Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: DsbUab409rzJG+csdp4fbnZM5j5xTQZDEmZrHTg4bgY=
Subject key identifier: 8B:3D:E7:C2:15:23:4D:03:86:9A:15:5C:A4:04:47:F9:64:51:89:C6
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019D2583C2CA848ABC3A8E9500DA940834AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 010B
Signing time: Wed 25 Mar 2026 15:01:25 +0000
Manifest this update: Wed 25 Mar 2026 15:01:25 +0000
Manifest next update: Thu 26 Mar 2026 15:01:25 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: lIpE8qFyag6l4i5K5fY8U6JKFMdWOHh3mlc8n3e3XcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c2:ca:84:8a:bc:3a:8e:95:00:da:94:08:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Mar 25 15:01:25 2026 GMT
Not After : Mar 26 15:01:25 2026 GMT
Subject: CN=8b3de7c215234d03869a155ca40447f9645189c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:99:74:73:5c:8a:ff:24:5d:42:55:10:24:
0f:4f:cc:55:b2:a1:fa:19:dd:8d:d0:26:e6:b3:19:
73:f5:d0:53:d1:7c:62:da:0e:e9:8f:19:fb:ce:b3:
19:24:70:59:92:f5:66:d2:d1:3e:a6:20:e7:26:ad:
1d:89:cf:cb:62:8b:d7:94:76:86:6e:b0:fd:d2:62:
3b:a6:be:c7:f2:90:dd:f7:9d:d2:d5:7b:0e:c6:25:
a5:12:45:10:59:0e:eb:ca:74:b0:84:60:4a:89:73:
5b:d5:28:7a:32:2a:30:1c:b2:5f:a0:fe:79:b4:f1:
aa:ec:be:e1:76:c0:5e:14:09:ad:a7:10:c3:4f:78:
6f:71:ba:36:43:f4:84:1a:c2:e7:bd:ae:dc:5a:8d:
6a:c0:89:16:fb:9b:e9:98:3c:68:ef:39:42:e5:65:
9e:df:a1:86:27:55:d2:aa:eb:60:ef:52:7e:d9:c5:
32:c2:bf:a2:60:d4:bf:28:96:de:1e:7e:82:1d:e5:
7a:dc:b7:bd:ab:ed:42:82:9e:4b:8e:85:2a:8f:16:
5f:b4:e0:e4:77:69:05:ae:39:11:bd:f4:87:17:15:
c2:1d:d8:62:04:06:23:29:a4:0f:c8:14:d0:9f:c8:
be:2b:1d:c7:7b:7c:43:c4:7f:f7:42:3e:39:ff:a5:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:E7:C2:15:23:4D:03:86:9A:15:5C:A4:04:47:F9:64:51:89:C6
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c3:8c:b2:c6:f7:22:c7:95:eb:f6:e9:cb:c9:a8:03:99:c3:
69:a6:73:1d:7a:1b:70:b2:55:e6:ef:2d:8a:8a:c3:e7:7d:2d:
d3:03:cd:0f:70:f0:87:87:ab:e2:c6:87:a1:8c:24:c9:83:f5:
d4:27:84:2d:39:05:fd:b7:70:2b:f3:b3:90:9f:ac:66:f7:89:
c6:fe:ab:e0:ef:c6:06:7e:ec:28:54:9b:74:28:27:75:df:df:
e7:2c:4b:52:71:de:00:be:d8:d7:af:df:a4:ef:f6:07:95:26:
75:32:d0:c9:33:45:a1:c2:05:c5:b0:84:29:c0:d1:5f:59:fe:
f0:fa:72:27:3b:93:4c:59:a4:bc:68:a5:91:5c:85:1f:3a:6e:
77:7e:77:3b:04:d2:b4:5b:86:d1:ee:4f:2e:03:0c:83:5f:fe:
a9:d3:dc:04:a5:7c:a6:b2:a4:3f:53:a8:12:01:04:dc:6d:cb:
3f:d7:0c:fe:91:39:d7:a6:a0:6d:e3:54:ef:9e:86:97:1c:44:
3a:9c:01:49:a6:20:2d:63:92:d1:af:f1:50:bb:fc:e2:5f:f4:
a2:cd:dc:06:45:be:c7:a2:31:ed:af:f6:b0:d9:52:54:6d:4a:
e7:c7:2b:38:e0:b2:a4:d6:c3:9b:36:5b:e4:1f:74:7e:14:1c:
2e:75:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:11 2026 by rpki-client