Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: oCbb+puuzkOLx8C848eBgyNk8WDyXEChpj9a/GJDxmc=
Subject key identifier: DE:CA:F4:4C:76:15:BD:61:14:25:7F:C3:64:FF:51:67:A1:0C:63:3B
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019D265ECFD579DA5E05BA027A4267F682D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 91
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: uNyDhddsO2SHeft/PI6tjthRClG2NA9yLNaaK5zLgOI=)
2: ndpzPSk3H3xw28qda6myjkObuX0.asa (hash: 1DRwpJ/PoAaH3WDBi1DxoV7aRX9CY7XDRgR72GoOVOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cf:d5:79:da:5e:05:ba:02:7a:42:67:f6:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=decaf44c7615bd6114257fc364ff5167a10c633b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:a3:de:ec:52:cf:7c:8f:c7:ce:98:ce:08:
f4:f1:d6:f3:b1:f5:ea:c8:34:e8:29:77:80:79:58:
f6:27:34:94:9a:00:b8:c5:ab:b3:73:37:0d:ea:70:
21:66:00:36:19:cb:9f:74:a3:68:68:dc:d7:27:0b:
37:71:e9:2c:02:d4:d4:37:5b:69:c4:74:0d:3e:9f:
7a:4b:59:5e:22:bc:27:71:3c:c9:5a:da:db:03:af:
7b:ea:80:28:dc:63:7b:b5:38:bc:9e:f6:ef:51:04:
29:2f:94:17:2f:09:59:58:b6:b5:9c:15:85:5e:08:
71:0c:7a:ea:d4:00:e4:0d:34:84:26:56:73:f0:ab:
c9:77:38:93:0a:86:40:8a:e7:2c:26:3f:d8:29:48:
cf:55:cc:b7:b2:1d:3c:57:2d:44:63:33:97:54:a8:
26:7a:e9:2c:07:79:29:79:0c:d9:b2:88:2d:42:d7:
33:5b:7c:1c:d6:f8:3f:48:93:5c:fc:5c:31:d7:07:
3e:83:90:62:93:94:3e:1a:bb:ea:d3:82:34:57:f8:
19:ff:2e:0a:94:fe:a9:93:16:aa:1a:bd:15:fe:f2:
66:4e:4b:38:e1:75:93:a2:8c:d3:4c:cb:de:da:ea:
11:34:16:dd:7f:43:99:9b:ff:f8:ad:2a:a2:3c:bc:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:F4:4C:76:15:BD:61:14:25:7F:C3:64:FF:51:67:A1:0C:63:3B
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:20:42:0d:7a:48:2a:8a:57:c7:a1:5f:2b:a6:57:00:ce:43:
e4:f6:90:ea:41:34:52:a1:ff:19:cc:aa:0e:cf:bc:e5:05:82:
36:10:58:65:b4:c1:c1:ce:38:fd:ba:7d:57:47:61:76:62:0c:
0d:b2:29:b0:d9:7d:d1:00:fc:61:36:be:f7:d0:6c:b4:22:54:
72:d1:0b:b9:48:88:9e:9b:8e:a1:b6:90:2d:8f:43:51:a4:2f:
fd:03:a5:5d:35:0b:bd:8b:74:cc:01:49:aa:dc:51:00:0c:28:
b5:29:4b:c1:eb:ec:db:f7:a2:0c:64:af:75:96:7e:a1:6f:d4:
9c:09:6f:c3:3c:0f:b6:d1:c5:6d:47:76:0c:7c:96:d8:8e:50:
0b:ee:90:0c:6d:c2:88:9d:f9:0a:74:8f:2e:b1:8f:64:68:50:
b2:56:0e:e8:37:10:b4:58:5d:ab:35:c5:e9:a7:bf:7f:04:52:
1a:b7:6c:0b:90:cc:6c:d6:5d:08:d3:02:d5:ca:59:db:86:aa:
c3:51:ed:d6:51:66:91:64:2e:d4:d5:63:7d:68:c2:6b:cd:35:
da:4a:f6:7e:e5:ce:79:69:29:3b:ea:5b:78:97:98:18:1b:2e:
00:70:8b:ae:8a:7c:19:2c:cd:03:19:d3:e7:47:b7:06:5c:c7:
3e:ef:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:41 2026 by rpki-client