Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: N9mfv7gIgvutJex0Z4ilM/TVeqf9YK3tqoaSP/5vfVM=
Subject key identifier: 94:07:6D:7A:E7:38:4F:5C:E4:FA:1D:67:61:FB:5F:18:D0:00:06:EA
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 01A0DCBC47027CAFBF22BC6C761363FAD311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 08DE
Signing time: Sat 26 Sep 2026 08:02:01 +0000
Manifest this update: Sat 26 Sep 2026 08:02:01 +0000
Manifest next update: Sun 27 Sep 2026 08:02:01 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: iaIE1gHHLmYrlJ02zhuC8MbAvWMGUf7Bogd0eCFqj+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:47:02:7c:af:bf:22:bc:6c:76:13:63:fa:d3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Sep 26 08:02:01 2026 GMT
Not After : Sep 27 08:02:01 2026 GMT
Subject: CN=94076d7ae7384f5ce4fa1d6761fb5f18d00006ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:97:28:62:ba:e9:a9:b9:d4:9a:75:05:89:
73:53:60:35:2a:7a:47:3e:e4:51:78:51:28:76:ac:
8f:cd:b6:c1:b7:31:c3:90:33:9a:d7:9c:4b:1a:d6:
b7:17:e1:f1:74:6c:01:7f:ed:ec:e8:9f:67:6d:e3:
92:c2:74:bf:9c:8f:55:4c:13:01:f7:8c:72:7b:40:
1d:94:fc:8e:7b:05:b6:d2:f0:7c:96:46:1d:8d:20:
14:10:70:08:fb:cc:87:70:27:9c:8d:00:0f:ac:ba:
2a:e0:d2:d2:fc:d6:89:6a:da:f3:ed:36:f3:ca:0d:
fd:77:a1:17:d7:0b:eb:67:b7:be:05:64:3c:c1:d1:
31:4d:f1:84:a2:05:40:e0:b2:c7:57:01:35:d9:fa:
67:80:fe:dd:4d:79:e1:75:1e:b7:93:b1:0f:eb:d7:
00:bc:7f:e6:20:3f:c0:03:fd:43:fc:f5:57:4a:77:
a7:2e:84:92:a7:f0:0f:9a:30:68:f6:b2:d5:fc:ca:
2f:db:ae:83:bb:9f:3d:ce:da:7e:70:90:c6:bd:c2:
ea:76:aa:af:f6:7a:8f:ed:1d:cf:a6:36:a9:e9:8b:
47:46:1f:65:38:ad:5c:75:28:39:9d:5d:f4:c3:61:
21:1e:a2:c8:8e:11:df:81:72:51:68:1f:78:07:ae:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:6D:7A:E7:38:4F:5C:E4:FA:1D:67:61:FB:5F:18:D0:00:06:EA
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c1:2a:95:ae:bf:95:65:f0:a3:55:df:ac:dd:d3:1e:bf:72:
f7:e6:35:66:d9:00:3c:39:ad:60:d7:95:7d:2a:a7:1c:d7:57:
11:00:19:12:eb:74:5a:6f:32:12:9c:dc:83:4b:47:4c:c1:20:
ab:f8:ac:b6:f5:00:62:57:cc:23:9a:43:36:7b:45:45:94:2f:
03:ad:d3:82:e9:ad:d8:b5:f2:39:f8:a5:04:d8:49:2c:25:80:
55:77:45:76:bd:a5:7a:c0:22:4e:7b:a2:16:26:07:07:24:a8:
c0:13:59:15:94:4f:11:7f:05:0c:7d:e2:4f:23:a6:1b:f9:26:
c2:5e:c7:41:9d:fd:cc:3b:a9:b6:b5:f5:8b:d5:93:2f:9e:ca:
69:f8:14:53:3e:2d:e7:f6:b6:c2:6d:28:e4:f3:61:91:db:96:
78:d3:da:f9:84:be:10:30:5d:67:d8:a8:a7:b5:5b:43:60:2f:
d9:c6:ed:6c:a0:b5:1b:16:76:8d:47:57:81:9d:ed:ce:d9:98:
71:75:d9:c7:39:b2:df:85:36:50:b5:c5:2c:af:e2:74:03:af:
e0:75:32:ca:3b:c5:7c:19:37:ad:68:bb:d9:19:46:8e:34:33:
df:23:c4:27:4f:5d:91:5f:2d:2b:38:97:0e:d3:8f:21:04:25:
5e:6b:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:18:04 2026 by rpki-client