Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: k427YmaCNBH7SWZVQh9DjuR2OhmJ1TFAmr9VysI+XD8=
Subject key identifier: 71:08:11:E6:4D:22:A0:7A:02:B3:B0:E3:E4:65:67:C1:54:0D:BB:D4
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019D98BDE65A6584425DB4E30804D381A177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0C80
Signing time: Fri 17 Apr 2026 00:01:15 +0000
Manifest this update: Fri 17 Apr 2026 00:01:15 +0000
Manifest next update: Sat 18 Apr 2026 00:01:15 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: 1Km0OeBjzwjSdkZMoLr/bDYziXYNZJb2PPFiKhW/zaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e6:5a:65:84:42:5d:b4:e3:08:04:d3:81:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Apr 17 00:01:15 2026 GMT
Not After : Apr 18 00:01:15 2026 GMT
Subject: CN=710811e64d22a07a02b3b0e3e46567c1540dbbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:2f:86:48:01:57:1f:75:92:9d:fa:8b:18:
14:08:8a:e0:09:bf:05:7f:26:22:70:61:0e:ef:8f:
a9:f9:f5:73:c0:71:ff:14:da:99:e5:9f:e6:36:ae:
bc:fb:36:d8:ce:57:1f:ad:5c:75:9e:a1:fe:1f:df:
a5:a9:87:2c:f5:cd:6f:97:12:ba:f4:e5:3e:2c:0e:
8d:2a:4c:1d:8d:47:96:c6:a8:30:bd:ab:d0:8d:53:
16:18:30:df:86:f9:4d:25:9a:22:fe:5c:cd:02:d4:
35:9a:1c:a9:af:a6:78:1d:36:e7:02:1d:6f:6d:98:
b1:26:3a:20:e2:5b:a7:0b:6a:f4:f2:db:05:c9:7c:
9e:f8:66:99:45:2b:23:94:95:04:a4:c4:ef:3a:71:
b3:c6:ed:bc:f3:e7:c1:a3:e2:e7:5f:fa:02:99:f7:
f0:ab:d7:4f:44:96:b4:15:b1:4e:e4:27:13:a2:e4:
91:ca:76:e4:30:da:59:21:49:72:12:93:7f:92:15:
8e:da:2f:4f:d9:4a:87:fa:7a:26:2f:5e:bc:6e:fb:
25:a4:b9:ba:66:77:95:62:83:85:d4:1c:9d:e9:d2:
15:b9:01:44:3e:93:5f:2b:87:29:e8:cf:00:bd:cb:
0a:6c:01:8a:95:0f:31:fd:b8:18:09:52:de:95:2f:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:11:E6:4D:22:A0:7A:02:B3:B0:E3:E4:65:67:C1:54:0D:BB:D4
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:64:73:0b:e4:52:81:2b:8b:e4:06:a4:7c:c9:e3:29:71:
3c:86:a0:59:8d:20:21:a5:5a:21:42:29:c0:0d:ec:15:3d:1a:
4a:ec:ea:df:39:35:92:89:9b:f7:90:34:76:f0:ac:f0:47:73:
68:94:4b:f4:52:53:04:34:51:cb:fd:ef:2c:5f:f4:ba:7d:5e:
bd:f3:93:8b:e6:9e:cf:c3:f4:6d:e0:7f:ae:58:05:45:fb:1f:
a4:be:0f:aa:91:ec:18:df:b2:78:0c:f7:34:3d:de:96:08:63:
4c:a2:f1:7b:d4:ed:49:bb:54:3b:f0:c5:4c:02:0f:c6:9a:a1:
8c:bc:a3:25:ae:47:89:bb:02:52:33:38:17:66:b1:0e:a1:ed:
5d:60:9d:9f:c6:92:05:9f:f7:ae:59:e2:2a:df:af:a0:06:d4:
67:cd:b2:1c:05:9c:be:5d:65:d0:10:0b:29:99:f1:cd:aa:a4:
ee:f2:04:31:72:6b:10:bb:4d:7e:c4:1c:f8:e0:47:97:e9:da:
f9:f4:dc:5c:93:30:9b:aa:6a:87:a3:2f:1c:54:06:98:bc:ca:
4d:27:35:67:5b:ad:ca:05:c9:94:70:b1:6e:66:32:3f:11:5c:
1e:cd:49:3e:25:c3:10:65:de:fc:64:c1:d5:18:86:b0:36:a1:
aa:85:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:37 2026 by rpki-client