Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: kfj++wJCvgAymvJSPV+IdgTBX1OEf1g5rez4hEG63cs=
Subject key identifier: D7:83:DF:81:3B:D6:B9:DF:C9:0B:32:3F:4B:8C:BC:5B:67:43:D0:80
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019FAC772CE9A8680F322AF20B4BB04E7128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 025A
Signing time: Wed 29 Jul 2026 06:01:58 +0000
Manifest this update: Wed 29 Jul 2026 06:01:58 +0000
Manifest next update: Thu 30 Jul 2026 06:01:58 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: G+1nBcCMSE4nE1WGvTs0UROUynj3lAaztr8fxzzHYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:2c:e9:a8:68:0f:32:2a:f2:0b:4b:b0:4e:71:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Jul 29 06:01:58 2026 GMT
Not After : Jul 30 06:01:58 2026 GMT
Subject: CN=d783df813bd6b9dfc90b323f4b8cbc5b6743d080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:cd:e4:72:47:29:58:7b:bd:3a:cd:df:27:
e1:bf:88:5f:28:e6:d8:9e:4e:e6:a3:9e:8c:15:04:
8f:3d:ed:64:4d:03:17:f5:8f:bc:b0:ab:ad:7a:da:
fb:e7:a8:3b:6a:ee:82:a6:88:61:57:64:c7:89:05:
94:50:f4:b3:fb:74:55:dc:e5:de:5e:cd:d8:1e:ad:
07:cf:6f:9e:bf:9b:c2:be:a9:36:b8:c4:a6:04:fc:
63:15:3d:b3:8e:e3:54:c1:73:df:f2:b0:29:b2:61:
e2:3b:59:72:05:fe:48:aa:71:25:ea:b6:e7:ff:78:
01:81:93:41:3d:90:83:98:6e:be:c4:79:1a:f8:f1:
05:fe:b0:3d:5c:61:eb:c5:19:06:e4:8e:3d:7a:5d:
07:ad:0e:0c:ce:7a:29:d2:b8:3b:20:a2:52:3f:6e:
10:86:4b:fb:e2:4c:5e:4f:6f:a5:f3:c2:90:39:d5:
de:37:75:1e:15:69:40:c2:86:52:6c:4b:06:75:fa:
5d:f9:c2:7f:a7:1c:5b:2d:ec:b4:6f:df:9f:f5:a5:
c8:98:77:f6:2e:ca:0b:f1:f6:6d:93:78:e0:d6:52:
f5:5f:95:70:9c:c6:b9:c0:a2:6e:16:6c:0b:87:30:
a1:05:a6:68:34:4d:47:60:10:c2:69:8f:26:5b:66:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:DF:81:3B:D6:B9:DF:C9:0B:32:3F:4B:8C:BC:5B:67:43:D0:80
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8c:b7:f1:d2:3f:f1:f4:2d:28:fb:3a:73:6f:44:3d:fd:9d:
21:d0:7a:c5:8e:c7:f4:1e:61:86:87:72:7a:93:de:1d:65:33:
c6:92:0f:67:a0:e5:66:5a:1b:6a:25:68:b9:1c:45:88:61:2c:
7c:a9:81:53:2d:2b:d3:af:b2:9b:12:c9:bf:61:d3:fa:3c:55:
5a:a7:ac:4a:78:73:b6:8c:d4:7e:a1:bd:58:8d:01:b1:c6:1a:
b4:4c:d4:73:d3:e3:7b:5d:05:40:c5:99:22:bf:7f:5b:dd:66:
3a:fe:55:6a:40:bc:aa:b0:6c:c5:62:d9:e3:fd:25:2b:33:2a:
c2:bd:e0:74:82:1f:63:7f:34:e5:0d:d8:7d:da:21:1a:02:47:
ad:ef:f6:f8:03:f0:be:44:b6:c8:39:f2:d9:95:8a:3c:e7:fb:
45:05:15:dc:71:53:a4:39:f1:fd:e6:f0:44:e3:f6:01:c2:9b:
59:52:d7:75:25:41:ab:c2:d8:08:6a:88:22:4d:ae:df:0e:8b:
67:bf:b1:61:7f:a8:98:2e:9b:bc:f8:e5:ac:f3:69:2a:11:99:
eb:fa:e6:cf:e1:64:59:83:35:68:d3:2c:a8:9f:05:f7:04:2e:
2f:93:51:54:aa:65:e6:2d:76:4d:22:a0:a7:d5:30:63:39:22:
d3:1e:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:36 2026 by rpki-client