Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: X54hwLWgJduJvKjeuyQ6CUR7OBAPCzVTL1JCa+iR1j4=
Subject key identifier: 41:AD:7B:66:52:CB:AC:16:6F:E5:8D:6B:7F:2F:F8:10:E7:38:2B:37
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019D26CD28DD5AC552F0AA967FA22FCB0656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 0442
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: cBcJ8yw+eTeB+7upGqN25jWTj1Li+f5wUwarm9IqtnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:28:dd:5a:c5:52:f0:aa:96:7f:a2:2f:cb:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=41ad7b6652cbac166fe58d6b7f2ff810e7382b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:e6:64:fc:43:9d:01:5e:dc:c6:2d:40:e8:
db:08:af:23:94:20:7d:44:19:87:8c:10:5e:b1:7f:
14:88:0b:38:8f:95:21:9c:52:b4:03:e5:61:83:37:
79:ed:fb:57:1a:a8:b8:8a:8d:31:1f:26:09:56:42:
a8:84:43:70:c4:f6:d9:aa:e8:0b:fa:18:1d:37:af:
34:52:4b:4c:8a:6d:34:2e:c1:a9:90:7c:e4:76:57:
0c:fe:c2:05:fe:3f:0f:ab:46:16:80:82:fb:7f:32:
eb:e1:16:d3:b3:76:b7:b1:37:23:1c:24:1e:bf:5b:
ef:c7:0f:21:64:a1:82:bc:ce:c5:80:86:e3:d4:bc:
40:2a:12:0a:01:ac:8e:ef:71:6c:f4:37:be:44:f1:
33:25:74:b3:f5:e0:81:10:c4:e1:a4:29:3f:31:e3:
a2:ae:a4:f9:cd:7e:49:11:c4:92:db:c5:0b:bb:77:
f0:66:33:0e:49:7f:31:9f:67:ae:2f:8e:fa:94:97:
34:8f:51:f3:3b:aa:37:06:04:a2:a2:06:54:77:80:
8f:c9:60:22:f0:50:d3:7f:9b:56:1b:18:1f:bd:73:
26:9f:4d:39:d1:b4:7e:56:6e:4f:1d:f7:43:95:61:
e0:09:6f:47:6d:78:1d:fb:b7:4e:f3:4b:e1:a9:0b:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AD:7B:66:52:CB:AC:16:6F:E5:8D:6B:7F:2F:F8:10:E7:38:2B:37
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e7:30:37:72:1b:fd:2d:02:d2:a1:42:ea:7c:a9:35:74:2e:
8a:0b:bb:59:d0:37:3e:70:db:fa:86:b5:20:8c:63:e1:35:be:
96:8d:01:3c:60:d9:64:b2:3d:7c:42:0c:e9:1e:60:48:76:4f:
40:9a:3e:89:84:65:31:0e:82:1d:70:5e:10:fe:cd:2c:14:02:
f5:8b:7e:e7:dc:ee:2e:67:98:33:a4:d4:26:27:05:e8:30:16:
f1:61:30:70:1e:3d:80:c2:f0:54:e6:8b:7e:32:45:f3:38:2b:
58:fc:ef:ad:0c:67:c5:cc:db:a5:c6:28:84:f2:2d:fa:28:e0:
8c:77:a4:8b:0d:e2:c9:38:cd:f0:82:f3:ad:84:c8:21:c2:e8:
5d:e9:c5:cb:de:9d:24:ec:2b:99:82:f4:97:47:c1:0c:02:cf:
1e:85:40:0b:6e:c8:b5:ee:21:5b:91:68:15:ec:92:46:5c:11:
2f:06:be:f3:e9:52:a0:a3:69:cc:d5:2b:57:c3:78:03:bd:8c:
22:e4:2a:8c:ad:7f:65:bc:0c:52:9a:f6:53:2a:5b:f3:10:ff:
fe:80:81:be:f5:cf:17:c9:79:43:0f:7e:44:bc:85:31:d3:d7:
f3:6d:f6:e3:fc:be:f5:8b:60:aa:90:fc:ae:d8:22:e7:d1:c5:
a3:80:c9:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSjdWsVS8KqWf6IvywZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2NiNjFhYjRmNDNmMDdlMzc4MzMwN2RkMzM4NGY5ZGNj
MWMzMWEwHhcNMjYwMzI1MjEwMTEyWhcNMjYwMzI2MjEwMTEyWjAzMTEwLwYDVQQD
Eyg0MWFkN2I2NjUyY2JhYzE2NmZlNThkNmI3ZjJmZjgxMGU3MzgyYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzozmZPxDnQFe3MYtQOjbCK8jlCB9
RBmHjBBesX8UiAs4j5UhnFK0A+Vhgzd57ftXGqi4io0xHyYJVkKohENwxPbZqugL
+hgdN680UktMim00LsGpkHzkdlcM/sIF/j8Pq0YWgIL7fzLr4RbTs3a3sTcjHCQe
v1vvxw8hZKGCvM7FgIbj1LxAKhIKAayO73Fs9De+RPEzJXSz9eCBEMThpCk/MeOi
rqT5zX5JEcSS28ULu3fwZjMOSX8xn2euL476lJc0j1HzO6o3BgSiogZUd4CPyWAi
8FDTf5tWGxgfvXMmn0050bR+Vm5PHfdDlWHgCW9HbXgd+7dO80vhqQs3gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGte2ZSy6wWb+WNa38v+BDnOCs3MB8GA1UdIwQY
MBaAFAw8thq09D8H43gzB90zhPncwcMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEt
MmM2NjRjZTA4MDc3LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEtMmM2NjRjZTA4MDc3
LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALecwN3Ib
/S0C0qFC6nypNXQuigu7WdA3PnDb+oa1IIxj4TW+lo0BPGDZZLI9fEIM6R5gSHZP
QJo+iYRlMQ6CHXBeEP7NLBQC9Yt+59zuLmeYM6TUJicF6DAW8WEwcB49gMLwVOaL
fjJF8zgrWPzvrQxnxczbpcYohPIt+ijgjHekiw3iyTjN8ILzrYTIIcLoXenFy96d
JOwrmYL0l0fBDALPHoVAC27Ite4hW5FoFeySRlwRLwa+8+lSoKNpzNUrV8N4A72M
IuQqjK1/ZbwMUpr2Uypb8xD//oCBvvXPF8l5Qw9+RLyFMdPX82324/y+9YtgqpD8
rtgi59HFo4DJ8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:30 2026 by rpki-client