Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: sbPshwIEqssZAPOBBtvWLQly8oeYsqRtvz4pp0LELjE=
Subject key identifier: 93:EE:23:78:FD:95:AD:63:B6:CC:67:95:B7:F3:E3:67:A2:DE:04:6F
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019F90C81E029FD237AF517CC05788F79ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 0582
Signing time: Thu 23 Jul 2026 21:01:01 +0000
Manifest this update: Thu 23 Jul 2026 21:01:01 +0000
Manifest next update: Fri 24 Jul 2026 21:01:01 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: PnvVkW3pFG52cOOKvp20NBwMUQEnVzWpTsZCEyqb1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:1e:02:9f:d2:37:af:51:7c:c0:57:88:f7:9e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Jul 23 21:01:01 2026 GMT
Not After : Jul 24 21:01:01 2026 GMT
Subject: CN=93ee2378fd95ad63b6cc6795b7f3e367a2de046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:e1:30:23:a1:3c:04:3c:23:32:27:f0:90:
4a:29:e2:12:ff:f2:72:48:f2:66:56:65:50:8b:7c:
8f:cb:ec:ec:e8:e8:25:4a:d7:cd:37:03:1a:d8:20:
1f:35:7a:3a:2c:3b:86:60:9e:9b:f6:67:8d:6c:3c:
d2:c8:e1:8c:15:c7:42:a5:1b:17:aa:cf:e7:39:dd:
3c:e1:d7:f6:56:28:26:e1:7e:f4:c1:5c:e7:c6:4f:
5f:b6:a0:ac:35:59:9d:d7:f8:17:d8:77:33:33:d2:
ca:59:fa:d9:5b:8c:55:01:cf:a8:a0:62:6d:ba:8c:
71:d2:0f:60:cd:07:9a:1b:55:cf:ef:75:3a:20:77:
7e:c8:e1:e3:19:e1:6a:ae:86:d6:dc:15:6d:a1:3c:
57:1d:54:71:d6:0d:e1:dd:d8:a8:b7:e9:c4:28:8e:
23:88:31:3c:f2:d2:19:69:35:ee:20:65:ac:97:d3:
4b:1e:13:db:a0:b1:98:10:2c:81:9e:32:eb:9d:5e:
a6:51:58:60:64:0d:13:e8:3a:a0:cc:87:dd:f2:9d:
84:cb:35:32:1a:46:e2:2b:72:23:26:27:37:96:f3:
d9:5b:e6:ea:a0:49:d1:3c:a6:3b:de:16:bc:b6:be:
14:d6:c2:26:88:cc:b7:19:34:e4:9d:41:a0:c0:cb:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:23:78:FD:95:AD:63:B6:CC:67:95:B7:F3:E3:67:A2:DE:04:6F
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e3:23:5d:0d:95:2b:9d:b8:28:0e:92:de:29:e6:e3:d3:72:
6c:97:b9:68:dc:d7:2a:7e:53:76:eb:03:ec:b1:cb:c6:f5:72:
9a:f0:b1:8a:16:72:dd:db:d0:f6:33:1b:30:c6:44:f4:47:f4:
e9:4c:66:c7:bc:3c:04:66:d1:1c:a6:4c:29:f0:20:71:11:f6:
65:14:fb:f6:6d:c7:28:cf:b6:e2:c0:c8:d5:af:b8:e3:e8:68:
3b:b3:7a:f2:0e:70:69:56:2d:41:54:6f:15:84:63:1a:d1:ad:
af:61:90:de:dc:55:d3:f1:14:5d:e5:86:c1:9c:08:cb:45:81:
81:f0:66:de:c3:64:c4:a9:49:2a:9f:ed:b4:4d:33:ee:6f:b6:
b0:a1:21:3e:94:c8:5a:24:c8:6b:cd:d1:9b:f5:0e:dc:38:2c:
66:14:6d:42:5c:6f:5a:4a:e6:49:93:90:c9:6d:cc:21:db:a4:
bc:e6:66:fa:8b:17:1a:12:5a:1e:2a:e4:91:db:05:fa:d0:96:
f2:32:e9:2f:b1:69:3d:81:16:d4:7f:35:be:cc:86:1d:a6:3e:
02:27:dc:48:38:59:18:a4:56:da:78:55:f2:bf:54:bc:32:42:
cd:7a:af:5b:d9:27:f2:f2:60:8a:31:93:ef:82:4b:28:02:f1:
a6:d5:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:48 2026 by rpki-client