Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: ucU8ntEQQL+DOylHV2iRAH1XGE3Ai5VyyXbaNPmp/NE=
Subject key identifier: 35:E7:C7:4C:0E:02:3D:73:0D:34:86:E4:B3:6A:49:1B:DB:12:EB:CC
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019E1C0F80101227676F027CBADED7A75EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 04C1
Signing time: Tue 12 May 2026 12:00:38 +0000
Manifest this update: Tue 12 May 2026 12:00:38 +0000
Manifest next update: Wed 13 May 2026 12:00:38 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: RYfBINJaTtQ+kqxn74WnyAsAlyHsyww2DaTbX/rEiio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:80:10:12:27:67:6f:02:7c:ba:de:d7:a7:5e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: May 12 12:00:38 2026 GMT
Not After : May 13 12:00:38 2026 GMT
Subject: CN=35e7c74c0e023d730d3486e4b36a491bdb12ebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:30:02:0e:51:85:63:2e:a8:c2:95:ff:da:
e5:aa:36:0f:c9:64:3b:ce:5a:e1:be:c2:2b:f1:20:
e1:a1:6a:6a:31:81:87:8e:36:e4:82:f6:de:63:3a:
af:2f:3d:a6:d9:dd:c4:a1:df:20:0d:8e:da:25:d4:
c7:9b:c1:69:78:c1:f3:e4:4d:1a:c8:88:ec:59:14:
18:09:c6:cb:49:04:16:c5:52:af:a7:30:78:11:e8:
f3:7a:11:23:c3:06:c6:ea:49:28:51:71:73:d6:37:
d8:23:dc:a8:60:21:66:d5:92:47:4a:12:60:8c:81:
3a:07:f6:09:ad:f4:78:f7:ff:cc:67:c5:eb:5b:62:
73:96:1f:4a:0d:bc:56:c7:96:06:46:c9:08:ed:4b:
4c:58:71:4b:b6:c9:bb:a8:76:1c:5a:6b:5d:f1:ae:
09:37:c9:b0:5f:30:c2:3e:75:a6:94:4d:77:95:ea:
db:7a:85:04:94:e9:e4:08:d8:38:68:2b:6f:75:69:
3a:d8:86:5b:70:83:7c:2e:9c:15:cb:83:02:1c:87:
0b:e2:05:2c:1c:8a:10:c8:59:66:a1:71:b7:87:12:
61:52:e7:cc:06:15:1e:ec:94:d8:9b:79:8a:5c:e3:
42:28:d3:84:61:d7:33:b3:13:93:c9:20:9d:ca:f9:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E7:C7:4C:0E:02:3D:73:0D:34:86:E4:B3:6A:49:1B:DB:12:EB:CC
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:40:7e:a1:1e:c9:e5:35:78:8c:68:9e:e4:25:8e:c8:98:df:
73:6e:32:4b:c9:b6:9a:17:7a:8e:96:3e:d5:91:27:97:0b:5a:
5a:30:87:a2:d6:76:db:dc:90:91:bf:fb:7e:e2:74:5f:90:67:
25:25:7f:82:f5:35:9a:2b:df:d6:7f:ac:da:66:f8:77:b8:72:
b5:9d:0f:e1:b8:e6:f8:c1:8f:93:1a:49:2e:57:48:e7:d8:08:
79:b3:ad:e3:8b:02:76:2f:56:75:7f:b0:7d:88:0e:bc:d8:92:
6e:70:93:84:eb:12:a5:87:0a:36:ba:24:19:e7:da:73:d2:91:
06:10:83:3b:f4:14:a3:b6:83:a0:91:f8:d7:3f:ea:26:54:0c:
64:b7:f1:b7:26:8a:7b:03:f3:25:99:7f:92:a5:a7:f2:3b:1c:
bc:98:48:0b:00:5a:ba:b4:7d:99:34:43:52:2c:dd:07:e5:ca:
59:c5:47:ad:e2:bb:a2:19:79:87:13:7e:b7:40:77:aa:20:9f:
36:fe:21:94:66:42:e1:e8:72:3c:2b:a8:b6:d7:bc:89:54:43:
c4:f1:e4:72:e0:9b:16:d8:90:23:c8:45:0c:3b:55:79:69:98:
84:0d:76:43:38:1e:8a:e1:f7:42:cc:a1:39:27:da:f2:2c:07:
b5:18:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:24 2026 by rpki-client