Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: rgFU2X58kPuwlJGxTc6CEWzKOPDQL0rJydCTAIlukG4=
Subject key identifier: 11:DD:B9:B1:02:09:A2:4C:0F:41:9A:F4:99:B2:EC:0B:A6:0A:C2:95
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 01A0D2A607B49BFC1D4D335912EAB9F51AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 0278
Signing time: Thu 24 Sep 2026 09:01:31 +0000
Manifest this update: Thu 24 Sep 2026 09:01:31 +0000
Manifest next update: Fri 25 Sep 2026 09:01:31 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: z+H55ercrLlWS80gXzwdnl1Vq46nM/KaZJmrpZ5FOuo=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:07:b4:9b:fc:1d:4d:33:59:12:ea:b9:f5:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Sep 24 09:01:31 2026 GMT
Not After : Sep 25 09:01:31 2026 GMT
Subject: CN=11ddb9b10209a24c0f419af499b2ec0ba60ac295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:d3:01:56:b8:25:fe:81:c9:9d:cd:76:13:
6b:63:8a:21:bd:ca:b0:89:93:73:2d:93:21:5b:01:
3e:fa:6a:57:60:ed:a3:b4:f4:db:05:f7:48:ec:6f:
d4:0a:77:0e:00:76:05:d8:83:e7:68:2a:38:76:13:
c9:af:c3:64:2d:67:79:62:3d:e9:79:d0:37:b1:f1:
3b:d3:b9:cf:51:45:47:d8:c0:89:21:4c:21:71:1a:
24:8e:9f:d1:43:50:ea:84:35:10:d5:7d:53:9c:a7:
f5:94:4b:18:f9:e8:55:f6:0a:8a:61:54:f5:a1:47:
d3:09:fa:38:bc:3b:52:1e:2c:1f:41:a6:f3:dc:44:
03:d0:a4:48:43:ae:8a:4c:84:57:7f:ab:b8:08:3d:
3c:91:7d:0d:80:81:ac:9b:f9:a3:f0:cd:b7:16:3d:
fe:a7:25:d2:5b:ac:b7:2c:3e:5e:18:60:03:2c:76:
f6:93:57:e1:df:68:58:16:85:02:2d:52:5d:70:e1:
27:50:1a:36:0e:aa:86:59:d0:cd:fa:32:93:ae:54:
1d:d1:c9:2e:65:02:39:c5:3a:62:28:87:57:6b:60:
40:78:94:d0:5b:65:8b:dd:45:c5:0c:f0:75:e8:59:
46:27:86:98:0f:be:49:06:1c:c8:98:c7:36:f4:8b:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DD:B9:B1:02:09:A2:4C:0F:41:9A:F4:99:B2:EC:0B:A6:0A:C2:95
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d4:30:a2:56:ec:95:fb:96:94:55:6e:1e:8d:9d:14:50:36:
8c:95:ab:ce:ca:8b:f9:da:98:e5:2b:79:a1:e9:83:fb:46:fa:
b9:b1:a0:69:d8:9b:3a:d4:0b:f3:ba:71:ef:cd:a9:7f:bf:8e:
76:47:aa:4f:b8:6b:ac:1f:a9:c0:30:d1:b8:51:17:04:75:24:
80:a0:e7:5b:28:f4:8d:48:6c:9b:c7:2d:22:9b:27:63:92:ae:
13:39:68:44:93:d5:c0:55:a7:0a:f2:81:8b:02:65:f8:4a:77:
30:f5:bc:44:89:06:f5:69:46:a7:5b:98:41:6e:4a:ab:a5:20:
35:67:2b:94:1c:b3:13:3d:21:aa:94:06:da:b1:b2:ea:5f:70:
ba:34:a3:08:2b:02:ee:62:c0:eb:76:09:38:aa:bb:16:c2:dd:
b2:e1:2b:98:8f:cd:86:82:ab:f3:c5:82:e7:4e:0b:f4:79:38:
87:8a:66:88:7d:2a:7d:06:b4:a4:28:af:1e:e1:c7:58:d9:3b:
5a:18:8f:dc:74:4a:f5:41:a9:d4:fe:c0:e2:7b:45:53:99:41:
99:f0:f1:0a:93:9f:60:91:ae:85:1b:6a:17:ed:ef:d2:69:f1:
dd:54:7b:0f:c1:82:2b:6c:bf:a9:46:41:25:d3:ff:25:68:73:
19:53:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:28:35 2026 by rpki-client