Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: I0wiw6T4U0PqY3bES1ek/C83JcXDEqv4tCQ4Kke0Wz0=
Subject key identifier: 99:16:F1:CE:07:20:28:41:0F:60:B8:72:1B:93:21:84:41:56:B0:91
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 01A14015DE4A8869DCA4014F31A3692515C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 032B
Signing time: Thu 15 Oct 2026 15:02:17 +0000
Manifest this update: Thu 15 Oct 2026 15:02:17 +0000
Manifest next update: Fri 16 Oct 2026 15:02:17 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: cDSaxhaoRghUJjxyERNi6Rg9yeDg1FL0Jym6WxTcsFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:de:4a:88:69:dc:a4:01:4f:31:a3:69:25:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Oct 15 15:02:17 2026 GMT
Not After : Oct 16 15:02:17 2026 GMT
Subject: CN=9916f1ce072028410f60b8721b9321844156b091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:12:b3:ed:a8:58:5a:6b:b1:45:74:95:25:
79:2c:ac:47:c1:03:c9:ac:15:a1:c4:72:33:0f:e6:
b6:e9:ff:f1:40:32:6b:f9:e6:ed:06:54:03:e6:62:
01:7b:77:05:e3:4a:75:1f:c5:fb:23:c3:5c:5a:73:
c5:26:64:ff:d0:9e:9d:dc:92:c5:8c:65:07:c0:e6:
d3:3b:92:9d:31:22:84:91:15:04:0d:7d:78:8d:d9:
f1:dc:04:f8:c8:16:65:5b:0b:b9:e6:76:1d:cd:ca:
8c:e8:81:8d:ce:a8:b8:2b:f4:fb:f4:20:4d:4c:e6:
e9:d9:ea:1f:9c:21:84:19:5e:10:dc:c5:1f:0c:28:
c1:24:1f:f9:d2:8f:58:78:57:99:7d:86:12:10:17:
58:1c:23:af:34:99:c2:74:2c:94:8d:0a:b8:03:dc:
19:ce:01:a3:85:31:5d:b9:32:56:3c:26:23:b0:e1:
f7:db:58:f5:d4:f2:e0:fc:07:2f:07:5e:2d:29:11:
eb:1b:41:e8:21:21:1f:c2:ae:6c:78:f3:76:f4:db:
88:7a:09:0e:c3:a9:95:b8:40:86:c5:94:7e:ff:5f:
cf:76:af:ec:a4:9f:1a:0a:38:71:09:9d:d6:fd:6f:
2b:90:02:a1:3f:d6:97:21:11:93:f1:d8:dd:bf:81:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:F1:CE:07:20:28:41:0F:60:B8:72:1B:93:21:84:41:56:B0:91
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8a:37:7b:19:e8:58:48:6e:49:cf:a4:17:47:5b:e0:eb:f2:
41:e6:dc:ac:1a:32:2f:ca:b2:d0:c4:8e:80:06:6c:35:ec:90:
4f:91:68:01:b6:a9:bd:81:2d:a7:3e:d1:0e:b4:ee:cb:a7:8c:
77:2f:cf:ad:06:f7:8d:67:73:d3:3e:83:d9:1c:97:dd:c5:1c:
7b:4a:89:d6:8e:37:61:6e:bb:5d:f4:77:53:36:ce:75:fb:2c:
e4:a8:02:51:17:25:7d:02:88:e3:8d:7a:b6:7d:b8:9d:a9:d0:
8f:04:c2:ad:d1:51:5b:c5:a3:c8:af:93:41:08:d0:c7:d0:80:
e8:17:4a:79:40:40:a8:44:14:b4:90:d4:68:2d:86:50:57:c7:
bc:92:18:f4:1b:36:bb:96:ea:92:15:c4:2d:40:2a:6f:d4:96:
01:77:b8:67:2c:88:d1:10:36:71:3e:c8:30:75:4e:07:d8:57:
1d:01:f2:4e:03:63:5c:80:73:4b:75:62:79:cf:61:44:a0:70:
52:1f:2a:3f:50:3e:5c:9f:c7:82:b3:71:bd:6e:87:12:db:51:
32:33:4b:e2:e6:82:dc:97:66:20:a8:1a:37:a3:06:b8:13:ea:
fb:bc:2f:d7:07:22:c0:eb:8b:dd:e0:13:f8:a5:93:fb:71:75:
86:a8:5b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFd5KiGncpAFPMaNpJRXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWM2Zjc2Mjk4YzVmNWZlMjZiMWU5MzJhNDUwNTEzZmNj
MzliMzgwHhcNMjYxMDE1MTUwMjE3WhcNMjYxMDE2MTUwMjE3WjAzMTEwLwYDVQQD
Eyg5OTE2ZjFjZTA3MjAyODQxMGY2MGI4NzIxYjkzMjE4NDQxNTZiMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd0Ss+2oWFprsUV0lSV5LKxHwQPJ
rBWhxHIzD+a26f/xQDJr+ebtBlQD5mIBe3cF40p1H8X7I8NcWnPFJmT/0J6d3JLF
jGUHwObTO5KdMSKEkRUEDX14jdnx3AT4yBZlWwu55nYdzcqM6IGNzqi4K/T79CBN
TObp2eofnCGEGV4Q3MUfDCjBJB/50o9YeFeZfYYSEBdYHCOvNJnCdCyUjQq4A9wZ
zgGjhTFduTJWPCYjsOH321j11PLg/AcvB14tKRHrG0HoISEfwq5sePN29NuIegkO
w6mVuECGxZR+/1/Pdq/spJ8aCjhxCZ3W/W8rkAKhP9aXIRGT8djdv4ECQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkW8c4HIChBD2C4chuTIYRBVrCRMB8GA1UdIwQY
MBaAFAzsb3YpjF9f4msekypFBRP8w5s4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2Ut
ZjlmMzg1NTcyNjk2LzEvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2UtZjlmMzg1NTcyNjk2
LzEvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIo3exno
WEhuSc+kF0db4OvyQebcrBoyL8qy0MSOgAZsNeyQT5FoAbapvYEtpz7RDrTuy6eM
dy/PrQb3jWdz0z6D2RyX3cUce0qJ1o43YW67XfR3UzbOdfss5KgCURclfQKI4416
tn24nanQjwTCrdFRW8WjyK+TQQjQx9CA6BdKeUBAqEQUtJDUaC2GUFfHvJIY9Bs2
u5bqkhXELUAqb9SWAXe4ZyyI0RA2cT7IMHVOB9hXHQHyTgNjXIBzS3Viec9hRKBw
Uh8qP1A+XJ/HgrNxvW6HEttRMjNL4uaC3JdmIKgaN6MGuBPq+7wv1wciwOuL3eAT
+KWT+3F1hqhbRA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:22:35 2026 by rpki-client