Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: 91P5knbP4hlDcParJeAoZa4XdVrpqhyaS1jQkQhijss=
Subject key identifier: EF:B9:F2:B1:53:9E:CA:3B:4B:78:60:6D:72:26:6B:D4:DE:83:EB:33
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019D265F6B03823FB47EB6BDB8969A4232BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 0569
Signing time: Wed 25 Mar 2026 19:01:20 +0000
Manifest this update: Wed 25 Mar 2026 19:01:20 +0000
Manifest next update: Thu 26 Mar 2026 19:01:20 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: N7x/nRrbZqe/+5P7oo3JjX9wkaDgv13x0JhI1LQUaRI=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6b:03:82:3f:b4:7e:b6:bd:b8:96:9a:42:32:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Mar 25 19:01:20 2026 GMT
Not After : Mar 26 19:01:20 2026 GMT
Subject: CN=efb9f2b1539eca3b4b78606d72266bd4de83eb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:d5:d8:57:16:d4:ac:4a:e1:8f:43:d8:10:
58:4c:d8:79:e3:e8:53:0b:42:2f:30:95:af:22:17:
45:c8:cc:14:60:ed:0e:85:8c:b2:21:5d:4e:58:71:
4d:37:b2:d8:99:ac:8b:a6:b6:72:47:7a:35:f4:52:
96:c7:92:37:28:2f:ff:46:ac:d5:42:7d:ac:42:96:
12:e1:97:9b:f7:a9:79:27:c4:68:5d:68:51:99:54:
d2:96:c7:07:26:70:bb:18:96:fe:23:47:3f:64:ca:
9e:b2:db:a9:5b:be:f9:6e:dc:93:73:b2:f7:58:34:
45:6b:27:96:0b:18:85:0c:76:a4:e9:a2:87:72:f9:
29:c5:e9:fc:68:ed:6e:ee:e7:16:63:d5:f8:03:bd:
70:d6:4a:48:b0:eb:e2:59:2b:3f:05:eb:5f:2f:56:
b5:d7:aa:80:02:24:32:c1:7c:f4:11:36:6e:2a:9e:
24:43:7d:5f:4a:65:ff:d9:29:46:5f:ab:94:16:32:
e5:b6:14:b8:b0:39:2d:b0:5d:d4:fe:61:6b:84:07:
d5:b5:8f:6c:c5:eb:30:c4:04:e5:69:ba:c9:8f:d4:
df:a3:69:6f:b8:41:6e:01:58:c3:bd:a4:51:ac:73:
d0:3f:77:cf:5f:dd:fa:74:dc:08:c3:65:4a:0e:0a:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B9:F2:B1:53:9E:CA:3B:4B:78:60:6D:72:26:6B:D4:DE:83:EB:33
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:71:a0:0e:d9:c3:5d:a4:2a:05:5e:8c:af:bc:50:9f:d6:
17:a5:fd:be:ba:18:7d:d6:dd:56:25:b8:c9:46:72:20:09:b5:
c2:6c:a1:54:9a:72:48:56:62:0a:a1:fd:fc:51:d9:d4:e8:35:
28:e9:77:fa:9a:af:e6:bc:83:2e:be:5c:0d:c3:f1:a2:46:81:
a5:a1:5c:03:be:57:f4:30:35:c1:ac:30:41:35:18:74:03:6c:
1f:1a:28:09:e5:1f:57:7b:27:54:aa:db:9d:ac:ef:dc:a9:63:
90:40:54:a9:c3:13:c3:aa:fb:2e:60:54:a2:6f:8f:23:06:b9:
03:e9:22:0f:ce:fd:8f:0e:80:3a:c0:d9:8f:a6:67:5d:14:65:
e6:fc:12:b5:de:f6:2d:2e:c9:f3:0d:28:9a:81:f6:a6:8e:ba:
ef:4b:ad:06:12:2d:b6:0f:a0:4f:06:03:e4:26:7a:ba:28:b4:
87:fc:63:cf:2b:74:de:20:8d:42:90:b7:e9:8f:49:89:c3:9e:
6b:fb:6c:3d:77:89:dd:a2:e1:54:22:3a:22:61:7c:cb:cd:6b:
11:d9:9d:ac:73:6d:54:e3:87:76:5a:0f:c2:1e:ac:ec:8f:c1:
5e:31:f4:b1:d1:a8:47:09:1b:64:e8:a7:08:d4:e1:f2:ad:34:
a2:81:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:04 2026 by rpki-client