Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: uLG0gUthGMwa/F6rRxADjJ6PZ7A+9SZoGHws1Cy+XJg=
Subject key identifier: EA:22:B1:AE:D5:E5:39:F4:64:BA:51:84:6E:8B:E2:E9:5F:38:64:CA
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019D9D3ED7FAAC68C94B529B7596E3A066A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 0149
Signing time: Fri 17 Apr 2026 21:00:34 +0000
Manifest this update: Fri 17 Apr 2026 21:00:34 +0000
Manifest next update: Sat 18 Apr 2026 21:00:34 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: kE070Qz2NxvSOQeRiJT6yU02eljeFMGL5kAS88JGC0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:d7:fa:ac:68:c9:4b:52:9b:75:96:e3:a0:66:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Apr 17 21:00:34 2026 GMT
Not After : Apr 18 21:00:34 2026 GMT
Subject: CN=ea22b1aed5e539f464ba51846e8be2e95f3864ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:fb:e0:e1:64:0c:67:59:8a:57:a1:f9:3c:
66:d6:bc:9c:50:c4:f6:fe:cf:5d:ca:88:3b:6f:8a:
fa:f8:32:d1:50:8e:21:72:78:69:c4:9f:95:a3:1d:
10:a2:22:f8:28:e5:85:b9:96:5f:6c:0d:20:80:8e:
53:a8:82:ba:ed:a2:40:8a:8f:d3:bf:b9:45:0c:db:
83:90:4f:fa:a7:65:4c:c6:50:d3:95:42:5e:38:93:
d7:0b:f9:3e:06:95:6c:90:52:b9:5b:a3:2f:c0:88:
6b:83:2b:69:35:50:30:0c:e0:ed:9b:a1:93:77:f8:
6a:48:c6:75:05:cb:58:eb:69:d2:03:08:d8:ef:ff:
36:b2:d0:03:db:33:e9:6d:89:16:de:c1:cf:e3:80:
08:0f:04:f9:32:e5:24:d9:3d:80:33:ec:11:c3:57:
97:9a:76:08:48:9a:9b:db:7f:d8:6e:f1:45:50:a7:
0f:cb:68:65:5e:60:69:21:97:bc:f0:6a:ca:59:0e:
99:51:82:ed:a6:de:bd:aa:7b:7c:b5:01:35:f7:bb:
8a:f2:d5:cb:07:5f:c9:d5:8e:45:8c:c3:c6:fa:a5:
92:49:27:f2:4d:a7:25:90:47:d6:c9:cc:a0:3e:00:
51:99:72:22:52:1c:02:0b:e1:92:6d:ab:27:0a:4f:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:B1:AE:D5:E5:39:F4:64:BA:51:84:6E:8B:E2:E9:5F:38:64:CA
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9f:6b:25:4a:3a:1d:b8:bf:07:a6:94:7a:62:f3:ab:75:78:
41:b5:de:7e:b9:4a:33:21:fb:59:63:79:57:77:a1:e5:25:8c:
44:d6:b6:41:b6:d9:d5:03:42:d4:79:8b:0a:6b:af:25:99:8d:
01:1c:e0:da:5a:d9:99:d1:ae:e2:9e:99:94:8a:f1:ab:15:c5:
3e:74:8f:45:20:2e:1b:3f:95:2e:72:aa:21:0a:10:d6:30:db:
e1:7a:97:6d:ce:3c:8c:37:36:39:96:82:1e:60:aa:10:fe:91:
5f:f7:4d:1d:26:5d:9a:39:ec:f8:4d:cb:9c:42:f9:26:8f:85:
b4:2c:2e:37:9c:a2:59:27:e1:ef:af:cc:6f:57:42:f3:f5:67:
a6:2b:81:eb:2c:ce:ff:cb:40:96:d2:09:a4:9f:91:8d:c7:42:
e4:6b:d2:6e:5a:a7:02:eb:d1:29:f1:c9:a8:d1:a6:a1:c2:48:
1d:91:61:ac:80:e9:24:57:69:5a:a4:60:c5:8b:cd:6c:89:f6:
d3:bf:4a:be:e5:2f:b3:df:71:31:cb:75:68:7c:fb:33:07:7d:
5b:e5:f2:c3:17:7d:2c:1a:3a:fa:5a:8c:78:54:7b:25:52:19:
df:bd:42:05:4e:0a:5b:40:67:66:0c:b3:02:f7:ad:e9:1d:c2:
67:fb:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:05:31 2026 by rpki-client