Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: 03vXoX0YskhICvRBIX7xmLhRChJRldJwPRQOVWNbYIk=
Subject key identifier: C5:3E:31:A1:E0:D8:85:E6:FC:6A:FE:FD:12:24:F8:FD:1E:B4:B4:52
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019F954954D03A3D397E8DB176E86EAD5D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 024E
Signing time: Fri 24 Jul 2026 18:00:38 +0000
Manifest this update: Fri 24 Jul 2026 18:00:38 +0000
Manifest next update: Sat 25 Jul 2026 18:00:38 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: 9O/GgSJBklRe4l/VP0hkxm3y63XfwIIpt9bUq8wmFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:54:d0:3a:3d:39:7e:8d:b1:76:e8:6e:ad:5d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: Jul 24 18:00:38 2026 GMT
Not After : Jul 25 18:00:38 2026 GMT
Subject: CN=c53e31a1e0d885e6fc6afefd1224f8fd1eb4b452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:10:fb:67:1e:99:8c:31:6e:f7:8c:85:17:
e9:cf:c6:59:8a:fa:e0:71:45:95:a9:ae:21:90:97:
af:00:fe:8e:89:ad:68:47:62:e6:a6:5f:6c:2b:c9:
c2:06:c0:b0:3c:9f:89:99:bf:ac:f9:6d:1e:0d:3f:
60:6f:79:29:a9:3b:58:1a:6b:9b:7d:6f:54:57:d7:
81:03:e1:27:d2:ba:95:fb:5c:72:d9:78:72:ec:10:
b2:dd:91:10:6b:48:3d:12:4b:c7:56:9b:05:17:6a:
87:55:37:35:69:2a:5b:7f:aa:5b:92:34:32:9b:bb:
d6:d7:44:70:23:ed:43:21:2e:e3:c4:10:2b:e3:6e:
a1:f4:6a:3e:37:b0:db:05:4f:44:46:2d:ce:46:1f:
21:d4:61:ca:21:df:2f:2a:10:50:6c:35:ba:03:1d:
58:6e:c9:46:9b:4f:7a:a8:76:4c:de:4c:bc:93:67:
37:e5:0d:84:fc:d7:01:1f:6c:d0:f3:b6:50:8b:28:
90:53:c0:94:85:76:9d:4b:0d:81:f2:36:0f:02:47:
50:45:9e:7b:34:42:ac:ad:dc:87:59:ab:0d:7a:6b:
d2:d4:35:92:1b:5e:f6:73:76:5d:39:ef:96:64:42:
4f:45:a1:06:13:d0:61:60:2f:27:75:58:1e:3b:c8:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:31:A1:E0:D8:85:E6:FC:6A:FE:FD:12:24:F8:FD:1E:B4:B4:52
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f3:ae:45:dc:82:3c:18:c3:57:2b:2e:74:5f:76:5f:0e:f3:
76:bd:69:d5:00:1e:db:59:49:7a:27:0a:f1:5a:14:76:a4:1f:
5a:f5:ef:b0:1a:5a:9b:72:f5:22:b1:7e:58:c0:41:92:1d:63:
23:a4:de:da:a6:cb:44:c1:f4:8f:6f:79:37:ef:57:27:22:a6:
df:dd:6d:c3:85:4c:fc:1e:be:a4:90:f4:f7:5b:69:d3:b2:a1:
a1:1e:b8:ec:bd:7e:33:5a:f4:3a:a8:ed:95:9c:34:e4:ab:c2:
35:35:c1:8c:bd:a4:16:c5:2c:9c:f9:1f:c6:ac:67:f2:56:7e:
f7:36:19:25:2d:cd:f0:b4:71:70:60:8e:4e:fd:c6:ab:b9:0f:
14:83:b2:a4:0d:87:4e:98:de:1d:78:38:29:2d:69:5c:fb:cf:
09:a9:72:9f:44:8b:2b:ca:e6:b7:c7:41:cd:90:0c:69:5e:9b:
f0:c3:4f:5a:3a:64:dd:07:d7:31:a3:34:e4:74:97:eb:bf:c4:
5f:11:e4:ca:87:78:d4:22:51:71:fd:6e:ec:21:cf:1d:fc:50:
d3:1a:51:d7:f2:bc:bd:45:5e:40:dd:46:b4:41:72:a3:51:20:
d5:fa:7f:df:8e:1d:9c:68:a1:a3:26:01:54:43:28:c7:7d:92:
55:c0:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:37:57 2026 by rpki-client