Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: fknMJv9B9+s+i8MSKeSB72d/MR6YMkni9YNlULU6Qrg=
Subject key identifier: 6F:5E:F8:6F:F0:38:38:61:5F:3F:77:4E:B2:6D:3D:28:2D:FF:E3:5C
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019E1CEBFDA89CDAF12F827E74DF7B705975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0B94
Signing time: Tue 12 May 2026 16:01:28 +0000
Manifest this update: Tue 12 May 2026 16:01:28 +0000
Manifest next update: Wed 13 May 2026 16:01:28 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: Ehh9siEt5TP3k/zaCOvhlMwtWRYPNH1FXQw0gIxX5v8=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:fd:a8:9c:da:f1:2f:82:7e:74:df:7b:70:59:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: May 12 16:01:28 2026 GMT
Not After : May 13 16:01:28 2026 GMT
Subject: CN=6f5ef86ff03838615f3f774eb26d3d282dffe35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:ad:99:67:95:22:e2:8c:39:ca:fb:f2:d1:
3e:ad:44:53:e4:5e:eb:45:fc:97:64:66:f2:1e:7d:
6f:43:d4:c7:7c:53:76:fd:88:65:8a:ab:91:6f:ac:
1b:08:30:d0:de:96:6d:9e:ee:00:5d:b7:45:75:3d:
84:63:02:40:65:bd:2e:b5:31:b1:4e:34:44:3c:97:
c4:12:fb:ae:47:c1:d6:50:71:19:5c:75:7c:29:68:
19:6e:c3:26:be:67:a5:6c:7e:e2:27:d3:48:db:72:
1e:eb:50:7f:c8:a9:a9:1c:3d:66:61:71:1c:db:bd:
75:90:01:28:40:69:60:38:ce:e4:08:27:1c:75:0d:
2b:27:26:c0:8e:37:5c:c6:5f:c3:ab:c7:36:48:c7:
6f:15:f4:25:66:a2:04:09:6f:34:79:43:26:75:42:
c7:b1:9e:1f:4a:e9:dd:8c:3f:3a:ae:d9:ba:60:4d:
f3:60:3b:fb:55:97:57:8e:ea:b1:1c:57:b8:d5:e4:
70:00:16:a2:b3:a0:a1:fb:91:50:f3:97:5f:2d:96:
4f:9e:14:20:dd:33:28:7f:01:b0:8e:07:c6:d1:9b:
fd:0f:a9:64:c1:22:96:90:39:cb:37:00:13:b9:a5:
0d:7a:ad:5a:08:35:a3:7f:1a:1a:a6:56:f9:96:d7:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:F8:6F:F0:38:38:61:5F:3F:77:4E:B2:6D:3D:28:2D:FF:E3:5C
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:ed:99:f0:80:45:66:b1:dc:1d:c5:b6:e6:34:24:ed:ef:
6e:08:7e:b1:20:63:e6:0c:ca:69:7e:32:63:71:68:94:a7:e4:
b3:f1:16:ce:d9:a9:9e:b1:61:a2:a1:1e:13:b9:d3:00:67:71:
0c:26:98:cb:d3:29:4c:ce:c7:d3:26:6c:d4:05:73:6c:62:81:
36:ad:ea:ae:84:0e:8e:cf:1a:21:01:4a:fc:bf:d9:7d:b5:4e:
3c:c0:8d:86:69:e9:ca:d4:76:55:d2:0c:e3:1d:c4:15:ef:fa:
92:78:76:ca:65:18:38:e9:cf:38:0e:3d:94:2e:8c:32:df:47:
7e:18:31:7f:38:09:0e:89:ef:bb:5d:72:24:2b:cd:6d:d3:b9:
27:92:64:65:65:7f:c7:74:4a:f9:b2:f7:9c:2a:06:92:c0:6e:
6a:cc:86:7b:9b:3f:cf:23:77:c1:8b:00:99:5e:8a:7d:6b:71:
51:15:ed:a1:6d:75:aa:13:1f:65:d1:dd:0c:52:ae:27:b7:d3:
70:04:bc:b1:a0:d5:bd:52:ea:86:d3:d5:8f:7f:88:7b:0f:8c:
25:4d:cd:0c:48:b6:d9:bb:41:96:49:ce:bf:37:cb:eb:8e:00:
54:d4:53:08:82:b1:8f:ea:81:22:22:8a:f3:d3:2c:59:15:25:
4b:ff:4e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6/2onNrxL4J+dN97cFl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4
NzJiMDUwHhcNMjYwNTEyMTYwMTI4WhcNMjYwNTEzMTYwMTI4WjAzMTEwLwYDVQQD
Eyg2ZjVlZjg2ZmYwMzgzODYxNWYzZjc3NGViMjZkM2QyODJkZmZlMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloatmWeVIuKMOcr78tE+rURT5F7r
RfyXZGbyHn1vQ9THfFN2/YhliquRb6wbCDDQ3pZtnu4AXbdFdT2EYwJAZb0utTGx
TjREPJfEEvuuR8HWUHEZXHV8KWgZbsMmvmelbH7iJ9NI23Ie61B/yKmpHD1mYXEc
2711kAEoQGlgOM7kCCccdQ0rJybAjjdcxl/Dq8c2SMdvFfQlZqIECW80eUMmdULH
sZ4fSundjD86rtm6YE3zYDv7VZdXjuqxHFe41eRwABais6Ch+5FQ85dfLZZPnhQg
3TMofwGwjgfG0Zv9D6lkwSKWkDnLNwATuaUNeq1aCDWjfxoaplb5ltca1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9e+G/wODhhXz93TrJtPSgt/+NcMB8GA1UdIwQY
MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et
YmE0ZmJkOGQ1ZDhlLzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl
LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKftmfCA
RWax3B3FtuY0JO3vbgh+sSBj5gzKaX4yY3FolKfks/EWztmpnrFhoqEeE7nTAGdx
DCaYy9MpTM7H0yZs1AVzbGKBNq3qroQOjs8aIQFK/L/ZfbVOPMCNhmnpytR2VdIM
4x3EFe/6knh2ymUYOOnPOA49lC6MMt9HfhgxfzgJDonvu11yJCvNbdO5J5JkZWV/
x3RK+bL3nCoGksBuasyGe5s/zyN3wYsAmV6KfWtxURXtoW11qhMfZdHdDFKuJ7fT
cAS8saDVvVLqhtPVj3+Iew+MJU3NDEi22btBlknOvzfL644AVNRTCIKxj+qBIiKK
89MsWRUlS/9OhA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:23:20 2026 by rpki-client