Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: 4+TaOi6EYDxj4g1AQ40r5Std5sDNCMbLKXLJX4xyC28=
Subject key identifier: D1:B4:92:B9:27:B0:20:DC:D9:36:BD:B0:6D:5C:00:24:BA:EB:48:AD
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01A0E0CF6144B59BC73E69361DB575E89D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 03:01:22 +0000
Manifest this update: Sun 27 Sep 2026 03:01:22 +0000
Manifest next update: Mon 28 Sep 2026 03:01:22 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: TWVUTfNmAo43gTPTGSGR2TQk7mKJMi7JTlS9hRqMrFY=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:61:44:b5:9b:c7:3e:69:36:1d:b5:75:e8:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Sep 27 03:01:22 2026 GMT
Not After : Sep 28 03:01:22 2026 GMT
Subject: CN=d1b492b927b020dcd936bdb06d5c0024baeb48ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:1c:8a:b3:38:ec:7a:47:05:d5:6b:60:48:
0f:3e:fa:48:ff:94:63:8c:04:e5:4c:f7:80:f8:ac:
37:4f:e2:27:f3:1c:08:2f:94:a2:e7:32:72:6b:ed:
07:9d:59:c6:d8:37:bf:3c:c5:65:6b:08:17:ae:a3:
b8:66:d0:2c:e5:2d:cf:ee:1c:b5:57:16:22:b8:67:
eb:3d:26:c2:c2:0a:46:29:e9:b4:c6:4e:ac:5d:1c:
e3:70:45:66:9b:77:f0:f8:3f:0b:2f:97:f9:a3:93:
7f:14:4c:c7:f9:ce:71:f3:86:d5:15:59:5c:ce:1c:
2e:f1:8e:92:ae:a9:75:5e:12:b9:be:a4:a6:e4:57:
bf:ea:05:59:83:dc:69:78:e6:db:c9:ea:94:53:d3:
ad:76:31:59:a1:ea:39:02:6e:33:ff:d5:65:40:34:
76:47:79:ba:7b:07:be:93:cb:a8:3c:a7:d5:7f:0b:
01:d7:db:d5:f1:86:90:da:71:b0:cc:7b:36:36:f7:
b3:64:b5:49:7b:e1:07:10:a6:24:77:bf:34:e7:f1:
ff:29:02:11:06:a3:81:59:46:70:c7:c3:a1:fe:18:
8d:af:ae:db:e8:95:d1:97:ad:af:84:7d:33:8b:60:
2b:8d:96:ad:de:55:1d:31:25:29:53:04:d8:8c:75:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:92:B9:27:B0:20:DC:D9:36:BD:B0:6D:5C:00:24:BA:EB:48:AD
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:06:2d:a1:ec:0b:4f:67:2f:6e:d8:5c:8c:e0:50:1a:d8:19:
47:bc:68:56:1e:d8:7e:b3:52:02:27:c4:d8:a5:df:37:d9:70:
e1:5f:38:d7:8a:37:a1:16:59:0b:e7:7f:9c:e8:8c:39:c4:49:
a2:fb:25:b4:dd:9c:73:1a:9b:8b:ff:4d:b9:7d:63:c6:75:b3:
c2:7c:65:cc:9b:d6:e2:f6:03:4a:0e:56:e0:3b:f4:97:1a:dc:
6e:e6:40:29:42:9f:88:d7:73:4f:a9:44:cc:52:37:77:4a:61:
fb:b4:e3:a3:f0:fa:5e:b0:65:ec:d5:a1:20:ba:e2:93:83:be:
4f:ef:f3:18:1a:bf:14:1d:eb:76:ba:69:d3:cf:9a:9e:80:e3:
e3:cf:3c:1b:02:04:cc:51:64:23:a0:b0:03:99:54:95:ef:92:
6d:e3:14:c1:3f:cb:00:3d:0d:3a:8d:72:a8:64:39:7e:c3:1c:
38:b1:6d:48:26:ff:41:c9:b7:98:15:96:6e:cd:5e:08:65:98:
64:9c:2d:b3:d6:d8:f9:2a:4e:ef:5f:81:7d:b4:27:0d:e8:12:
53:0b:8e:7a:ba:5a:17:d2:83:2a:2a:70:2d:c3:75:3f:57:cc:
12:b5:66:6f:0a:e6:00:32:75:52:1e:18:db:4e:ba:fc:ff:b7:
90:b7:d8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:15:09 2026 by rpki-client