Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: R3mO2EITBbXIrqXSncvdx/i/zEBy8MdGWE4uhZgbwyw=
Subject key identifier: 24:4A:CF:39:F5:58:6E:4E:A5:5A:3D:9D:CB:85:09:CD:85:C0:E7:DB
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019CAC102D19384EB29AF9C02786DB01E9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0AD5
Signing time: Mon 02 Mar 2026 01:01:07 +0000
Manifest this update: Mon 02 Mar 2026 01:01:07 +0000
Manifest next update: Tue 03 Mar 2026 01:01:07 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: D81ddGJpeFeDulruF6g6xswjvPeXBqi3e6Z0K57uy7o=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2d:19:38:4e:b2:9a:f9:c0:27:86:db:01:e9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Mar 2 01:01:07 2026 GMT
Not After : Mar 3 01:01:07 2026 GMT
Subject: CN=244acf39f5586e4ea55a3d9dcb8509cd85c0e7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:7a:47:48:85:ca:9c:91:32:c9:e1:20:7d:
0e:61:98:02:1c:b8:13:5f:c2:64:d7:57:4f:21:51:
a7:de:30:cd:0f:65:0f:26:65:be:ac:b6:08:0c:5b:
69:86:20:d9:bf:e6:6f:90:47:34:de:c3:a5:e9:00:
16:14:16:22:c6:db:8c:16:55:63:37:f8:b6:8d:f0:
72:1c:17:c0:44:ea:46:01:df:ff:9f:36:4a:18:ae:
4b:5e:09:e1:56:27:39:c7:51:e0:06:e2:3d:f4:ce:
0e:26:05:4d:3e:6b:3c:bf:34:1b:50:11:28:32:9f:
41:dd:96:43:9a:20:ee:08:0e:49:b0:41:f0:d1:9b:
8c:01:f2:41:68:da:fc:b9:8b:28:14:c1:58:24:11:
35:b3:d6:f5:41:58:80:f5:4a:6d:15:21:60:25:84:
77:96:ef:19:4b:16:4a:b7:28:63:b5:3a:0e:03:9a:
e8:e1:d8:b7:79:75:9b:89:bf:ce:c6:03:55:fd:cf:
a7:5b:ef:87:88:fe:c5:43:cf:43:a1:c8:12:25:6c:
7c:78:f0:25:40:e5:c9:7e:ad:b1:29:c2:59:b8:a3:
c0:02:a3:6d:62:12:df:d0:bf:a4:3d:c4:40:38:f4:
93:36:4a:41:a5:7b:13:af:d1:c8:eb:26:a9:fd:d4:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4A:CF:39:F5:58:6E:4E:A5:5A:3D:9D:CB:85:09:CD:85:C0:E7:DB
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2d:fc:6e:77:0f:d0:a4:05:05:ea:d8:6d:52:29:cb:c4:6f:
99:af:65:8e:ac:07:39:4e:06:8a:0d:9f:1f:3d:e9:1d:d1:5b:
c8:f9:7f:e8:b0:45:bd:6a:8f:a9:be:ed:e2:a7:bd:d5:de:af:
64:14:42:ca:88:fb:56:7b:4f:b4:ae:d3:11:10:b3:a2:93:5f:
2b:ad:fe:2b:c4:5e:4d:ef:2e:e0:3f:82:d2:72:e9:46:46:14:
7c:95:61:66:62:8e:f8:e3:e7:7a:39:b9:81:88:95:87:4a:c2:
4c:e6:d3:38:94:f5:6e:8f:db:59:b5:32:bd:0c:04:b4:f1:b1:
02:d1:55:c6:13:c7:50:85:3c:0c:7c:f7:66:42:c4:6a:80:06:
c6:5f:43:d3:ca:6a:4a:06:d1:b9:62:f5:0e:46:62:fe:d1:e7:
47:8f:3e:31:e8:b7:dd:b4:bf:67:0d:7c:27:4b:4b:72:bd:3a:
a6:8a:1f:e1:c9:74:54:98:62:58:65:a7:fe:84:4e:0c:11:01:
6e:36:bb:d3:c3:da:86:1b:b0:56:5f:80:1d:bd:4a:fa:f0:04:
6b:c1:5e:d9:53:40:86:fc:d7:4a:8b:63:a0:86:2e:fb:dc:c0:
75:27:9e:23:26:4c:54:5c:b0:75:44:67:58:2d:f0:d9:8d:8f:
10:94:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:36 2026 by rpki-client