Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: n61ge7q2XaY9+gw3cmuut4ierTuSDnhXxSWFSz3Gj5Y=
Subject key identifier: 9A:DB:E6:90:C6:61:27:E3:4D:FD:6D:0B:B2:78:3C:3D:A0:F8:D6:1E
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 019F8FEC70C08DCD7AB3B8314163563CD55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 17:01:04 +0000
Manifest this update: Thu 23 Jul 2026 17:01:04 +0000
Manifest next update: Fri 24 Jul 2026 17:01:04 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: +Sx+ZVZTwg/c6LJF1yOJJwVMiV+VbnftpQuPRw5h7Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:70:c0:8d:cd:7a:b3:b8:31:41:63:56:3c:d5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Jul 23 17:01:04 2026 GMT
Not After : Jul 24 17:01:04 2026 GMT
Subject: CN=9adbe690c66127e34dfd6d0bb2783c3da0f8d61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:fa:3f:e9:07:9c:0c:92:a8:77:27:95:c0:
57:59:88:4c:25:35:32:b7:03:b9:aa:36:be:6e:95:
bb:b8:15:9b:e0:59:cb:40:4f:97:30:1b:35:65:96:
32:aa:42:2d:2a:84:9c:07:66:45:8b:a3:0f:50:c9:
43:33:03:81:e3:15:3f:3c:83:a8:0f:90:c3:50:20:
b2:fc:a2:4e:26:a5:32:aa:03:79:ff:c8:61:70:41:
0e:23:4d:b9:f7:79:c3:ff:36:92:8e:3e:cb:3b:eb:
70:c3:eb:37:1d:3f:80:35:67:f3:3d:51:53:b2:2d:
3b:b8:1f:b9:3a:d7:41:35:78:47:4d:1f:f0:29:98:
3b:3c:21:b3:e1:93:f2:54:00:f5:1a:b8:ba:47:ce:
00:05:b5:c8:b8:a5:4d:e4:c6:11:6f:86:bf:17:71:
8f:5c:5e:1b:bc:97:b6:31:71:15:bc:0e:37:f0:fa:
6e:46:6f:50:d1:81:a7:22:46:c5:03:cd:ae:73:b1:
1b:55:21:37:1b:fe:1e:6a:29:11:e5:58:cc:e1:2d:
89:fa:a6:bd:f3:4c:1c:08:bb:1d:99:51:ed:4a:d9:
61:f7:51:15:a9:d0:98:d8:b6:bf:87:57:87:d7:67:
9e:33:b3:b0:92:1f:44:3c:78:79:34:f2:e3:29:44:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DB:E6:90:C6:61:27:E3:4D:FD:6D:0B:B2:78:3C:3D:A0:F8:D6:1E
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a4:cd:98:5b:89:60:9e:0b:dc:3c:38:84:9c:d7:f3:6b:c7:
a0:30:82:0e:a2:9f:fd:15:d1:d0:6e:1b:14:d1:d8:eb:71:b4:
d5:20:8d:1d:7a:0d:0c:be:04:98:48:ea:ba:3e:6c:c4:58:e4:
1c:d1:8f:90:8b:89:01:07:0f:70:9c:ad:89:d2:9b:07:91:51:
e8:79:64:86:0e:c1:b7:26:02:79:ee:82:30:2f:7f:4f:82:0e:
36:53:78:19:c2:f9:53:c6:1b:6c:f7:68:00:93:3d:99:a7:6e:
43:77:47:2d:79:0c:da:de:64:b7:fe:a5:4e:69:0a:d3:21:7e:
85:50:a4:29:76:47:2b:63:fb:74:78:aa:e9:5c:b1:28:5e:05:
e3:36:7e:5e:8a:e7:ac:87:81:4a:f4:c1:4d:ce:1f:32:16:75:
25:22:04:f7:d0:f9:76:ff:78:f3:0e:2a:0b:d5:0c:47:04:f0:
2f:49:85:a9:75:ea:88:f7:bd:fe:a4:f8:60:ca:ec:2f:0e:9d:
f7:56:1f:6f:01:76:b3:ba:67:ca:09:fe:7f:f0:f3:df:c0:00:
a6:11:fa:9a:6a:82:e0:48:2f:3c:cd:a8:a5:ea:34:b5:7a:a6:
3c:81:81:cf:88:28:e9:d9:13:8c:43:23:42:4f:6b:17:81:4f:
ae:86:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:12 2026 by rpki-client