Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: RmHLa23rOarOuESawyQ8toFgR5Zjyyy3jPoGmPRr7Es=
Subject key identifier: F0:E6:B3:4F:7C:AB:61:4B:5F:EA:BE:70:1D:A3:D9:35:3C:70:9E:76
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019FA9E30E64F7FB9BF4C5C6BA96D937A998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0D92
Signing time: Tue 28 Jul 2026 18:00:57 +0000
Manifest this update: Tue 28 Jul 2026 18:00:57 +0000
Manifest next update: Wed 29 Jul 2026 18:00:57 +0000
Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: yeDKq6zVqBtrSqIL/8hLqqcTztY8FHvJA9Up22hhC7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:0e:64:f7:fb:9b:f4:c5:c6:ba:96:d9:37:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Jul 28 18:00:57 2026 GMT
Not After : Jul 29 18:00:57 2026 GMT
Subject: CN=f0e6b34f7cab614b5feabe701da3d9353c709e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:4a:e9:5c:d9:ec:0c:26:4d:a0:f1:47:08:
92:27:31:3a:f5:2a:0c:11:be:6a:45:70:ac:32:c5:
cc:53:e7:01:5d:c1:44:eb:ff:32:c1:97:68:b1:32:
22:93:c9:a2:b4:2a:8b:53:fb:f5:6c:89:45:c1:17:
9b:02:9f:a6:a6:ca:5a:37:96:88:85:53:7a:ba:2f:
fe:e8:65:b0:5b:a6:ab:14:86:a3:4b:04:76:25:c7:
5c:9e:fc:ce:61:35:b8:1f:ce:8c:f4:5a:05:cb:5e:
47:78:19:cb:ba:b3:5c:da:c6:a9:06:58:d7:fe:54:
af:37:fc:82:e4:41:9f:2c:7c:cf:ac:37:32:3d:fb:
1c:50:92:7f:c7:1c:f9:54:3e:f7:aa:ee:6c:0d:1f:
37:dc:73:b3:e7:56:42:77:19:d4:cc:5e:90:ba:e8:
61:aa:2e:8c:ab:03:9d:11:4c:a0:16:85:0e:dd:58:
52:74:ed:03:37:10:61:c8:04:48:f5:ea:fb:d6:fc:
be:32:6a:2a:cd:a3:7c:7a:2a:82:78:1d:0f:7b:9a:
ce:1f:40:b7:15:50:1d:09:b4:18:9c:f2:89:18:fd:
41:f9:ea:c0:fe:19:ae:46:34:6a:43:77:1b:64:49:
e0:50:63:c7:50:39:87:7b:5c:c2:d3:ee:45:c4:28:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:B3:4F:7C:AB:61:4B:5F:EA:BE:70:1D:A3:D9:35:3C:70:9E:76
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:21:45:d9:76:db:e1:3a:66:57:05:a4:29:be:63:ce:31:7d:
f4:40:4c:a8:8e:f8:b2:78:91:21:cb:a6:2b:fc:ea:2e:ec:a8:
f2:44:c3:06:15:6b:fc:49:f3:24:b0:9c:f0:76:16:8f:d2:a0:
19:ed:11:27:64:1f:23:d5:56:b2:ed:fe:34:84:2a:a0:48:27:
96:25:6b:c9:8e:ea:d1:36:34:c7:80:36:21:12:19:6a:fd:3c:
00:17:5f:a5:cb:6e:82:2a:ad:df:ee:3e:a5:34:8d:6c:43:6b:
47:c9:2b:7b:2b:5d:a6:8b:3b:d9:67:11:7d:4c:fe:df:94:cc:
63:bf:d3:78:a8:26:26:fb:a3:11:e9:2a:6e:83:67:3a:39:1f:
3f:f2:46:ad:fb:96:b1:a8:d0:16:84:3a:24:68:eb:19:19:6c:
b2:c2:59:6a:7f:41:b5:c3:a9:fa:c4:cb:2c:00:80:51:93:07:
53:23:26:5a:f3:ee:80:43:a8:2a:97:f5:c7:ad:8a:29:70:23:
49:bf:ac:b3:2e:82:61:66:3c:94:d8:b9:18:86:55:3e:d4:93:
e4:70:07:69:50:c3:48:e1:34:51:be:71:81:cb:12:ad:fe:46:
93:ef:9a:69:9f:ef:e3:f4:b7:cd:84:bf:4a:f8:79:28:ce:c4:
ed:31:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:01 2026 by rpki-client