject key identifier: 51:20:45:6A:65:32:4A:9B:28:1B:1E:82:1A:AB:3C:FA:64:A2:CE:C1
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019DA3AF2E2545717EDBBC4B873CC239D38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: D2
Signing time: Sun 19 Apr 2026 03:00:59 +0000
Manifest this update: Sun 19 Apr 2026 03:00:59 +0000
Manifest next update: Mon 20 Apr 2026 03:00:59 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: IvZMOLMnBo/tfBQYFzyRJPiiUSdIPc8/kDl4w967kDc=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:2e:25:45:71:7e:db:bc:4b:87:3c:c2:39:d3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Apr 19 03:00:59 2026 GMT
Not After : Apr 20 03:00:59 2026 GMT
Subject: CN=5120456a65324a9b281b1e821aab3cfa64a2cec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:6f:25:bd:9a:60:59:e5:be:0f:18:c7:f9:
ba:56:ba:fb:f0:e9:b3:df:01:68:e1:16:23:fb:16:
e9:2f:65:10:93:8f:73:d7:57:24:4e:38:a2:56:dd:
df:9c:e3:01:e3:82:00:c9:f5:4f:f2:4d:2c:4d:3e:
f2:0d:df:5e:0e:ab:ec:d0:da:cb:af:9e:b2:50:c8:
96:03:1a:42:ff:15:1d:c6:19:ea:fd:e3:a1:2d:5b:
46:a1:a2:7a:55:97:7d:29:46:a3:81:ed:4a:cc:5f:
fe:4d:50:e3:d5:c4:9e:78:e0:41:16:5b:bf:4c:11:
18:a0:1a:ff:a4:cc:51:3e:67:37:a7:a0:bd:d7:51:
1b:ec:fb:b6:72:7a:dc:c1:2f:ea:dd:4f:d1:cc:dd:
9b:13:22:21:c4:04:65:eb:f4:93:77:5d:57:89:25:
ce:f0:a2:58:e7:ca:9b:81:62:a9:8e:16:96:3e:68:
4e:0e:b2:16:e7:02:a2:cc:cf:37:28:7c:52:6d:7c:
8c:84:7e:c6:69:10:9a:9b:34:a4:ac:4c:7a:38:7c:
2b:53:e0:ea:0f:e0:6d:e1:27:db:78:a2:56:38:c9:
01:ee:9d:09:f7:6f:8e:da:46:67:04:a2:92:60:02:
88:2a:da:02:b0:48:75:58:22:f1:40:49:e7:c9:ed:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:20:45:6A:65:32:4A:9B:28:1B:1E:82:1A:AB:3C:FA:64:A2:CE:C1
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d9:f9:13:78:91:f1:90:0f:b1:80:ba:32:d0:53:b1:b0:43:
6a:cb:a3:ba:f7:b6:a7:a4:c7:c3:56:ad:3c:86:08:98:ad:94:
f4:bd:2e:50:b3:81:d5:92:5e:1a:3a:9a:db:03:bd:3a:ad:ba:
c5:55:e0:04:20:38:b2:59:f5:3e:d6:b0:cd:68:22:48:d6:31:
e3:83:9d:5d:e3:97:94:fa:fb:eb:9c:50:88:23:94:4d:fc:ce:
ce:9a:7c:d5:31:0b:d2:8f:16:d3:72:32:53:99:e7:70:52:42:
53:ee:78:2d:3d:bd:0e:0d:59:e2:fc:0c:1b:34:65:ac:19:c7:
0b:10:9d:c0:66:9c:bb:19:4b:b9:24:1f:5b:fe:3e:68:45:1c:
ea:7a:e2:d4:d9:aa:e0:e8:d9:3c:8f:39:c8:92:de:93:6b:a9:
dc:35:a2:20:b0:67:50:4f:77:02:07:8a:8a:06:f2:73:b0:be:
14:c4:9a:b5:83:8f:cd:58:20:b2:a2:5f:f0:c1:8b:f0:e8:d5:
92:1d:af:d1:af:67:3a:e6:e7:5b:e0:af:ff:3f:da:df:1d:53:
ca:cf:7b:a4:71:e1:90:f5:47:25:14:d7:07:5e:62:02:cb:06:
ab:b2:cd:76:da:83:67:71:28:cc:4a:c9:98:18:02:22:cc:61:
bf:d0:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:15 2026 by rpki-client