Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: hArcvB58eYXb6GreuZWB8uSRC7kTm3g8bhnvcdZ0BRM=
Subject key identifier: 2C:5C:A5:85:B2:89:4A:23:8C:50:4E:DA:DE:A4:EE:6B:2A:2B:E2:0D
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019F905A0A28633A3E443CEA714E3290E2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 06A9
Signing time: Thu 23 Jul 2026 19:00:47 +0000
Manifest this update: Thu 23 Jul 2026 19:00:47 +0000
Manifest next update: Fri 24 Jul 2026 19:00:47 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: UvcGH1na1oeBWZoiQ2qQR0cGR/xJFeCR51GTwZ4+CVo=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:0a:28:63:3a:3e:44:3c:ea:71:4e:32:90:e2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jul 23 19:00:47 2026 GMT
Not After : Jul 24 19:00:47 2026 GMT
Subject: CN=2c5ca585b2894a238c504edadea4ee6b2a2be20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:00:60:ad:f7:bb:d1:d9:ff:0b:70:4d:5e:
82:cb:03:af:72:c0:2d:c5:9b:ee:b7:0f:d5:f3:9d:
e8:e4:1f:bb:64:a1:cd:61:8e:18:db:18:65:ff:e4:
43:d9:8e:5d:65:2a:c9:e7:e4:d1:91:c5:5e:fc:8c:
09:4a:0a:3a:4a:77:b0:72:f1:ed:fe:2a:54:1e:85:
4f:81:2f:cd:84:5f:ae:5a:f6:8b:1b:6b:ce:a5:ae:
46:80:50:33:ac:bd:17:94:48:af:fb:63:12:f1:d5:
ca:3f:77:6c:74:af:9b:0f:e8:96:57:b7:96:cf:49:
36:31:1b:b5:2e:b7:2f:54:23:c4:dd:4a:44:33:c0:
28:20:2b:cf:30:46:33:98:bf:09:0a:76:80:1c:aa:
62:69:e9:17:b6:e7:ef:5d:c0:19:cd:e6:bc:37:87:
2a:a9:a2:29:37:b9:e4:6f:18:27:dc:01:2f:38:64:
c4:7d:b2:b5:1d:25:23:1c:22:32:2a:9d:e1:89:36:
ec:91:68:26:16:9e:1e:50:20:b4:58:14:b9:56:88:
c8:f1:df:20:cd:de:b8:9a:fc:a0:82:b4:3b:af:6a:
6b:e9:44:71:55:15:7a:8f:14:77:7d:ff:f2:2b:bf:
2a:47:d0:84:0e:e9:15:38:66:ec:bd:3b:b1:85:2f:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:A5:85:B2:89:4A:23:8C:50:4E:DA:DE:A4:EE:6B:2A:2B:E2:0D
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:42:88:2b:87:63:89:2e:eb:ec:87:09:c8:b3:b3:68:59:78:
60:d3:a5:bd:4c:7f:11:22:64:e1:4d:79:48:17:aa:fd:d0:90:
05:35:c2:d7:c7:db:32:7e:90:e0:56:b4:85:07:a0:fc:09:82:
bd:76:f7:7f:c9:bc:b8:66:be:3d:73:8f:6e:81:5e:e0:11:19:
2b:6f:ec:52:05:7c:61:8b:7b:80:ba:a4:4e:8e:ad:84:13:ff:
c9:e2:9e:58:51:12:2e:c9:7a:23:16:47:06:a3:ca:dd:d5:55:
7c:6f:07:f5:b4:80:67:41:70:15:98:bb:cf:0a:49:e3:15:3d:
d7:4c:4c:ae:7d:3d:eb:ec:70:04:a8:11:c0:66:fd:63:b5:68:
66:62:d2:a7:18:bd:27:75:fd:52:79:cf:ce:ad:80:a9:10:e0:
6a:8d:a1:b8:f8:87:4b:68:8c:ac:48:81:6c:35:a3:1f:7f:c6:
d9:25:d3:81:c7:51:7b:68:bc:52:0d:6f:e0:99:53:46:a0:cb:
2b:50:9c:89:52:bc:e2:8d:bd:14:1d:ae:f4:2d:ce:e9:fb:5d:
df:39:ba:bc:38:3a:ac:af:c1:fe:09:2e:a9:28:d3:e3:e3:71:
51:2b:a1:d4:bb:20:55:a2:8b:45:0a:3e:6d:74:27:5d:48:79:
9d:99:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:51 2026 by rpki-client