Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
File: DoMf1wxr03oqddeg6sAxyS2o4YU.mft (raw, json)
Hash identifier: 7EX+NvwGMuc64c2vNUBxn27A43o/YnZTz/k1lQirGIo=
Subject key identifier: 3F:1B:6E:43:B0:28:18:17:02:E8:E3:7F:68:38:05:1F:F9:37:6B:8D
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 019F9090BC6A24D8AB59CA70FD51118D4C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
Manifest number: 164D
Signing time: Thu 23 Jul 2026 20:00:31 +0000
Manifest this update: Thu 23 Jul 2026 20:00:31 +0000
Manifest next update: Fri 24 Jul 2026 20:00:31 +0000
Files and hashes: 1: 1qvHXNbvTyThmaLil8qNJj6P15Y.asa (hash: PViCwfF7bHdu8TFOEUKNZ0D0E5pb3a3qdO9OBmQttbY=)
2: DoMf1wxr03oqddeg6sAxyS2o4YU.crl (hash: 0p03LShe7vdo+Vq9PGnizAdQ97RLwBOHmFhUXELMrxU=)
3: yAVvKqN3jAD0Ax1X4G3gA8ptBVQ.roa (hash: q7e8wqbSpEQ0vDs9f5Rj5raLp3P7hjyscG/ABKTRfMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:bc:6a:24:d8:ab:59:ca:70:fd:51:11:8d:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Jul 23 20:00:31 2026 GMT
Not After : Jul 24 20:00:31 2026 GMT
Subject: CN=3f1b6e43b028181702e8e37f6838051ff9376b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:3e:68:23:78:7b:1c:41:72:a5:a1:83:84:
b8:47:e7:b5:53:e4:17:01:d9:89:71:7a:a1:11:e3:
c8:01:5d:8e:e8:f5:39:6e:b4:df:ba:46:ed:47:ad:
4b:03:9b:a2:54:3a:0e:0a:cf:16:7e:fa:15:d3:0b:
ee:cd:96:93:2c:ba:4a:92:5b:04:c2:5e:e1:71:ac:
39:6a:a0:06:12:a0:44:bc:3f:9d:ed:71:46:b1:dc:
12:6b:40:51:b5:27:6b:99:24:1b:37:3b:bc:22:1e:
33:be:74:42:87:9e:01:a2:71:dd:8b:ed:6d:49:42:
f3:ec:6f:39:f1:04:c1:db:cb:03:88:2d:81:b4:a8:
7a:00:10:6e:4c:80:65:be:2c:6c:57:d1:f8:3f:43:
da:85:f9:4a:a0:d4:74:7f:fa:a3:49:e3:78:8b:0b:
2b:43:fc:7c:9a:8e:36:ea:f7:dd:67:45:2b:32:d7:
82:98:5b:9b:d1:4a:ca:12:32:5b:6c:52:cd:c9:48:
9a:0e:15:cb:bb:90:b9:a1:58:c0:1d:34:3a:cf:35:
82:f0:f0:82:cf:af:3a:8f:b2:dd:1f:c5:f3:00:cc:
67:e8:88:89:86:0e:4b:f3:d6:63:2a:2d:ff:4f:f7:
c9:91:df:c8:1f:96:4f:db:3d:d3:28:98:9b:fe:a8:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:6E:43:B0:28:18:17:02:E8:E3:7F:68:38:05:1F:F9:37:6B:8D
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:45:81:a4:9f:2d:9b:ed:aa:e2:6c:92:06:e0:b9:4e:d6:
48:d7:23:a0:d9:3a:09:08:8a:71:6f:17:35:e9:59:69:8a:ab:
cc:fc:8b:55:b0:5b:7d:09:5d:c1:74:6a:35:87:af:b5:06:19:
c3:79:ab:52:d8:c0:39:2c:b7:30:ec:99:bb:26:6e:cd:e2:07:
8b:98:28:b8:80:0e:1c:39:5e:5a:88:a7:bb:54:54:29:d3:9b:
34:31:e8:32:7d:1b:fd:ff:f9:71:2d:f7:2a:f8:bf:67:0f:49:
7f:ad:1b:f6:ba:69:9c:83:42:55:c7:26:55:06:53:ba:ac:3b:
a7:a4:c7:e2:5f:55:7d:75:22:9a:2b:94:26:ac:64:c8:c5:a0:
a0:07:b9:c7:a3:1a:5e:d8:57:7c:64:7d:e6:7f:f7:92:6d:e7:
41:1d:92:ad:03:c1:75:68:46:4c:1a:38:b5:a3:3b:05:75:f2:
eb:12:35:27:c3:33:21:b7:7d:98:bd:d8:94:58:82:55:58:85:
4e:8e:c4:33:dc:7b:5f:36:3c:b7:aa:4e:1c:0a:73:16:0d:68:
f8:dd:c2:44:45:ca:8b:49:f3:93:35:aa:0f:de:c0:cd:02:03:
39:ec:e8:11:dd:fc:3e:fd:11:bc:0b:41:59:fd:0a:68:15:3a:
94:f9:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:39 2026 by rpki-client