Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: PpWA0dGklR5z8lDsiJf9FixneN4y0aB6D8CuY7AyQgc=
Subject key identifier: 29:D3:71:EA:21:A1:6C:1A:0A:62:6D:A5:9A:BA:4A:F3:AF:AB:65:7D
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019D25BA642976AE4D82E737F13CBE02D9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0B14
Signing time: Wed 25 Mar 2026 16:01:05 +0000
Manifest this update: Wed 25 Mar 2026 16:01:05 +0000
Manifest next update: Thu 26 Mar 2026 16:01:05 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: imhuokSoKN7grVbINyYtQNEtUQG45Rj5ifn24jLGwFs=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:64:29:76:ae:4d:82:e7:37:f1:3c:be:02:d9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Mar 25 16:01:05 2026 GMT
Not After : Mar 26 16:01:05 2026 GMT
Subject: CN=29d371ea21a16c1a0a626da59aba4af3afab657d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:4a:01:e7:2c:e2:d7:3b:64:ae:d0:f9:4c:
e1:1f:9c:04:18:43:08:3b:06:fa:33:93:82:bb:04:
f6:67:21:c3:a3:f6:aa:cd:3c:83:4a:76:22:be:31:
8c:85:bd:9a:2a:a6:a9:a2:82:ba:37:d4:73:b6:08:
22:0d:bb:39:5f:9b:33:8f:7b:64:ac:d2:5b:95:4e:
7d:d5:a1:14:23:18:8a:89:b0:34:a3:53:f9:d2:6d:
5f:97:52:67:95:06:aa:81:c6:2e:a5:f2:b4:19:cf:
34:f4:41:ba:ea:68:d1:e9:72:d1:ca:78:d7:fa:c3:
fb:1a:e9:7e:f5:21:89:91:45:0e:a8:9d:f6:ed:5e:
ed:26:3a:78:c8:2a:45:cb:fc:dd:77:c6:01:9e:eb:
7e:b4:ae:50:2a:54:56:11:12:04:0f:1d:c2:71:5c:
02:ce:8e:50:53:24:28:3e:7d:c0:f5:a6:80:d0:64:
99:68:01:df:e9:0b:d5:35:a7:32:f6:1a:10:00:af:
10:4d:93:e2:21:7a:83:91:5f:00:11:72:f0:80:6f:
7c:80:22:ea:73:af:e4:39:71:3e:57:d8:bc:18:2e:
7e:59:3b:a2:f2:3b:d7:e6:94:a0:25:fb:a2:6e:a8:
39:97:ef:23:bf:e3:7a:4d:0d:be:48:d2:0e:42:8b:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:71:EA:21:A1:6C:1A:0A:62:6D:A5:9A:BA:4A:F3:AF:AB:65:7D
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:15:82:f0:da:30:c0:54:78:78:75:ea:17:5a:e9:64:9f:f4:
7c:63:a8:e7:80:87:cf:55:55:35:ad:dd:3e:cb:97:ff:70:17:
31:b8:50:ce:e3:c7:0d:e7:fe:fc:69:0d:f5:75:3c:44:3c:cf:
27:b1:81:ac:1a:a9:0e:b8:d1:f1:ab:29:09:c9:f5:aa:5c:e5:
64:a8:98:9f:0d:bd:92:25:00:41:dd:f2:59:29:f5:f6:71:26:
2c:6a:88:ba:f0:42:56:81:4c:dc:69:86:15:91:58:97:29:bb:
ae:cb:a5:9e:e1:b8:c7:9a:ac:9a:3a:43:0c:28:9b:bd:2c:34:
df:7d:31:d4:1b:a0:4b:fc:7e:2c:1d:33:49:ff:6a:ee:69:d0:
29:f6:33:8a:3d:db:d1:cb:28:ea:a2:e6:dd:15:0e:08:18:50:
d4:d4:55:63:85:42:8b:7a:22:2f:ec:2d:77:80:fb:02:51:28:
48:6f:74:ea:43:f7:bd:e8:35:0e:54:44:34:a7:6d:b8:35:44:
5d:1a:1d:ef:13:2b:04:b7:79:ef:7a:d4:59:be:59:61:c2:da:
aa:e6:c5:ae:3c:47:65:51:0a:b4:5f:65:c7:ae:55:7e:2a:2a:
7a:d4:99:ef:3d:24:c6:ac:0a:3f:40:f6:a4:a2:30:21:84:98:
93:8a:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:03 2026 by rpki-client