Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: lNpD7W6hcsgUHsFeEhFsCfEKPrLkHFOHufb3uNLbHig=
Subject key identifier: 71:C7:65:88:EA:E9:6A:B9:60:FD:B8:E2:0D:7D:53:A2:7E:F4:5E:AE
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 01A13A49BD92F2DD91E3B21A231F262826DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 0328
Signing time: Wed 14 Oct 2026 12:01:13 +0000
Manifest this update: Wed 14 Oct 2026 12:01:13 +0000
Manifest next update: Thu 15 Oct 2026 12:01:13 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: 28pmBAxvh5SyxZSwFDFFPlbAPJM8xW0O+xsTm+9VCrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:49:bd:92:f2:dd:91:e3:b2:1a:23:1f:26:28:26:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Oct 14 12:01:13 2026 GMT
Not After : Oct 15 12:01:13 2026 GMT
Subject: CN=71c76588eae96ab960fdb8e20d7d53a27ef45eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:fb:09:85:2a:64:e9:af:d6:67:b3:a8:95:
09:b6:8d:16:57:91:e4:48:6c:24:e1:34:fa:48:93:
75:9a:d5:99:b2:2a:f5:f7:57:a8:d8:4a:87:f3:9d:
d0:f1:69:f8:84:7e:48:19:57:98:47:68:ee:2a:31:
b3:f2:91:3d:4c:dd:ce:0f:df:0e:02:2a:84:ac:6c:
bf:47:9b:9e:1e:f1:21:81:9f:7e:56:a9:50:2a:96:
2a:1d:63:e4:b4:56:e5:a6:b0:34:55:8f:7c:c9:46:
02:22:7a:c9:71:29:42:68:bf:75:2a:7f:e5:50:18:
9a:d6:c7:02:86:3f:f7:16:d3:48:2e:e2:2c:23:12:
e4:cf:cf:eb:b9:91:64:b3:b5:02:75:37:c7:6f:0e:
7b:e1:fd:e9:1f:02:f4:28:f9:74:c6:81:d3:0e:ec:
5d:22:63:d3:3a:4e:29:94:c0:74:4e:fd:f8:2a:0e:
ce:f7:85:16:aa:11:15:bd:66:3e:64:5f:ef:0f:73:
34:36:b9:87:63:61:93:05:06:a3:c7:ff:65:81:21:
b4:d7:5d:d8:e8:85:82:56:c9:5d:2f:28:59:b6:c8:
5a:81:b8:63:52:1a:02:96:39:36:9d:b6:b7:bb:b3:
70:77:72:f3:3c:8e:a7:17:d6:be:e6:94:b6:97:a5:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:65:88:EA:E9:6A:B9:60:FD:B8:E2:0D:7D:53:A2:7E:F4:5E:AE
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:86:6e:df:9f:f0:71:54:87:80:2a:3e:3a:b3:ab:2f:41:e4:
1c:55:42:83:e4:54:57:a7:92:ea:c1:05:ca:98:8d:52:1c:72:
0d:b3:30:3d:b5:75:5c:b7:94:66:71:6a:3c:a5:bf:f0:ab:7d:
a2:56:70:af:5a:cc:9b:08:de:19:ad:96:71:72:97:3c:d3:fc:
1e:96:b5:c3:c1:64:36:01:7b:06:ad:b2:86:12:1f:d5:94:c7:
e0:34:da:f9:f3:8a:82:42:81:f9:c3:22:c6:39:ea:d9:5c:70:
b0:cf:0d:e5:32:11:a8:18:a9:7b:f2:37:d1:da:67:de:63:0d:
11:50:0c:ec:c5:4c:7d:27:33:25:a0:39:d3:ea:74:f8:53:dd:
e3:7b:42:85:7a:00:ad:a3:d4:74:da:9e:b8:34:46:33:5b:17:
cb:dd:7a:d5:bb:e3:b7:b9:a3:30:71:8a:a1:78:60:e8:b8:8c:
a3:97:20:e0:71:53:a7:29:cd:08:e8:ff:d6:5d:6c:97:cf:17:
0b:d9:c0:00:ba:03:21:7f:22:7c:cb:b1:2c:fd:f7:04:1d:96:
49:79:75:16:86:93:eb:d5:90:4f:1f:cf:55:fd:95:31:67:12:
40:06:b3:fb:63:55:b2:d9:df:7c:dd:32:79:4b:4a:41:a2:a1:
1b:06:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:15:36 2026 by rpki-client