Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: u2VJIxLYp2rWjiP3HuXQHMwrMXpi7ca8JnUdIXkK+nU=
Subject key identifier: 4C:89:50:68:36:CA:57:54:37:9C:CD:41:B3:F1:EE:F0:A0:E2:96:50
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019F916D9F19CABA3BF0747842D3D4CFFC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0FDB
Signing time: Fri 24 Jul 2026 00:01:48 +0000
Manifest this update: Fri 24 Jul 2026 00:01:48 +0000
Manifest next update: Sat 25 Jul 2026 00:01:48 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: Fr7gZcZEiqrPa3zGfmitqSdhWhaCU7jj4RaUEqjGzzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:9f:19:ca:ba:3b:f0:74:78:42:d3:d4:cf:fc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Jul 24 00:01:48 2026 GMT
Not After : Jul 25 00:01:48 2026 GMT
Subject: CN=4c89506836ca5754379ccd41b3f1eef0a0e29650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:da:4f:df:1c:ce:a5:57:05:b0:f0:e3:28:
66:5c:ec:df:fe:93:bd:b9:53:16:1b:a4:e2:53:63:
85:3a:c1:d6:d4:49:c1:85:20:1a:23:63:ce:9e:b8:
07:7d:29:ec:fc:8d:48:ce:12:5d:5a:70:90:79:77:
b7:b9:67:be:0a:4d:7b:b4:0f:9c:03:2e:f6:60:fe:
95:1b:ca:44:79:fc:98:8a:32:36:ef:91:db:c4:a3:
5b:ce:93:da:a4:76:76:ef:ec:81:06:6e:b7:4a:0d:
09:88:4b:f1:cd:cd:c5:68:dd:57:8a:21:b7:e0:38:
20:29:b8:1a:c2:a6:16:f3:d7:ab:6d:30:b7:48:2d:
47:5d:09:15:d4:2a:43:af:e7:1c:90:3b:c0:3c:c4:
b8:6d:ab:5b:a2:5f:a9:09:0c:c1:38:bb:88:25:70:
45:74:ed:e1:63:0b:e0:c5:8f:86:6f:02:d6:57:3f:
63:75:aa:fa:70:1f:cd:25:22:29:34:02:44:55:6f:
06:5b:2e:dc:bd:73:17:66:f6:0e:c1:c5:59:87:7b:
20:67:af:75:d7:23:32:51:1c:f9:d3:7c:49:c0:15:
7f:7b:a9:85:28:0d:9d:1b:00:4a:ef:c6:a7:77:28:
cd:75:cf:d7:72:80:5e:80:4a:a1:29:c4:6a:e9:b1:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:50:68:36:CA:57:54:37:9C:CD:41:B3:F1:EE:F0:A0:E2:96:50
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0c:fa:8b:75:2d:ca:53:cb:95:fa:48:29:c1:a4:98:a5:0c:
5c:7f:72:e9:b5:45:4b:f0:be:13:45:96:ed:35:de:b4:c6:76:
cc:fa:9a:de:4a:f7:a8:f1:45:36:0f:46:74:04:c0:c7:ce:43:
37:9c:bc:b7:00:97:68:8f:a2:55:d6:ae:da:77:3e:94:55:41:
82:8b:09:60:a9:55:4e:53:34:43:87:71:bc:be:d2:3e:5e:ae:
77:bd:cf:7f:f5:25:09:ee:ca:a9:c6:a8:14:27:40:a2:29:1f:
22:18:5a:79:1e:fc:36:b1:53:41:25:46:ee:0e:ca:60:f2:12:
74:34:cb:53:f8:36:b0:19:97:f7:da:e6:a1:77:81:5d:64:65:
cb:4f:c6:af:27:8c:56:30:4f:cd:e9:04:62:a6:f2:89:15:ae:
85:67:7b:82:21:13:56:53:c2:a6:bf:75:a8:1c:1c:04:58:52:
c8:37:fd:cd:26:03:17:cb:91:2a:48:2b:3d:d6:52:03:fa:8b:
9a:0c:3c:30:58:5d:e9:47:0c:45:6a:dc:df:ed:66:9a:55:8e:
10:56:80:65:1b:4f:a0:64:ef:d2:5a:a4:f3:bc:26:8d:17:ef:
31:b1:52:53:34:86:35:0d:49:76:e5:ab:4f:85:e2:7d:d3:45:
ba:a4:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:29 2026 by rpki-client