Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: s0N//94WCxyEEvxMB5JnjvDT+KxKNyK12FnyCfULUOM=
Subject key identifier: 96:4F:B0:F1:27:A2:23:C6:97:1A:2D:BA:35:E9:92:CA:03:73:81:4F
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 01A1DEA7F1AFE37C1B04D8A687264AFFE396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0D86
Signing time: Sun 15 Nov 2026 10:01:50 +0000
Manifest this update: Sun 15 Nov 2026 10:01:50 +0000
Manifest next update: Mon 16 Nov 2026 10:01:50 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: 7ioZnY7cw1ZtISKi6kd+qgM9TIBk2IiFw9iX6BbJj9M=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:f1:af:e3:7c:1b:04:d8:a6:87:26:4a:ff:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Nov 15 10:01:50 2026 GMT
Not After : Nov 16 10:01:50 2026 GMT
Subject: CN=964fb0f127a223c6971a2dba35e992ca0373814f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:64:64:82:de:44:ff:42:ff:32:a9:b9:64:
6b:4e:94:6a:24:be:70:43:78:18:de:dd:c8:41:ee:
83:e3:a2:5a:a5:ca:ae:d4:43:7a:cb:65:70:fe:83:
99:6a:6f:72:d4:f2:36:fe:66:b2:42:bf:5a:66:56:
dd:6a:1b:56:53:ce:62:d3:e2:e9:a0:d6:4b:64:67:
91:40:5c:74:e8:a9:f7:57:9a:a5:fc:dd:8f:f2:cf:
24:08:78:0d:10:42:47:4d:d6:5a:2a:45:44:a5:a1:
ac:27:43:3c:0e:62:11:86:67:d1:91:6f:e9:e1:18:
65:25:39:4b:95:6b:e0:de:fb:41:c0:50:c8:39:b2:
81:57:33:06:85:5a:96:4d:1a:4f:36:fe:65:34:68:
d0:aa:9b:46:ad:ff:b7:74:dd:07:ff:14:ae:03:f5:
c6:26:f2:4f:8f:96:d2:64:07:fd:0d:85:22:f5:b9:
05:5b:27:84:d2:b3:f8:ec:f4:af:69:b5:ec:0a:2d:
fc:51:73:d7:a8:a7:77:27:43:f9:62:6e:d5:0f:e5:
cf:e5:4a:27:01:5b:66:d8:69:e4:53:f3:69:53:b3:
71:92:a0:bd:2b:c6:eb:ac:6e:cd:a0:86:d6:ab:1b:
7f:39:3d:5f:f0:aa:a9:b4:bf:11:51:e3:31:54:66:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:B0:F1:27:A2:23:C6:97:1A:2D:BA:35:E9:92:CA:03:73:81:4F
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ce:56:db:af:fd:4c:5f:9c:2a:88:5f:98:6f:32:d7:c7:89:
34:bf:d0:cc:20:ad:55:e0:df:97:bb:fe:ba:68:22:8a:89:a6:
b2:2f:18:06:3f:40:ba:3e:a9:43:0f:11:2f:8f:8c:a2:ec:33:
d8:e9:59:a1:c3:cd:18:5d:48:46:bf:b1:45:70:8e:34:0e:24:
39:b1:bc:f4:91:ac:00:77:c0:1a:31:17:f9:a1:26:e1:0e:c3:
93:ab:ba:e5:6d:d3:d9:95:98:db:58:4d:da:f8:af:a8:a5:98:
cf:ec:ce:be:16:77:b2:05:68:bb:95:33:cd:37:2f:7a:d3:fd:
34:75:e4:ea:f0:93:c6:61:b4:77:13:ba:42:a0:ec:a5:f8:9c:
3f:52:f3:f1:d1:17:94:ea:8c:d6:3c:7b:79:f7:ea:71:ad:b6:
a6:ad:1a:53:2e:c2:5c:2a:c9:11:f9:45:de:2b:47:5c:af:9e:
42:6a:1d:c5:52:6d:8e:64:08:e9:1e:f2:3c:58:f4:4d:5c:24:
73:42:19:27:76:f1:38:55:97:73:1f:f8:82:b4:9f:5f:71:a9:
a5:86:f1:f6:df:47:a2:48:37:a3:68:2c:dc:cf:84:70:65:f9:
a7:ae:a7:fb:ec:ae:d9:8d:a3:e6:0f:ed:f0:ce:54:f2:84:f0:
63:bf:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:30:26 2026 by rpki-client