Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier: zg01NER7M7XH8jWbNVTZtSErOhyeipcek8sQscYRO8k=
Subject key identifier: 46:CD:45:3A:EB:C0:C5:38:92:42:7D:3C:B3:BB:9D:EF:6F:4A:AE:BE
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 01A0D4949C208604AA51AE7F3100F5C6A464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number: 0279
Signing time: Thu 24 Sep 2026 18:01:44 +0000
Manifest this update: Thu 24 Sep 2026 18:01:44 +0000
Manifest next update: Fri 25 Sep 2026 18:01:44 +0000
Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: 6vAmksGRiimrgt+0U7eOsYaqgTTVtBudk6ZcvgfQe9w=)
2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:9c:20:86:04:aa:51:ae:7f:31:00:f5:c6:a4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Sep 24 18:01:44 2026 GMT
Not After : Sep 25 18:01:44 2026 GMT
Subject: CN=46cd453aebc0c53892427d3cb3bb9def6f4aaebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:a1:d8:54:68:20:fa:2d:7a:8d:29:6a:d0:
22:34:04:bc:b4:f9:9b:ec:cd:9b:f7:e8:6a:4c:0d:
5f:d0:d1:b0:d8:e7:01:18:c4:b4:61:2c:fc:3c:c0:
bd:60:da:fd:c9:77:61:61:eb:cb:86:13:ff:9c:58:
2c:22:09:21:de:b1:ec:3f:41:e0:b4:01:ce:ca:6c:
67:c5:35:11:a5:6b:e8:22:34:77:cd:10:c5:34:0f:
0a:a3:01:6f:34:09:f4:f1:98:7d:c5:d5:a9:51:09:
ba:38:9f:f0:ac:7a:24:05:db:03:15:c4:cc:89:f9:
75:3e:59:fd:e1:0a:8f:11:20:26:e5:22:9c:55:c4:
3b:8a:b7:75:61:75:b2:64:83:c7:88:ae:83:b8:ea:
55:d5:4b:9d:ea:dd:d6:61:09:2a:bc:b5:d4:1e:53:
2e:fe:4f:7e:c5:bc:79:7d:d1:5b:35:8a:61:10:b5:
22:84:b8:4a:05:64:f0:6a:03:cc:a8:f2:70:98:62:
1f:b7:95:53:85:c8:12:85:6e:bf:e7:a4:d0:a9:f6:
e4:1e:cd:f9:58:16:2f:ff:71:62:22:c9:56:07:82:
3d:bd:ff:37:4e:af:4b:de:3b:96:b7:6f:3d:61:04:
36:18:41:98:7e:44:24:ad:e0:d0:69:af:a5:cc:83:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:45:3A:EB:C0:C5:38:92:42:7D:3C:B3:BB:9D:EF:6F:4A:AE:BE
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:46:9e:8d:f2:6a:bc:ea:31:85:4b:db:4c:0f:13:73:f1:80:
b1:6d:df:f6:40:09:88:3b:1f:1e:64:ac:ae:81:11:e4:f9:04:
d4:16:a1:77:fa:e5:96:c0:4a:c8:af:d2:05:83:d3:3c:bc:be:
f9:74:7b:85:41:43:73:67:a1:70:38:3e:56:5d:d6:a0:f4:25:
f5:dd:7d:7e:55:0a:28:85:bd:50:5a:46:04:ae:1c:6c:64:ba:
08:71:c5:06:ec:3b:8b:d7:fe:2b:43:ab:a1:f0:dd:3b:dd:a1:
eb:7e:9c:d1:a4:57:42:ee:aa:51:be:b7:22:7c:f6:1c:49:55:
81:aa:95:ae:ec:74:27:b0:8d:b8:d3:89:91:80:0a:31:d7:5e:
49:c1:d3:0c:02:dd:d3:11:c2:3e:15:1e:27:a8:77:13:f2:8d:
46:b5:41:20:07:59:dc:60:04:15:be:63:4b:06:59:c0:d6:8d:
1d:7e:c7:a1:15:48:c5:6c:86:fb:d5:35:c2:0a:1e:af:79:f5:
18:7a:a4:24:10:17:bb:d2:82:c3:a4:bc:c6:5d:e0:45:f7:c9:
7b:d5:df:3e:ff:14:73:a8:fb:2c:64:2d:8c:96:7a:24:d3:c4:
ac:48:47:7b:3b:e6:2a:9f:82:48:98:d7:ac:88:5a:85:8f:72:
92:ba:e7:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlJwghgSqUa5/MQD1xqRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTBjMGQ3MzA4MWQ3NTI5MTZiZTNiNmU2YzBhODdjMzBm
N2U0MTQwHhcNMjYwOTI0MTgwMTQ0WhcNMjYwOTI1MTgwMTQ0WjAzMTEwLwYDVQQD
Eyg0NmNkNDUzYWViYzBjNTM4OTI0MjdkM2NiM2JiOWRlZjZmNGFhZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4beh2FRoIPoteo0patAiNAS8tPmb
7M2b9+hqTA1f0NGw2OcBGMS0YSz8PMC9YNr9yXdhYevLhhP/nFgsIgkh3rHsP0Hg
tAHOymxnxTURpWvoIjR3zRDFNA8KowFvNAn08Zh9xdWpUQm6OJ/wrHokBdsDFcTM
ifl1Pln94QqPESAm5SKcVcQ7ird1YXWyZIPHiK6DuOpV1Uud6t3WYQkqvLXUHlMu
/k9+xbx5fdFbNYphELUihLhKBWTwagPMqPJwmGIft5VThcgShW6/56TQqfbkHs35
WBYv/3FiIslWB4I9vf83Tq9L3juWt289YQQ2GEGYfkQkreDQaa+lzIMgKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbNRTrrwMU4kkJ9PLO7ne9vSq6+MB8GA1UdIwQY
MBaAFAzgwNcwgddSkWvjtubAqHww9+QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTkt
ZmViODQyN2NmZTIxLzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTktZmViODQyN2NmZTIx
LzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkaejfJq
vOoxhUvbTA8Tc/GAsW3f9kAJiDsfHmSsroER5PkE1Bahd/rllsBKyK/SBYPTPLy+
+XR7hUFDc2ehcDg+Vl3WoPQl9d19flUKKIW9UFpGBK4cbGS6CHHFBuw7i9f+K0Or
ofDdO92h636c0aRXQu6qUb63Inz2HElVgaqVrux0J7CNuNOJkYAKMddeScHTDALd
0xHCPhUeJ6h3E/KNRrVBIAdZ3GAEFb5jSwZZwNaNHX7HoRVIxWyG+9U1wgoer3n1
GHqkJBAXu9KCw6S8xl3gRffJe9XfPv8Uc6j7LGQtjJZ6JNPErEhHezvmKp+CSJjX
rIhahY9ykrrnbg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:35:46 2026 by rpki-client