Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: 1yyNu+MIEFzlA+7FEBz6qfYuNNkV+CQdzj3NOfWFKkA=
Subject key identifier: 38:07:78:98:5E:B3:FB:08:E7:A5:1D:F8:A0:AB:C8:98:4F:8F:F2:88
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019E1C47933425508FB333C47E422CE04B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 15A3
Signing time: Tue 12 May 2026 13:01:53 +0000
Manifest this update: Tue 12 May 2026 13:01:53 +0000
Manifest next update: Wed 13 May 2026 13:01:53 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: fZziyz97WbLKu7eb41OmCBfhdKnUScbxgoHJmIuW8y0=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:93:34:25:50:8f:b3:33:c4:7e:42:2c:e0:4b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: May 12 13:01:53 2026 GMT
Not After : May 13 13:01:53 2026 GMT
Subject: CN=380778985eb3fb08e7a51df8a0abc8984f8ff288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:99:81:bd:84:8f:8c:3a:06:47:85:c8:a2:
08:7b:ca:00:1e:91:2a:2d:85:86:53:0b:7a:5c:2c:
2e:74:84:61:3f:0c:48:ec:c2:04:24:34:ef:21:e7:
d5:55:75:9f:f2:a1:a8:e8:21:e7:95:82:87:eb:a2:
11:c3:db:e4:0f:2b:ac:c4:17:7f:23:94:bf:2c:cf:
29:3d:bd:72:b7:14:a4:c1:9b:f2:6a:45:41:8e:4c:
5f:e0:d6:17:27:2b:88:d8:5b:1e:98:fb:fb:b6:0c:
ef:54:aa:b0:a7:69:0c:99:ae:df:d2:4f:99:54:8a:
08:a9:4b:0f:44:92:96:29:13:b2:54:da:3c:35:17:
9a:76:cf:51:6f:ba:a5:3c:6d:a7:bc:ed:d2:ad:fe:
a0:fb:58:62:6b:0e:86:89:79:bb:a4:05:dd:20:58:
33:0f:b4:bf:b9:b6:2d:a5:0a:0c:61:75:b9:3c:8c:
d4:38:24:d4:93:cf:78:38:65:0b:58:c8:5d:a7:ca:
56:30:c6:28:2a:e3:82:bc:cc:d9:60:b5:c6:ee:81:
55:a9:f1:0e:d9:da:c1:4e:1d:45:18:ec:03:72:0f:
62:29:32:66:66:93:74:68:14:3f:b8:82:cc:cc:6b:
c2:11:51:1c:42:c5:f4:75:3a:a4:59:4b:fa:73:a8:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:78:98:5E:B3:FB:08:E7:A5:1D:F8:A0:AB:C8:98:4F:8F:F2:88
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:15:4c:a9:75:b8:85:60:52:30:1d:97:9b:db:f1:f4:98:41:
1b:53:f4:4f:66:8c:b7:ca:6a:f0:0d:ce:5a:61:d1:19:73:6c:
94:31:dc:3a:28:70:e9:4d:c6:a5:a7:c3:03:32:52:27:44:a6:
5c:83:3b:0e:2c:c4:16:c8:fb:89:61:bf:09:5f:bf:10:08:17:
1a:44:91:df:61:a0:56:85:09:28:83:ad:ad:79:1a:8f:4d:40:
7e:9d:45:b8:2a:d9:e6:d9:67:4a:3e:c5:17:2e:3f:7c:ff:23:
b0:48:82:e9:88:e8:30:27:a0:6d:c7:6d:7b:89:dd:33:61:4b:
b9:10:13:9d:12:e1:d1:b9:40:26:22:bb:9e:98:a5:44:9a:c0:
7a:71:e1:66:bc:1a:69:f0:a8:bc:a0:d9:31:10:af:db:79:dd:
bf:54:63:18:24:74:5f:bf:de:c9:e8:30:70:0a:00:91:7e:23:
db:cd:26:27:29:48:0b:8a:73:cd:9e:c8:26:40:89:58:ab:38:
97:a0:b6:2c:56:89:86:46:3c:56:f1:29:35:79:49:ed:c5:2e:
a4:f1:76:b5:c1:f7:ff:c5:f7:74:92:7e:e3:96:0d:ef:26:95:
b6:14:e0:ba:6f:dc:07:86:3d:8b:5f:ae:47:aa:e8:05:aa:e9:
43:06:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:19 2026 by rpki-client