Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: UB05swDXnilWnxt9wTlj6R4V/Ee4c/QuY2M62ln87Sw=
Subject key identifier: C4:B9:0E:37:8E:37:BE:84:FA:91:AD:C4:0B:97:B0:2D:4B:93:B1:D7
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019CADC78A972EC2050031A7EADF398C24C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: CD
Signing time: Mon 02 Mar 2026 09:01:01 +0000
Manifest this update: Mon 02 Mar 2026 09:01:01 +0000
Manifest next update: Tue 03 Mar 2026 09:01:01 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: Gny4LIUlWIUGFgR4Ku1AAHWFhS393zX1p5CGbPrbspc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8a:97:2e:c2:05:00:31:a7:ea:df:39:8c:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Mar 2 09:01:01 2026 GMT
Not After : Mar 3 09:01:01 2026 GMT
Subject: CN=c4b90e378e37be84fa91adc40b97b02d4b93b1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:f0:a6:cc:c6:c6:94:1a:b0:fd:09:15:b4:
57:70:b7:1e:ae:fe:21:4b:00:3c:0e:41:96:58:71:
6f:8f:9b:d6:31:93:b6:e9:c7:84:b8:8a:4c:a0:ea:
cf:e6:d8:13:12:ff:86:12:10:cd:34:ca:1c:95:ce:
fe:28:79:13:f2:7b:af:2f:7e:04:7b:5c:2b:5e:3c:
90:8f:3b:16:35:0c:30:90:86:68:cc:8f:34:a6:d5:
d8:f3:99:e3:18:90:40:51:5b:fe:14:ff:f4:df:35:
b1:18:03:5e:fe:76:be:96:3f:62:06:5a:e6:61:eb:
24:49:2b:92:5a:32:2c:8e:ad:27:84:fa:6d:c6:ec:
02:4d:b9:12:b0:d3:28:6b:95:5e:8c:52:52:a8:78:
cd:61:e5:60:54:98:99:df:40:16:a9:00:25:77:c5:
c6:fe:df:e5:2b:90:5d:05:a8:37:0d:44:31:6a:89:
6f:1b:66:14:2b:a6:95:38:a3:5e:0d:92:2d:f8:69:
a1:c4:9c:ab:41:72:86:83:95:19:be:68:9d:54:3d:
95:c0:6c:2d:bb:8e:09:4f:09:9d:5d:e7:61:50:70:
e6:cd:06:30:a4:f4:68:90:e7:bd:9f:07:4e:a2:41:
3d:e6:04:5b:33:87:bd:b1:44:df:6f:92:70:4d:89:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:0E:37:8E:37:BE:84:FA:91:AD:C4:0B:97:B0:2D:4B:93:B1:D7
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:39:c0:81:cf:73:a7:b0:6f:5c:6e:02:56:a7:1b:50:7c:2b:
b3:69:60:5c:de:27:34:b0:94:b1:ff:02:1c:00:eb:18:c6:83:
01:62:45:af:6b:f2:8a:2b:94:bf:b6:39:58:f7:d2:0b:ca:d2:
91:ca:05:03:7d:7b:ca:f7:30:94:77:2d:1b:4b:c2:df:35:f0:
a1:bd:db:a8:62:8c:4c:97:cd:b4:5d:74:d3:41:c6:33:95:5c:
97:15:12:73:b3:f3:c3:ac:36:6e:d1:5d:17:26:cd:b6:4f:1b:
38:de:ed:82:19:c1:cf:0a:cb:be:eb:49:95:00:22:f1:19:ba:
59:cb:07:2d:ee:2a:39:75:48:64:43:13:db:bb:ae:f1:65:dd:
5f:b6:d3:7f:bb:5b:58:4a:4b:89:a5:95:c1:50:9a:ec:26:2f:
b8:fb:af:83:2f:79:3f:4e:f5:8d:f8:0f:e9:62:7e:67:f7:84:
a6:a1:34:3c:83:ec:92:fb:60:db:15:1c:3a:7b:69:73:5a:6e:
c3:af:fd:f6:85:dc:95:fd:cc:e6:8b:25:a9:ea:52:5f:89:e4:
c4:4d:35:84:8e:73:bf:0e:4e:6f:7a:13:92:df:1d:0c:dd:7f:
60:a7:14:f8:75:d0:df:e4:92:a6:b1:71:a6:2d:1b:1b:99:fe:
c4:a8:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:59:29 2026 by rpki-client