Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: BFvHYWRg1IeUfgm8+U9kaeZscyTiK0yFSVTWpOON+Io=
Subject key identifier: 09:A9:33:B7:65:54:E1:37:0C:05:E8:A4:14:C3:4F:C9:00:FA:6A:42
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019E1DFE6E621081B53ECAF4619F221F4352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:14 +0000
Manifest this update: Tue 12 May 2026 21:01:14 +0000
Manifest next update: Wed 13 May 2026 21:01:14 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 2jbejJuT70GhrZWPUR9GsY5uICkntLyZC6dE19GX3s4=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:6e:62:10:81:b5:3e:ca:f4:61:9f:22:1f:43:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: May 12 21:01:14 2026 GMT
Not After : May 13 21:01:14 2026 GMT
Subject: CN=09a933b76554e1370c05e8a414c34fc900fa6a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:a3:36:39:25:fd:c7:fd:0f:a7:37:d2:10:
c4:88:7f:f0:0e:16:7f:89:ea:d7:7f:76:f7:63:b8:
d2:d9:d6:60:b0:46:43:64:cc:e6:cd:67:ff:a1:b7:
a7:3d:7d:12:d5:f7:f6:e8:7f:22:5b:59:1f:62:9a:
97:d4:1e:42:90:b8:47:17:d2:b4:f3:1f:db:0c:8c:
05:bc:b2:18:4f:4e:11:8a:4e:57:f4:59:82:ff:0c:
30:17:7e:a5:a5:9c:b2:ad:93:eb:fe:9d:4c:b7:58:
bd:9d:53:d4:16:82:f4:d8:2f:f0:56:4c:17:18:9b:
5d:86:2a:9a:60:e9:4a:2f:25:e8:a5:eb:0f:8a:57:
50:cb:44:b6:6e:a2:d6:54:5e:79:9b:cc:d9:e9:d0:
53:23:69:11:94:d8:b0:3e:eb:0f:11:c9:f3:d2:68:
fe:29:33:40:9c:3f:ef:9a:ab:3e:d4:83:49:c8:2f:
ad:a5:8d:f3:ea:ed:8e:98:2f:62:14:4c:e4:43:ee:
1e:82:3e:31:3c:01:dc:59:21:16:7d:18:0b:f8:e7:
be:9a:ac:02:b4:8a:e8:e3:4b:a4:98:14:ba:70:d5:
3f:3a:b4:b7:b7:2f:a4:4b:9f:56:18:87:8d:d3:4a:
39:5a:63:c9:8c:d9:e8:cc:45:04:d8:f8:54:ba:87:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:33:B7:65:54:E1:37:0C:05:E8:A4:14:C3:4F:C9:00:FA:6A:42
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9e:cf:aa:8c:1c:19:f7:8a:45:cc:cb:47:55:75:5e:11:32:
3c:91:35:15:09:43:d7:b4:8a:e6:7b:7e:f6:36:5d:03:4b:64:
9e:72:a0:da:db:26:a2:d5:f0:cf:39:dd:d0:a7:6f:ed:4d:b3:
f6:70:8e:1d:19:ea:e2:95:c1:42:2d:45:74:7b:4a:fe:20:f8:
13:eb:a6:c4:23:bb:0d:29:65:79:0b:3e:be:ad:69:55:ea:1f:
cc:4c:52:69:35:1c:a9:ea:3e:d9:fd:bf:d9:44:41:cc:10:23:
63:f0:40:28:81:6c:2d:57:ec:46:24:4f:19:63:ff:2d:ac:78:
2f:e9:43:72:d7:4d:df:88:3e:9c:92:ae:b3:98:05:9f:d2:1b:
88:36:77:c4:f4:60:34:3e:94:98:dd:f2:ee:7e:fd:f1:55:ea:
8d:5a:8b:d7:9b:a9:4a:c3:8a:9d:c2:30:d5:ee:c6:d5:3c:f7:
07:4e:29:48:b0:c3:1a:0f:c5:17:b4:c4:45:8a:48:20:2e:ae:
2d:15:62:f1:a0:b8:8c:d6:b0:25:82:f9:f4:17:a5:a0:bc:1c:
9b:28:52:46:da:56:62:93:a1:5a:79:39:51:ef:ac:ee:4b:71:
60:b0:79:8b:26:77:45:01:f2:b0:50:de:d6:53:69:6a:70:fe:
6e:2e:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:58 2026 by rpki-client