Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: 5bg8z2Y5iGg99j1Gng3de184Rb418GQFvY5/CaI24bA=
Subject key identifier: 92:A7:5B:16:7B:6A:04:84:F4:96:60:80:0A:05:F6:B4:73:DC:5A:D6
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 01A0C5C535FE5C04CA4F229ADAA9D2928C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0E25
Signing time: Mon 21 Sep 2026 21:00:30 +0000
Manifest this update: Mon 21 Sep 2026 21:00:30 +0000
Manifest next update: Tue 22 Sep 2026 21:00:30 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: QP/T2MzcoNh/HROVnROR+pPlqwZ2je0jRqY2/ci4UZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:35:fe:5c:04:ca:4f:22:9a:da:a9:d2:92:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Sep 21 21:00:30 2026 GMT
Not After : Sep 22 21:00:30 2026 GMT
Subject: CN=92a75b167b6a0484f49660800a05f6b473dc5ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:7c:e3:16:b3:b3:7e:0a:84:a8:b5:7f:63:
91:e5:d6:39:be:a6:a9:8e:b8:a4:0f:a9:84:d2:5b:
7d:99:9b:a0:59:f2:18:c5:2c:68:58:2a:57:fc:ad:
9d:93:62:72:04:12:cf:5f:15:c2:e9:70:a2:09:51:
82:b6:ee:e7:36:31:a0:d5:54:27:c2:63:3c:c1:ec:
a8:33:40:b9:a8:33:34:b5:c3:cb:d3:03:e2:1b:75:
23:5f:ae:c4:ff:8d:60:ee:62:61:a9:b2:e3:c7:d4:
fa:7c:31:04:22:a8:62:29:28:c4:4e:2e:70:ee:49:
57:1b:7c:c6:c0:0e:36:e9:e9:ed:17:15:34:39:4e:
ac:ae:87:30:50:b5:dd:36:bd:e5:f7:b2:08:86:54:
41:0d:60:61:04:57:3b:f7:f8:29:7b:22:26:d4:a1:
e5:e4:c2:65:ef:84:37:72:e9:d1:0a:80:30:74:be:
b3:9b:56:50:81:ff:bf:ee:dd:ac:c8:f1:a8:82:1a:
15:13:e2:02:23:ef:7f:51:a2:bb:59:98:7c:47:bc:
e2:8a:b3:2a:02:f6:da:90:55:b9:09:c6:27:36:b3:
17:cf:5f:30:dc:73:d0:96:2b:01:94:c8:d1:20:7a:
b0:91:6a:cf:64:62:a8:01:be:62:96:89:2b:81:2e:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:5B:16:7B:6A:04:84:F4:96:60:80:0A:05:F6:B4:73:DC:5A:D6
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:54:5f:f9:83:83:7d:d3:d3:1e:46:bd:53:46:8a:df:80:3d:
1c:6f:09:42:ea:05:e7:84:4d:87:22:a2:2e:48:1c:9d:13:dd:
ab:72:17:08:f4:d7:df:f9:1b:42:a5:05:b1:73:03:9e:91:cf:
17:c7:59:b6:71:cc:96:2c:cd:38:d3:e3:3e:88:de:ab:74:64:
90:ea:ca:70:4d:9e:87:2e:d9:13:dc:f1:30:dc:c3:27:86:32:
81:03:28:bd:04:74:e1:16:63:01:7c:b8:eb:ee:10:6d:44:0d:
02:5a:06:8c:ee:e1:b6:76:f1:a4:12:df:2d:d2:f2:45:23:e1:
d1:0b:26:4c:19:51:71:4a:92:64:9c:38:0d:6b:ae:45:34:8a:
df:6e:9b:d7:26:2e:cd:e2:a3:d8:fa:27:49:8b:03:70:7a:d7:
dd:03:5c:ea:ed:51:f6:74:32:b5:3d:df:4b:e9:00:7f:c5:57:
5d:50:09:47:57:a8:a5:ef:dd:fa:7d:06:42:46:e0:2b:b1:94:
7c:49:3e:4d:aa:fe:f8:b0:0b:b7:92:b7:b5:44:88:79:6e:97:
b7:99:29:f5:c2:c9:ab:86:37:61:0d:de:9d:59:96:89:f4:dc:
10:8f:bd:6f:b5:cb:6c:8e:16:81:2b:80:2d:5a:26:ed:f3:d0:
21:77:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:52 2026 by rpki-client