Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: oxhrvoazk0ouPaYQr06/V5DFwSc7Aj9yJKtv0RXMeT8=
Subject key identifier: 1C:7E:38:CB:36:DE:F5:36:D8:C4:14:BC:BD:D0:D2:DF:02:EE:13:46
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019D99999102BA6CD92E5DD1E438E65F3943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0B50
Signing time: Fri 17 Apr 2026 04:01:11 +0000
Manifest this update: Fri 17 Apr 2026 04:01:11 +0000
Manifest next update: Sat 18 Apr 2026 04:01:11 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: 1qJ47qLLDZB2lb2XdvKVYzOYipbJ/KUaXfKFQnjVCJU=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:91:02:ba:6c:d9:2e:5d:d1:e4:38:e6:5f:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Apr 17 04:01:11 2026 GMT
Not After : Apr 18 04:01:11 2026 GMT
Subject: CN=1c7e38cb36def536d8c414bcbdd0d2df02ee1346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:70:06:64:71:ea:ff:53:03:1d:5a:5c:02:
f9:7f:b8:3b:fa:ff:b5:c5:7b:cb:56:4c:83:c9:06:
fc:d1:f2:5f:78:c8:56:4f:6c:c1:09:d0:35:b4:36:
8c:2d:31:cf:cd:e0:6f:08:7d:bd:93:3b:49:36:7d:
00:21:b2:e1:02:e8:26:c5:e9:82:d7:98:aa:fc:75:
56:43:0a:8b:6e:a8:9c:00:2a:b8:e2:97:d6:ac:3c:
9b:e4:b7:56:87:66:10:31:e1:08:a5:75:30:b6:11:
12:e4:c7:ea:e1:27:ea:34:d5:c6:0a:a2:39:5c:6b:
d1:c2:c3:ec:2a:fc:d2:7f:f0:41:76:56:87:df:df:
ef:0c:ca:fe:b8:26:19:c0:52:ad:5b:ee:e8:5f:43:
cf:5d:0a:af:57:3c:23:b7:76:d8:9f:53:3a:88:4b:
fc:8f:ee:b4:57:98:44:75:4b:82:88:70:3f:e5:6b:
82:bd:8e:5b:c5:a6:d5:71:7a:4f:62:d6:c1:98:08:
96:5c:b2:4f:bc:a4:9d:d2:c6:df:ec:3f:c2:f4:5e:
ad:67:91:06:c3:fa:e4:69:01:57:28:1e:f6:12:69:
b3:cc:41:01:ad:28:3c:55:71:86:ae:51:0d:83:96:
3d:13:4e:48:0c:44:9e:06:14:23:59:5b:34:77:a6:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:38:CB:36:DE:F5:36:D8:C4:14:BC:BD:D0:D2:DF:02:EE:13:46
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b3:9c:2c:d7:2e:9d:7c:f6:c6:10:94:e3:82:e1:f5:90:99:
bf:f7:ba:7b:4f:61:ec:72:ff:82:bf:e1:3b:d3:5f:04:39:11:
a5:bb:77:7b:1b:46:6d:e4:e5:ba:2a:aa:71:2b:fa:de:b3:d4:
11:9d:2c:0c:6d:32:78:5e:a5:a7:91:5f:40:cf:b0:3c:62:24:
5a:9f:de:c8:33:3b:c3:9c:69:b3:06:7c:41:e5:cd:0b:55:43:
a2:09:9f:19:4e:c4:f6:5e:0f:9e:2f:cc:c7:45:95:64:e3:d9:
a2:df:b1:2e:46:2d:4d:29:24:12:8b:cf:e1:b1:8e:12:73:dd:
2f:35:6f:5e:50:06:ef:98:f5:2d:fa:1a:be:ca:19:a5:a6:a8:
4f:33:b4:cb:e2:eb:07:0b:22:5d:e2:44:d1:d6:8a:a8:92:b1:
71:14:39:cb:ca:d5:64:65:9a:ba:05:41:d8:c5:26:8e:24:06:
7c:4c:a1:e0:21:17:b3:63:b5:7e:58:a1:ec:f4:b8:66:91:85:
09:cc:f2:3a:32:a1:cb:51:78:c2:bf:fe:0e:40:18:d7:c2:15:
9d:d1:25:92:59:ac:0b:c0:ee:13:27:60:04:d1:db:1f:cb:75:
f2:97:ed:01:22:4e:48:83:e1:a6:6c:a7:2d:8d:1b:95:47:f7:
ad:29:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:14 2026 by rpki-client