Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: GBlVKhxzHe787dLNQ+diw0EZAFNQ/lmSIteCn/8lNKs=
Subject key identifier: 81:55:8C:F1:23:BA:8B:BD:42:B0:AB:9D:D9:F4:6B:08:3B:8A:94:3A
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 01A0DFBC7722ECB0229ED6BEE58FC556395A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0D02
Signing time: Sat 26 Sep 2026 22:01:05 +0000
Manifest this update: Sat 26 Sep 2026 22:01:05 +0000
Manifest next update: Sun 27 Sep 2026 22:01:05 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: p/A1ufuB+adgGmOoL6SEiIlw7/j5JOOTHeeh3JVHyns=)
2: LaRldTJgB7M8pfC0fMXyfAvixcw.roa (hash: /y9TC7p8p9p0lqzw9JbDdg8spw7lr5rPbgILaE8TTT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:77:22:ec:b0:22:9e:d6:be:e5:8f:c5:56:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Sep 26 22:01:05 2026 GMT
Not After : Sep 27 22:01:05 2026 GMT
Subject: CN=81558cf123ba8bbd42b0ab9dd9f46b083b8a943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:a9:32:99:15:92:33:96:e5:8d:69:45:0c:
f5:e3:fe:b2:88:fc:4d:3f:6e:ec:71:19:71:14:62:
62:d5:8d:6c:2f:78:87:f3:66:c2:ef:cf:af:e3:35:
3e:7a:b6:7b:a4:09:cd:3e:e9:b9:d7:57:7b:62:b7:
70:98:8d:dd:04:c8:90:5c:4f:d4:c9:58:f7:50:12:
53:f7:93:b8:dc:76:f3:1f:9b:bd:ab:22:16:3d:cc:
cc:b0:ef:6c:e1:af:d8:23:b9:09:bd:3e:79:c1:9f:
c8:8d:4f:1f:17:81:a2:4c:4a:cb:58:5c:63:4d:26:
ed:46:01:53:cb:fc:40:3e:7b:62:d4:66:04:b7:21:
21:c3:d0:24:80:92:b4:a0:a8:09:05:67:dd:cd:ce:
80:93:6e:a2:41:62:ab:a7:49:11:49:73:6f:c7:e2:
b0:d3:c3:c8:d3:79:a5:a6:47:61:82:21:6c:a8:37:
8c:c2:83:25:4f:97:eb:28:2c:c8:71:f3:53:05:2a:
85:10:87:07:7f:fd:06:f2:79:6a:06:bd:15:cf:e6:
44:3e:ed:ad:ee:37:5a:b0:ec:a0:c3:e3:17:f6:07:
01:d1:8d:9f:e0:7e:67:5a:46:be:69:ae:41:31:46:
b6:5b:67:4a:3a:a7:42:33:28:34:79:27:31:a6:97:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:55:8C:F1:23:BA:8B:BD:42:B0:AB:9D:D9:F4:6B:08:3B:8A:94:3A
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fa:79:57:12:2a:c0:ec:8b:40:8e:61:ff:9a:c7:7c:b0:2e:
62:3d:13:d7:34:2a:33:58:a3:ab:8e:2e:8d:a6:e1:19:f6:90:
ba:8a:2c:7a:e8:36:80:d5:23:52:d1:0c:11:17:9c:e2:78:e7:
d5:82:f8:f7:82:50:d7:d7:1e:db:ce:64:73:35:70:a9:e7:72:
14:9b:ea:e4:91:ba:95:79:54:74:02:1d:ce:a1:06:20:1d:86:
58:dd:4f:16:6b:05:02:8e:63:8f:96:c7:e5:21:b8:39:e4:42:
ac:40:89:2c:0e:ee:0a:69:8e:aa:8d:c0:af:26:2c:02:66:72:
2c:55:14:f8:e3:60:9b:b9:4d:2c:f3:69:44:07:fc:1e:ff:9e:
97:1d:ea:05:e9:ff:2c:6c:44:04:8e:cd:2d:11:bc:10:d9:30:
4a:d2:a0:56:43:6e:3c:2c:cb:dc:3f:65:86:96:23:15:7c:ba:
a6:f9:2c:de:51:76:4b:9d:b8:e5:52:87:d4:29:6c:59:6a:f6:
2b:ba:1d:bb:34:97:1e:91:73:11:5d:e9:c9:d0:e8:f4:24:95:
ce:ca:e8:b5:ad:20:72:40:b0:85:ba:0b:3b:b8:a0:66:37:57:
b0:56:ef:18:a2:82:14:a8:3b:14:4a:0c:1e:4d:05:fe:21:b4:
55:9e:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:52:02 2026 by rpki-client