Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: 9SQD4UHqAb6ldOxclrHIwqcB2mcSSJNkVw2cWN/rAj0=
Subject key identifier: C8:93:5D:35:A0:8A:22:28:5C:9D:41:EA:2B:9B:99:A7:54:EC:65:E7
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 01A0C2C3F0E2EC377B30C0048814057D7D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0CF3
Signing time: Mon 21 Sep 2026 07:00:16 +0000
Manifest this update: Mon 21 Sep 2026 07:00:16 +0000
Manifest next update: Tue 22 Sep 2026 07:00:16 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: yyFZ3OtoGGu/ruzJ0PeJBQYvzbPGL8uGtE6W/HnvyWg=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:f0:e2:ec:37:7b:30:c0:04:88:14:05:7d:7d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Sep 21 07:00:16 2026 GMT
Not After : Sep 22 07:00:16 2026 GMT
Subject: CN=c8935d35a08a22285c9d41ea2b9b99a754ec65e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:1a:da:a7:b0:ee:9c:fe:b8:c3:ec:8d:25:
2f:b3:44:70:f0:74:63:be:f1:92:51:51:55:47:c2:
a1:08:7e:87:d3:d5:ba:b0:ce:67:96:4c:1c:03:0c:
82:f9:5b:60:12:a9:94:a1:5d:9a:3f:cf:a7:2d:93:
e8:dc:ba:34:61:d5:8e:a7:4d:d4:08:a5:97:ac:3a:
56:0b:5b:c5:6b:f6:4e:0a:86:b3:fd:2f:cc:b5:7b:
d2:df:cd:d7:85:b1:ad:92:30:af:9b:e9:17:aa:d0:
dc:13:d4:a3:5b:8e:e6:f8:27:c1:e3:ec:3f:8a:af:
08:e9:e3:86:0e:b0:31:d2:42:e5:ea:b1:62:62:09:
fc:d9:f1:7c:0b:d9:b2:9e:0f:c5:37:43:4f:1c:4b:
45:88:61:d9:9e:88:b8:b6:8a:4f:a6:f5:5f:6c:a7:
4b:29:aa:c1:92:f1:55:b0:54:b9:ca:60:f8:b0:fc:
84:71:55:58:16:e3:ee:4e:7d:89:87:22:38:71:0d:
8c:cd:2d:53:55:fa:a9:49:64:10:b0:58:96:8b:ab:
90:bf:e5:97:b1:54:e7:c4:f8:fd:64:03:0a:22:e4:
cb:ab:ae:14:d8:f7:61:7d:b1:ff:ad:8a:37:89:36:
35:ba:46:53:ff:a9:96:e7:5b:7a:8d:95:c3:1b:9d:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:5D:35:A0:8A:22:28:5C:9D:41:EA:2B:9B:99:A7:54:EC:65:E7
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d7:03:06:6c:48:03:81:36:ad:77:ab:a4:f6:a2:98:20:e1:
3a:6d:cb:1d:74:b2:0c:da:e1:7a:28:45:80:da:82:4e:c7:71:
50:c1:46:2f:bc:4a:99:4b:93:03:a0:0b:5b:56:60:83:67:06:
a0:2f:10:11:ac:8d:11:35:8a:44:b6:2d:d0:18:ea:8e:ee:c5:
bb:14:f4:20:e0:58:3c:68:97:5d:cd:c5:73:1e:99:f5:f8:ff:
68:f5:83:96:93:a5:c6:cd:89:0e:7e:bf:70:25:7e:86:82:6a:
ec:ef:1a:9e:52:ce:70:a6:45:f2:72:84:b3:be:df:26:d1:3f:
36:65:b5:99:be:91:2a:4d:6c:aa:34:ef:37:88:4a:d6:9e:71:
e6:62:d9:50:52:5c:18:fc:57:41:20:1b:ff:25:57:4b:8f:55:
8e:1b:96:4b:fb:36:87:cc:86:47:26:eb:dc:45:04:95:18:d5:
b2:18:14:4b:8e:c1:75:ac:ca:62:b9:b7:d2:57:47:84:4f:b3:
24:04:22:37:e3:a9:3d:94:2f:1c:70:b1:d0:78:30:97:3e:13:
0d:27:0a:0a:69:ed:a6:26:42:39:54:b9:f6:be:f1:99:3c:69:
4a:db:f4:8f:1e:cd:c5:7b:55:49:e9:ba:93:60:8a:1a:d2:57:
9e:8d:99:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:07:48 2026 by rpki-client