Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: 6S64jClTFwSRMt74+b6dFHg7Szt5G6hKIhYDG3OTeVg=
Subject key identifier: 78:D2:0B:47:80:38:F0:D0:45:0D:AE:32:54:6F:EB:AF:F7:4B:1D:BE
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019CAB3411C183816DAAE6E8F03A1F0056C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0C05
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: gmKDY3VajyKjG2dqBUYwKraE8anqfvZNmE1xjef8mdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:11:c1:83:81:6d:aa:e6:e8:f0:3a:1f:00:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=78d20b478038f0d0450dae32546febaff74b1dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:98:89:72:c8:b7:23:01:f6:7d:db:08:24:
b9:3f:d2:e3:07:b7:2a:72:06:78:0e:bd:4d:05:4f:
1c:25:20:82:45:93:1b:08:bd:c1:3c:c9:5a:bb:0d:
3f:be:2f:85:39:df:a0:71:5a:09:f9:b3:66:de:a0:
cd:ac:06:35:65:90:01:fc:d8:a3:0f:57:c3:8b:64:
7c:3b:3c:9c:7a:53:d9:14:66:d7:2a:38:cf:76:21:
d3:be:b0:56:92:ce:e4:26:bc:95:5b:33:6c:4f:0f:
ae:81:c0:8e:dd:ec:eb:e2:15:88:ff:8b:56:c7:da:
a8:59:1b:19:e1:ad:98:ad:9e:28:6a:d0:a0:1a:9f:
43:a2:48:9f:9e:44:23:67:5c:78:de:24:df:8d:c0:
d0:83:ac:4d:c3:72:a9:d5:0c:70:c1:67:44:c2:27:
9e:65:b9:0d:ee:d1:0d:e1:3b:92:21:87:d6:eb:c7:
9a:32:c5:f2:77:d7:55:4c:32:bb:8f:22:4b:af:8a:
c0:6d:e0:ce:1e:c7:c7:f9:f4:a5:72:9d:a3:81:bd:
82:d2:56:5d:34:bd:93:de:2f:5b:7d:dd:cd:17:68:
97:fb:cf:1c:cb:c2:96:be:4b:0b:6c:16:36:f4:d3:
08:03:c6:28:b3:88:cc:17:91:9f:26:eb:b7:a0:23:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:0B:47:80:38:F0:D0:45:0D:AE:32:54:6F:EB:AF:F7:4B:1D:BE
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b1:88:cd:77:20:8c:ff:a8:e5:ca:5d:30:ca:6b:20:34:b9:
6c:7d:85:06:80:58:6f:f8:90:7f:d3:9f:6c:4d:6b:05:67:59:
06:29:14:fc:b1:2b:f8:fe:d6:6f:8d:a5:c0:8f:00:83:89:13:
00:80:a3:1c:81:da:a3:d8:85:ac:d9:e9:ab:d3:93:23:5f:56:
6e:dc:66:d6:bd:56:1a:bb:3a:60:66:6b:18:f5:ce:d8:db:b4:
82:5d:e8:84:eb:df:bd:3c:46:7b:1e:df:dc:3b:2b:1a:93:81:
1d:42:b9:77:67:85:e7:d4:a2:00:fd:51:3f:9b:96:47:9e:bc:
5b:56:ad:e6:1e:a8:dc:af:7a:5f:fc:d7:0b:81:d7:d5:55:ea:
f1:65:02:bf:2d:3b:5c:4b:e7:92:7e:7d:89:a9:56:7f:cc:c4:
46:d4:21:99:73:65:a5:f9:3d:15:8d:2a:b9:ee:5b:8e:fb:9a:
67:08:b5:22:51:d5:47:33:b2:2e:1c:80:7d:b6:3b:6f:e4:77:
80:98:20:25:6a:89:20:5c:10:d4:88:76:ca:c7:6e:78:22:b5:
d5:d5:69:23:55:7f:02:29:2a:72:0c:76:b0:a8:19:22:23:2c:
95:ff:38:ae:e2:6c:a5:4b:a4:04:70:b6:46:d7:65:27:95:70:
7f:19:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:54 2026 by rpki-client