Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: jMXdypNbzcKvQWr56YjX4O1Nq7Ak/xVJpahrHBTSepg=
Subject key identifier: A7:26:E0:36:D9:88:F7:A9:C9:A5:CD:6D:F6:C1:FB:21:5A:93:37:02
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 019D2884829AEF5874044AB18C084A265077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 06F3
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: 7k5tsdidwTqGJpfG6BN/Q0JxgMh7WO1kLRlau7VDP3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:82:9a:ef:58:74:04:4a:b1:8c:08:4a:26:50:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=a726e036d988f7a9c9a5cd6df6c1fb215a933702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:ea:9d:41:ec:40:b8:43:28:0e:a6:c4:b2:
a5:ff:ab:6d:5b:11:86:4d:71:4f:8f:ef:92:b1:b8:
c3:4c:de:f7:d4:a8:46:39:f2:20:99:9b:41:b3:2c:
a0:36:00:e6:df:b3:f1:4f:28:39:e8:a3:ba:f9:a6:
39:41:dc:0b:70:2b:63:e1:42:14:d1:f8:77:42:22:
15:7c:e5:aa:d8:6b:0f:7d:02:dd:69:28:e3:e2:c3:
01:b2:79:17:a4:97:89:3a:0f:9f:ed:a3:6f:50:a1:
e3:2a:32:d6:83:b6:14:69:83:e3:6f:da:bf:45:83:
da:b7:96:1f:cb:21:cc:51:8a:e0:45:20:7d:12:bc:
f9:e8:ca:5f:27:8c:e5:2b:2c:0c:1e:a4:96:8d:ae:
86:41:c6:04:1d:eb:70:8c:ab:a9:d3:34:43:2d:d5:
20:c8:36:d0:80:a8:a8:5a:08:19:d2:4b:e5:64:c6:
f6:48:50:7e:3f:ac:d7:a4:ac:89:91:24:27:c7:40:
bd:2e:87:82:65:6e:89:a0:69:9e:8c:32:ea:2e:66:
40:66:89:8c:6b:a7:37:ae:55:3d:7a:41:b6:e2:22:
53:ac:9c:82:b8:a7:32:88:89:0a:f2:23:0c:64:e6:
19:83:dd:8d:a7:18:b3:bc:56:f1:8f:f6:6b:3b:e1:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:26:E0:36:D9:88:F7:A9:C9:A5:CD:6D:F6:C1:FB:21:5A:93:37:02
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:97:71:f6:5e:71:aa:65:b4:e3:ab:85:9f:5e:f0:37:11:35:
b8:f8:8d:74:d3:e4:06:91:27:a4:f4:94:1a:d3:4e:02:52:99:
fc:8a:4e:dc:cc:e5:1b:e9:77:c2:7a:b4:aa:04:6d:bd:a2:63:
4f:2c:e3:e5:39:a1:2f:af:00:6f:cb:ea:b4:fc:60:4a:8f:23:
3f:bf:54:73:37:f5:9a:20:7e:70:27:16:28:02:45:05:af:e6:
34:9f:77:37:b1:f3:dd:03:99:b7:01:2f:a5:93:08:de:74:17:
c4:cf:d5:ed:ed:5b:a6:77:0c:6d:44:06:ed:13:f3:b2:00:f3:
81:b4:b9:de:0f:b9:da:f9:30:a0:13:0d:29:05:56:4f:19:8f:
56:0f:1e:a4:0f:c4:58:05:5e:a5:68:bc:2e:a7:4e:ad:22:9d:
2b:a7:db:e6:20:5f:81:df:4c:4b:64:af:6c:29:74:50:0f:81:
fd:a2:60:86:8b:0f:15:1c:bb:02:79:7a:21:80:d3:b6:5c:d3:
75:46:82:68:47:e0:99:c6:60:2a:c2:c2:b0:9d:43:92:c7:96:
f3:e5:d5:fa:84:cc:d0:42:1d:a7:91:30:db:af:ea:d0:b5:d3:
ea:99:7d:2e:72:e6:7b:8e:3f:e2:54:e2:a1:5b:c9:b0:d6:12:
84:4a:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:00 2026 by rpki-client