Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json)
Hash identifier: jwhZY/GnPgCIHYrCQfu6z5Tm/ypekcO+iy403EcoAn0=
Subject key identifier: 26:1B:90:D7:BD:3A:46:F7:D1:A5:07:92:C0:DD:F7:E1:82:3B:3E:25
Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Certificate serial: 019E1CB4817573DA3B8AD04B2DB97D985900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
Manifest number: 018B
Signing time: Tue 12 May 2026 15:00:52 +0000
Manifest this update: Tue 12 May 2026 15:00:52 +0000
Manifest next update: Wed 13 May 2026 15:00:52 +0000
Files and hashes: 1: 8u--PHXcb8fanvRnVD8ORFDAWAo.roa (hash: SlV1tdKj8d+d8O1aFXysjvMqssjH3C5EHOnIRAt5jZs=)
2: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: gLPcFlcyNxMpUhleTCbmwMC6P7N7rIr9dg/QuO9AgHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:81:75:73:da:3b:8a:d0:4b:2d:b9:7d:98:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38
Validity
Not Before: May 12 15:00:52 2026 GMT
Not After : May 13 15:00:52 2026 GMT
Subject: CN=261b90d7bd3a46f7d1a50792c0ddf7e1823b3e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:02:e3:10:58:32:17:ff:35:56:96:cd:97:
a2:16:78:33:c5:bb:6c:fb:22:e4:2d:ca:af:c7:56:
5c:e4:8d:67:a4:ab:3d:5d:84:80:80:a9:46:5c:e2:
4c:c9:49:02:f2:ad:9b:65:e7:69:62:64:3c:e5:a2:
29:58:6b:e2:00:2c:91:87:f1:40:b9:03:1f:5a:3d:
f4:f2:e6:a6:5f:e5:56:cf:da:34:76:e6:2c:c9:3f:
c4:7c:3a:6e:b7:e0:06:76:82:ce:21:28:69:7b:91:
ab:c0:fe:df:93:75:9d:59:54:5c:29:81:4d:bc:62:
fe:6a:2c:49:4c:ba:96:72:fe:f1:17:8c:c9:54:c5:
27:fd:47:0e:12:10:39:c2:66:2d:72:52:a1:d9:fd:
db:b0:58:73:90:2b:48:97:5c:c4:fb:68:e5:3c:78:
2a:d0:7f:6a:23:e6:77:3f:36:2c:5b:46:3e:ad:20:
86:07:62:02:f0:ad:c4:52:6b:1e:01:8c:28:26:d1:
08:a4:82:b6:da:26:03:34:e7:e9:69:58:8b:f3:a4:
73:a0:f8:ac:18:80:39:a0:96:58:a6:70:3a:4b:3c:
23:5f:3d:b9:fe:0b:4e:ba:b3:e1:0c:33:a7:87:0f:
c0:b6:be:df:75:ec:32:16:a1:87:98:f0:20:14:c4:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1B:90:D7:BD:3A:46:F7:D1:A5:07:92:C0:DD:F7:E1:82:3B:3E:25
X509v3 Authority Key Identifier:
keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d8:5c:3f:97:52:f9:66:48:0b:4c:12:65:0a:d1:76:70:b6:
0f:38:62:12:9d:8b:73:b3:d7:67:6e:e6:d4:a2:14:af:20:78:
95:b4:06:76:f6:87:85:fb:92:44:1f:99:07:dd:05:ff:59:c4:
83:e1:f7:0f:9b:de:54:7b:54:e8:66:fb:01:15:c0:a0:a6:a5:
b0:ef:7a:50:e8:1c:ad:1b:f8:19:89:52:82:39:e8:e6:34:5a:
c1:45:bc:eb:ce:1e:ec:6c:db:18:26:1a:6f:0b:74:5f:e8:c5:
d2:e4:a0:ba:5e:62:d4:59:63:20:8a:45:68:6e:b7:a8:bf:92:
de:86:64:01:f5:f4:73:b1:8c:3d:7a:34:31:1c:0b:63:86:b8:
c9:7e:9e:b1:ce:62:bd:41:fb:1a:b3:4e:78:98:1c:dc:4c:d6:
99:12:29:96:8b:9e:7f:33:8d:13:4b:27:4b:97:a8:c5:9c:54:
07:49:30:0e:2b:28:49:9f:d6:ad:14:bd:d0:15:cb:10:cf:da:
de:b1:87:7d:79:66:43:2d:c6:2a:78:5d:07:c1:e2:50:d2:af:
94:c9:e9:f4:21:f6:61:17:87:64:57:17:bc:ae:ff:8c:17:d3:
2f:7d:4d:19:b6:af:56:71:a2:52:bc:9b:cf:e1:97:77:d0:22:
4f:23:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:21 2026 by rpki-client