Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: 1wGwClmuec4mJW+491mn81CaInz8xsWnoIxLX0RI1d0=
Subject key identifier: B5:A6:D2:D0:3D:DA:C2:BE:F9:76:3A:90:30:61:43:35:44:36:56:A1
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 019D27E0650D6211797769E8703A384C1DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 17D8
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: 4hFvzV4WrmiLIBpFJw9jPUjsv-0.roa (hash: SOzlsBSFn/lFTeVqU71MsP/XA8RfCBYPDkl2dtb8tLE=)
2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: m0g9z+PsWL+qopDr+GOOlihxbEc7nyH7CUoYwOx3RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:65:0d:62:11:79:77:69:e8:70:3a:38:4c:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=b5a6d2d03ddac2bef9763a9030614335443656a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:fc:cb:e4:26:ea:fa:4b:6e:f2:32:15:79:
a4:fb:0e:17:17:fd:01:c1:42:53:d2:c8:d0:7b:ba:
35:71:ac:e8:c8:da:e2:db:64:9b:4a:8c:9b:aa:06:
75:db:52:a1:9c:31:03:f0:f6:41:23:44:2b:b8:1f:
4d:f9:0b:4a:8b:41:03:85:f8:ea:1f:b2:3a:98:57:
dc:b0:6d:c4:2c:bc:0a:45:25:6d:96:21:1f:03:31:
75:2f:9d:07:96:68:d2:41:a7:a5:6d:37:69:7c:19:
ab:70:04:9d:b2:28:43:01:3f:e4:d2:2a:a1:b9:25:
9a:f4:20:35:fa:50:24:59:7f:be:e6:2f:d8:5e:bf:
a0:bc:4c:6d:db:7e:7d:9e:5f:91:4d:c3:eb:93:bc:
33:2a:79:b8:a9:4f:35:10:f4:65:15:ad:8c:b2:8d:
b2:2a:0a:40:cb:a3:d5:07:2a:1f:44:28:97:e4:e0:
12:3b:6d:8c:1b:78:6a:2d:81:53:25:eb:a2:8d:f7:
73:49:e1:3d:e8:54:4b:1d:f1:3d:1d:1d:19:29:b7:
ec:ab:e4:40:2a:3f:38:da:41:cd:21:a2:4c:ac:8f:
23:56:9c:75:cf:5f:06:73:fd:61:23:7d:e2:35:d4:
42:1a:7b:35:ef:b9:b8:32:54:70:57:f0:03:65:b2:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A6:D2:D0:3D:DA:C2:BE:F9:76:3A:90:30:61:43:35:44:36:56:A1
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2c:8c:c2:df:21:1a:cd:9e:74:ba:10:b5:a7:c5:57:fc:d2:
61:23:84:d8:2c:94:57:ca:3d:ad:e1:5b:8f:21:e4:76:73:e6:
80:87:41:b8:55:71:b5:be:ae:ce:d2:64:3f:7f:b9:e4:46:0a:
85:5a:ec:58:0e:ba:a9:c3:80:e8:af:a0:66:42:9a:f3:fc:d3:
f1:74:cd:dc:66:ee:d4:dc:56:e8:67:bb:8d:17:65:07:4d:cb:
ed:c9:1d:6f:2b:f5:d9:f5:e8:1f:17:b9:2a:f0:70:bb:91:13:
63:e6:b7:7c:f6:cf:bf:4b:93:42:b8:6e:9b:5b:eb:14:24:43:
0a:3c:f0:ad:29:a7:44:50:5c:68:7a:e9:01:91:f6:d5:c3:48:
c2:e9:d3:72:54:fd:7a:64:ed:83:cd:85:04:9f:77:c3:6f:3b:
c4:3b:ce:f1:07:99:ca:cf:dc:b4:1b:46:42:4d:1d:6c:68:c8:
08:a0:dc:0c:80:1b:0c:1e:2f:7f:ef:98:90:89:b0:b5:20:2a:
a9:3b:c4:03:cf:6e:3b:48:49:3a:81:e6:54:f5:4d:ca:3c:a9:
63:18:19:b6:ae:29:4b:0e:36:70:92:ef:30:fc:e6:61:de:59:
3e:25:8f:ac:99:5a:8e:47:a1:27:7a:8e:94:5b:13:6c:6b:5f:
97:87:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:37 2026 by rpki-client