Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: pUIqD4TigTWvWt/fy3jY8FBV8tygDPHqX8KX0Ls4iuw=
Subject key identifier: 3A:9E:A3:30:FE:96:9C:D8:92:3A:ED:8D:BB:C2:38:BF:38:3B:A5:81
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 01A0CF6D67349E5349F72AE743D28CE717F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 0627
Signing time: Wed 23 Sep 2026 18:00:48 +0000
Manifest this update: Wed 23 Sep 2026 18:00:48 +0000
Manifest next update: Thu 24 Sep 2026 18:00:48 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: wZxcrmBEUkurWdHSTBDsvZRH/miIUxTCNU/xbweZHKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:67:34:9e:53:49:f7:2a:e7:43:d2:8c:e7:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Sep 23 18:00:48 2026 GMT
Not After : Sep 24 18:00:48 2026 GMT
Subject: CN=3a9ea330fe969cd8923aed8dbbc238bf383ba581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:49:57:12:c2:3a:68:66:72:1d:6e:49:23:
08:1c:df:a5:f4:86:3b:da:ed:fc:35:45:72:6a:ef:
b1:09:cc:aa:37:59:8e:e9:bd:f2:a9:83:77:fd:26:
6a:cc:b9:6d:64:86:04:25:32:3c:4e:4d:6d:41:b8:
e5:3f:e6:98:61:10:70:06:93:c6:d9:c8:7f:d1:4d:
c1:37:49:71:62:97:c0:31:02:ea:c9:80:7e:63:b7:
3b:e5:1a:80:27:87:30:e4:d6:a1:39:4e:8b:ce:a6:
5b:b6:24:6b:2e:ab:e4:ce:b4:d5:ea:bd:2b:3a:0e:
eb:f9:d8:96:67:1f:b4:17:05:50:04:b9:f3:a1:20:
7d:06:c5:7c:2a:c6:8d:2d:27:e0:b0:8e:17:2a:34:
74:9c:cf:85:da:47:cb:d8:e9:d3:81:ec:72:23:90:
35:41:5c:2c:4e:c7:e9:f7:af:0f:c1:27:b8:3a:f5:
73:4a:fb:1c:f1:1c:3c:e8:e4:a4:8b:03:53:97:f2:
e5:31:55:cd:30:b3:d9:47:a1:8c:8c:86:d5:35:87:
3c:87:b0:62:2f:04:25:8e:42:50:50:b7:c8:d6:bb:
33:55:8e:12:4b:3c:cf:19:c2:1e:83:d2:b0:f4:16:
de:63:24:6e:b5:e3:11:37:af:9a:ff:55:79:a8:72:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:A3:30:FE:96:9C:D8:92:3A:ED:8D:BB:C2:38:BF:38:3B:A5:81
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c8:df:9f:84:03:0b:b7:0e:6d:76:0f:d1:ba:58:2f:76:4e:
ee:b7:5c:4e:a6:c8:1b:2f:94:06:e4:50:4a:e1:77:da:d0:1a:
d7:18:95:53:c9:5c:0a:f3:68:85:08:95:bf:99:00:7a:c2:92:
15:3f:c9:98:78:28:ef:ea:f7:0b:c3:77:62:79:35:9c:14:35:
db:c5:a4:1a:40:79:f9:8c:85:f3:93:d5:b2:7c:7b:13:6a:67:
29:d8:05:10:c1:a7:0c:35:47:25:f0:74:89:e7:69:cd:f6:45:
86:b5:03:49:5c:a7:9c:13:7c:f2:42:d1:27:d8:0f:fe:cb:33:
7b:06:67:f3:eb:ee:d9:f8:f3:d5:82:2a:b6:33:7f:2c:51:ed:
4d:a9:4b:05:4d:cb:ef:c6:19:3e:0c:13:0e:b4:0d:18:c0:38:
aa:47:7d:68:c4:ad:1a:53:63:5b:3d:47:ae:ec:51:dd:bb:85:
42:c6:00:40:5e:41:68:97:5d:b3:5f:6b:2d:b3:3e:4b:24:c8:
1d:b2:f0:a8:8c:3e:fd:83:25:28:9e:55:bd:bf:7f:e3:2d:e4:
8d:7d:fb:90:36:f4:71:69:55:f0:8d:dc:e3:94:a3:2a:5c:da:
41:7c:25:5a:6e:5f:19:69:5a:8a:d1:6f:e2:de:cc:73:e3:f4:
fc:3c:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:11:53 2026 by rpki-client