Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: /bOSOvxIJVPqfC7Vj/FmnnddThJTX+qHsrfo1BrMOwM=
Subject key identifier: F2:9C:BA:3E:6B:2A:6D:56:B2:2B:41:84:96:BF:8B:6B:3F:2E:C9:DC
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019D2772346463AF4179E07873804F2E3E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0E9B
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: brkNS4B0Qx2diZ02XsZ7kv/uK0/uChsuqWssfKVFRE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:34:64:63:af:41:79:e0:78:73:80:4f:2e:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=f29cba3e6b2a6d56b22b418496bf8b6b3f2ec9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:b3:ec:cc:6f:df:5d:2c:70:6a:08:35:ef:
c0:8a:15:58:90:31:58:1a:95:d2:85:86:aa:b1:74:
ea:7d:b8:d4:3e:ea:dc:96:3c:8b:d7:5c:98:a1:63:
56:e8:8b:af:5e:eb:9c:5f:a4:95:43:38:6f:91:b2:
65:df:bb:9c:b8:a8:61:12:d7:bc:8a:7a:c8:fb:bd:
ac:8e:0e:d4:92:03:0a:3c:f7:bc:8c:93:79:a1:3e:
1b:ab:6a:c6:83:51:da:7c:50:d2:fa:8e:7c:04:74:
2c:35:46:a6:21:5b:93:8b:87:a9:11:10:11:eb:35:
40:02:92:80:11:16:5e:55:b3:43:7c:f1:60:f7:46:
17:2f:4a:23:2b:c2:27:6e:4b:7e:89:3c:42:bd:4c:
2d:d1:88:85:a9:01:92:ac:de:51:7d:a2:77:75:f8:
7b:11:c3:f0:0b:fb:19:17:4e:67:01:46:c5:9b:87:
0f:c1:e8:70:0c:8e:79:01:47:3f:c9:fb:e4:30:02:
c0:2f:39:fb:98:68:74:04:dd:4c:6e:c8:a9:40:46:
93:cb:82:be:31:a5:2f:3f:25:1c:48:54:a4:54:2d:
f6:af:7c:c4:0c:ef:e0:1e:d3:16:ae:44:6a:37:57:
ee:b6:59:bd:e4:6b:72:1f:83:22:c2:32:37:6e:2b:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:BA:3E:6B:2A:6D:56:B2:2B:41:84:96:BF:8B:6B:3F:2E:C9:DC
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:c8:47:07:43:41:bf:aa:ee:d9:15:ec:e2:6c:d5:31:53:
f0:ce:5e:12:90:30:eb:54:62:09:36:4f:63:20:7c:dd:15:1e:
8f:7e:78:68:a8:21:01:56:85:6b:b3:cc:91:46:6d:02:32:05:
01:08:41:c9:21:02:01:f0:dc:62:6c:3f:8c:d2:2d:8f:ef:e7:
b4:af:c1:6e:6a:aa:08:cc:a1:60:67:bc:85:b5:0c:5f:ef:ed:
5c:b5:5e:4f:f7:f2:5e:ae:ea:90:3d:17:6e:a9:56:a0:02:75:
cf:d4:20:49:0d:a2:7a:73:83:77:85:f9:94:5f:5c:73:1c:df:
c4:d1:8c:5b:5c:fd:4b:0a:66:54:49:c1:15:81:b0:87:ba:ef:
09:03:4b:7c:ec:1b:32:16:4d:85:8f:14:6b:d2:5a:a2:28:2c:
d7:eb:23:13:29:10:c1:04:4a:58:de:94:9d:c3:c2:10:fc:3b:
d3:16:f3:9a:d3:38:a2:3f:c5:d8:42:fe:41:2f:f7:80:13:9e:
e8:62:3b:e3:34:2a:a1:70:15:f0:9d:e6:b8:ea:6d:30:c3:2c:
13:c1:1c:28:bd:b4:ef:a1:1e:15:eb:a0:cf:15:e9:9f:5a:b2:
0e:6c:74:4c:bb:b2:c1:e4:dc:b5:51:40:9e:b3:e1:bd:0c:c7:
cc:50:1b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjRkY69BeeB4c4BPLj53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw
N2FjN2QwHhcNMjYwMzI2MDAwMTI5WhcNMjYwMzI3MDAwMTI5WjAzMTEwLwYDVQQD
EyhmMjljYmEzZTZiMmE2ZDU2YjIyYjQxODQ5NmJmOGI2YjNmMmVjOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCz7Mxv310scGoINe/AihVYkDFY
GpXShYaqsXTqfbjUPurcljyL11yYoWNW6IuvXuucX6SVQzhvkbJl37ucuKhhEte8
inrI+72sjg7UkgMKPPe8jJN5oT4bq2rGg1HafFDS+o58BHQsNUamIVuTi4epERAR
6zVAApKAERZeVbNDfPFg90YXL0ojK8Inbkt+iTxCvUwt0YiFqQGSrN5RfaJ3dfh7
EcPwC/sZF05nAUbFm4cPwehwDI55AUc/yfvkMALALzn7mGh0BN1MbsipQEaTy4K+
MaUvPyUcSFSkVC32r3zEDO/gHtMWrkRqN1futlm95GtyH4MiwjI3biuhLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKcuj5rKm1WsitBhJa/i2s/LsncMB8GA1UdIwQY
MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct
ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1
LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ3IRwdD
Qb+q7tkV7OJs1TFT8M5eEpAw61RiCTZPYyB83RUej354aKghAVaFa7PMkUZtAjIF
AQhBySECAfDcYmw/jNItj+/ntK/BbmqqCMyhYGe8hbUMX+/tXLVeT/fyXq7qkD0X
bqlWoAJ1z9QgSQ2ienODd4X5lF9ccxzfxNGMW1z9SwpmVEnBFYGwh7rvCQNLfOwb
MhZNhY8Ua9Jaoigs1+sjEykQwQRKWN6UncPCEPw70xbzmtM4oj/F2EL+QS/3gBOe
6GI74zQqoXAV8J3muOptMMMsE8EcKL2076EeFeugzxXpn1qyDmx0TLuyweTctVFA
nrPhvQzHzFAbAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:49 2026 by rpki-client