Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: Ii5LzkvKDg/KpFJJ3pVFlVudErP56MlpTDLrUSKOEDo=
Subject key identifier: 2E:C5:A2:0E:A3:01:21:5D:00:FE:4C:32:EB:59:DB:37:0D:D2:E0:DA
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 01A1DBDD6043FD803AC1F2B98B76199C3EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 06B2
Signing time: Sat 14 Nov 2026 21:01:20 +0000
Manifest this update: Sat 14 Nov 2026 21:01:20 +0000
Manifest next update: Sun 15 Nov 2026 21:01:20 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: P7zJPjIUnQSuGI2uvRhfQ9CWNCQ74SIbcI2rtjukKjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:60:43:fd:80:3a:c1:f2:b9:8b:76:19:9c:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Nov 14 21:01:20 2026 GMT
Not After : Nov 15 21:01:20 2026 GMT
Subject: CN=2ec5a20ea301215d00fe4c32eb59db370dd2e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:4a:96:d5:b2:0f:0d:76:5d:71:0a:7e:a2:
b4:67:5c:8c:a4:b6:d9:30:bd:5d:33:5f:c7:45:6d:
f8:c9:97:0d:e3:d1:95:90:f7:08:15:9e:98:2a:20:
e0:42:e0:2d:5d:0e:77:e2:bd:c0:27:52:bc:0c:84:
7f:bd:61:74:fd:89:e5:3e:6a:62:04:ad:d9:8e:52:
aa:0b:eb:82:48:e9:c3:3c:48:fa:6d:8c:aa:67:52:
78:50:8a:a4:8b:11:1a:20:a2:40:aa:31:c8:36:c7:
75:ac:0b:20:3e:3c:81:d9:c5:f8:74:ad:af:d1:9a:
71:ec:12:8b:17:cd:a3:47:71:01:c5:ab:39:6b:cd:
23:b2:33:ac:44:3f:1a:23:8f:cf:fa:4d:2e:ec:98:
5e:11:dd:bb:e2:f5:d7:da:13:33:b9:a1:f2:e4:8a:
93:b4:f5:b3:80:7f:28:93:4e:6b:e5:7f:bf:7a:21:
38:5c:65:32:67:86:29:9b:25:93:34:88:7b:d3:6c:
c5:8b:64:16:eb:19:26:b1:13:a4:34:50:3b:2a:78:
15:85:52:ad:57:01:21:2f:24:aa:f0:37:16:de:57:
4a:2b:de:03:f3:b7:02:10:3d:eb:94:4c:9f:22:9c:
6c:5c:c9:86:92:60:dd:01:49:bf:ba:78:4a:33:01:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:A2:0E:A3:01:21:5D:00:FE:4C:32:EB:59:DB:37:0D:D2:E0:DA
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:fa:4a:47:c1:77:56:7e:ab:21:93:6a:14:f4:51:df:a3:
f5:0f:b5:ff:d5:37:5a:6d:3c:80:a2:28:86:44:d9:2e:1c:01:
23:c1:c9:92:37:e6:31:d9:35:a7:e6:8e:45:ec:0a:47:d3:66:
d5:a1:c1:1a:8d:d7:bc:81:3c:dd:b7:fe:c5:ed:17:95:af:9d:
5e:a7:11:b7:98:f5:a9:44:b9:66:1d:6a:5b:b4:90:b0:4f:03:
97:c8:5b:09:7b:71:a4:49:d2:19:47:82:b2:8b:26:32:e8:2f:
8c:36:31:16:ae:7d:4e:8a:7b:3e:24:b5:9f:7b:3a:26:c4:28:
9a:35:0e:6c:69:f5:5a:e4:6a:1b:79:51:fe:ae:53:28:08:fa:
52:a5:2e:98:51:43:69:1b:09:b7:01:57:2b:bd:51:96:87:1d:
19:2c:f4:d6:94:b5:c5:7f:56:66:c2:60:d4:19:8e:05:4b:7c:
a7:d7:8d:6a:c6:52:5c:f8:55:01:a7:ae:9f:f0:53:57:3b:00:
a3:84:d0:a5:80:e7:44:9d:0a:1b:fa:fb:57:06:a7:79:17:26:
3e:6b:88:4a:15:49:27:5c:5e:c4:22:3b:6b:a7:e1:76:ae:ac:
25:0a:a1:e2:ad:d4:bc:4d:5d:f7:e2:59:9a:3a:da:c3:7f:72:
08:ca:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 07:57:21 2026 by rpki-client