Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: Z6CP2gJKEW6D1E+QZyUGBn2RenA7bF01S64P1VNxqMs=
Subject key identifier: 6E:F0:05:DF:ED:35:8B:7D:92:7A:0F:6D:59:5C:E1:6D:7C:D4:EE:99
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019F84C451683B97C65B3CB6974FF359BA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 06A3
Signing time: Tue 21 Jul 2026 13:01:25 +0000
Manifest this update: Tue 21 Jul 2026 13:01:25 +0000
Manifest next update: Wed 22 Jul 2026 13:01:25 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: hOOT0YRKJlpL8JgNePjqdjfdIi89gOsMs1PN9EX6q4M=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:51:68:3b:97:c6:5b:3c:b6:97:4f:f3:59:ba:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jul 21 13:01:25 2026 GMT
Not After : Jul 22 13:01:25 2026 GMT
Subject: CN=6ef005dfed358b7d927a0f6d595ce16d7cd4ee99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:81:73:cf:57:4b:10:72:75:dd:90:e9:b0:
55:66:b4:78:76:1e:f8:07:46:a6:7f:ba:32:a1:0f:
c6:7b:3f:e8:33:8d:6d:4b:65:20:b8:57:c4:e7:92:
0c:b9:62:5a:6e:6f:46:42:9f:a8:16:7b:84:62:80:
7f:77:c1:f1:50:97:e8:9d:4d:76:76:d5:25:f7:62:
7d:eb:1f:5c:67:df:eb:73:d0:52:4f:30:8a:b5:54:
dd:cd:b5:b3:dc:62:fd:ed:50:33:ac:4a:86:93:b0:
6b:3f:c0:b9:87:16:81:0b:8f:47:28:2d:ba:28:8d:
0c:2e:55:5a:49:d2:ec:ce:e1:30:81:3d:e4:97:6b:
e9:31:7f:f7:9f:eb:31:f0:c3:6d:38:0a:cd:a2:57:
c6:61:81:7d:67:39:16:21:94:10:84:8d:3c:48:bc:
ee:72:5d:c8:20:34:0d:0c:a0:2c:87:8f:d3:53:67:
a1:ab:52:2b:00:5d:e6:70:9f:66:18:c2:3f:09:68:
57:93:18:b6:f2:1d:98:e8:8a:f9:99:64:13:40:dc:
42:af:ef:e5:e1:92:84:2e:de:36:82:73:d2:fc:02:
56:39:6a:a0:7a:3f:c3:9b:c5:13:4e:d1:3c:ae:79:
3b:20:67:27:3a:e0:ee:c1:51:9b:6e:da:c2:e1:7a:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:05:DF:ED:35:8B:7D:92:7A:0F:6D:59:5C:E1:6D:7C:D4:EE:99
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7e:b4:db:3a:1b:7a:57:06:4a:a1:b9:70:4b:6a:df:9b:53:
1d:5f:eb:e0:f1:4f:4f:0d:62:dc:20:24:0a:59:04:9d:48:a2:
18:da:13:71:90:79:bc:15:0a:66:7e:23:fc:39:44:4f:c9:95:
07:c6:fb:69:6a:af:cf:bb:b6:9c:26:a3:05:6b:42:07:8a:77:
c8:ca:d4:54:9f:c8:ad:f4:8f:f2:0b:f6:9f:bd:d2:43:0f:59:
6a:dd:25:da:e3:20:cf:8a:93:40:d6:3e:b2:20:63:ad:c7:1d:
0b:29:c0:70:04:06:be:f6:66:8c:cf:cb:e9:d1:7b:ca:46:74:
62:4f:ff:09:19:09:ce:56:7e:ad:8f:c2:cd:e5:53:85:01:dc:
be:37:ff:e7:99:24:80:51:59:7b:00:bf:4c:53:ac:76:be:c9:
48:2b:39:1f:1c:04:50:1f:03:62:91:3f:b3:a7:fe:6f:21:12:
0c:5d:9b:7b:95:73:68:d1:c3:1f:f2:7c:d5:9a:d9:e2:c5:c2:
ae:5d:5e:05:de:1f:2d:94:66:9f:8f:18:71:3d:14:59:05:2b:
65:e4:c0:3d:93:62:82:4c:6a:89:93:2f:37:e0:20:1d:e8:81:
c4:6b:b0:57:ef:d8:e2:a9:51:cc:ad:7f:ca:9a:37:35:31:47:
99:97:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:57:38 2026 by rpki-client