Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: QbWCIB8/Ha+PtJN6KYnMB1dBmUPzXqb4ntnh4IP9n/8=
Subject key identifier: 71:00:71:66:8C:C4:33:DF:81:1A:DC:D6:3D:13:5C:30:EE:2B:E3:4F
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019FACACD289CCD87491A8C8321D95796C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0C63
Signing time: Wed 29 Jul 2026 07:00:34 +0000
Manifest this update: Wed 29 Jul 2026 07:00:34 +0000
Manifest next update: Thu 30 Jul 2026 07:00:34 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: kDcAlVN5mk6gi+4NK9XcZU8p76p5vRqzA6JXQ2B6ODI=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:d2:89:cc:d8:74:91:a8:c8:32:1d:95:79:6c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Jul 29 07:00:34 2026 GMT
Not After : Jul 30 07:00:34 2026 GMT
Subject: CN=710071668cc433df811adcd63d135c30ee2be34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:3c:af:f7:d6:eb:7d:7d:85:c1:12:53:18:
1e:40:a5:f1:e9:0a:9f:65:52:cf:df:d4:e7:3f:38:
f6:2e:bb:91:76:cc:1a:f0:69:c9:e5:48:47:8c:c2:
1c:c2:87:1f:00:0d:a0:3c:0b:e2:87:00:5a:8d:ff:
f0:87:07:38:72:d7:fc:41:30:5f:6a:7f:ec:95:39:
c0:aa:de:1e:fb:67:c7:38:f6:0a:7f:a8:67:f1:5f:
6f:1d:75:af:a4:2a:52:1b:97:a2:7a:80:14:ee:8b:
71:74:3d:6f:b1:b8:a8:6f:be:26:41:44:ad:5a:a4:
80:e1:68:2f:ab:98:4d:40:cb:9c:57:9b:7f:bb:c1:
fa:ef:52:a5:23:c4:db:15:8b:68:f7:35:1d:e8:44:
35:02:53:81:37:b9:51:b2:9b:88:b3:5b:eb:33:3f:
10:c8:de:28:ab:e4:8e:76:c1:70:f2:8a:b2:93:20:
09:06:42:a0:01:75:8a:3a:01:48:be:86:a1:3d:c0:
5e:29:41:60:bc:86:9c:55:93:46:36:4a:9e:0c:eb:
b8:65:be:26:1f:d9:39:8b:3e:fe:45:52:26:5e:e2:
98:30:26:9a:28:fb:95:28:bb:ae:2a:57:34:7a:55:
99:37:86:d3:29:b7:2d:b0:53:9b:25:c9:32:a3:eb:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:00:71:66:8C:C4:33:DF:81:1A:DC:D6:3D:13:5C:30:EE:2B:E3:4F
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d0:48:c5:fc:3e:66:3e:f5:21:33:a6:26:40:c9:67:49:f1:
ec:8e:a6:d4:2d:04:41:b7:6e:e5:49:9c:c1:eb:bc:ab:4d:9c:
50:0b:7e:47:df:56:33:5e:b9:d2:c9:82:11:ed:04:89:10:f6:
6a:01:8e:7f:2e:52:c3:9c:1b:77:ed:83:56:53:df:b8:61:00:
9a:08:da:d8:b3:c4:f8:40:76:7a:79:df:ff:57:cf:50:58:3a:
a4:83:43:94:fd:c1:48:43:87:fe:e3:81:97:56:8b:f2:c4:03:
47:bb:5f:07:71:c7:59:f5:1d:41:50:69:be:0c:04:db:43:60:
4d:96:81:09:5d:b4:5f:1f:8e:34:97:26:a1:76:5a:49:60:df:
fe:7e:c8:2f:1c:87:7d:e7:a7:e0:98:6a:67:15:d1:a9:08:67:
38:7e:29:43:a2:df:8a:d0:0f:8c:ea:0b:2d:2e:e6:c3:be:09:
ea:0c:6c:42:8d:6f:7e:90:96:dc:4a:42:93:e5:a8:15:a3:8b:
d0:49:c4:b9:18:06:ec:32:6b:0a:00:20:b7:f3:19:bc:81:b1:
a6:6c:47:a0:b6:19:1d:4f:37:8b:29:4a:da:8b:5e:7d:16:69:
bf:d0:36:ee:4b:0f:fe:b5:3b:56:6c:e1:d5:35:a0:41:ed:aa:
b5:9b:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:44 2026 by rpki-client