Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: NgyrQe+q6nO04Cpg7UBul66QmEB6pHpdndclJlEUkoo=
Subject key identifier: F4:E5:4A:23:19:B5:25:FE:E3:2D:22:19:88:0B:E5:C3:9A:28:72:A7
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019F17C2CC982747FEBBBEF37CEE9AC8A634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0F9C
Signing time: Tue 30 Jun 2026 09:01:10 +0000
Manifest this update: Tue 30 Jun 2026 09:01:10 +0000
Manifest next update: Wed 01 Jul 2026 09:01:10 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: xIG35VPgaySj+wJkJ8R2GoskJxCwjfvhaED6XDhxa0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:cc:98:27:47:fe:bb:be:f3:7c:ee:9a:c8:a6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Jun 30 09:01:10 2026 GMT
Not After : Jul 1 09:01:10 2026 GMT
Subject: CN=f4e54a2319b525fee32d2219880be5c39a2872a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:c6:82:3e:38:b7:6d:c7:0d:7e:90:2b:56:
14:09:c9:62:b7:49:97:56:4a:d5:14:9c:02:3e:ec:
b6:f3:b7:d0:d0:6f:06:55:5e:66:6b:1f:57:c6:92:
1e:32:20:c1:a3:2e:56:64:5c:df:bc:39:90:55:7d:
c5:05:71:05:25:85:33:21:ff:21:05:78:bc:da:3f:
c5:d7:e6:7f:c6:ba:5f:7e:8c:dd:60:5e:a1:27:b0:
04:62:c3:51:ba:8e:5f:58:19:20:9f:dc:29:de:03:
c1:a5:ec:e8:e0:3d:cd:02:b0:8a:64:35:b6:99:e2:
a5:32:ea:c4:88:0d:6e:56:45:57:68:05:74:17:d8:
fc:b6:d4:f4:00:f3:73:33:99:3f:e2:df:cf:d1:bb:
c2:51:02:8c:51:a9:94:6f:b5:1b:7b:8d:8a:e5:09:
ad:8a:78:11:8e:52:6d:08:b2:ce:31:1b:02:90:db:
8b:4f:53:7d:24:57:38:78:de:2b:74:47:58:75:de:
83:f1:5f:c0:03:69:bc:2b:2b:f9:94:d7:44:2f:8e:
43:ad:5a:c3:8d:6b:54:9e:07:80:b0:b0:ed:a6:87:
a5:6b:c3:23:90:3e:ff:17:35:9f:c1:6f:6d:9d:6b:
a1:9f:27:e7:48:0d:42:ee:ff:b2:a0:a3:6b:92:87:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:4A:23:19:B5:25:FE:E3:2D:22:19:88:0B:E5:C3:9A:28:72:A7
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f9:f7:73:f0:e5:d5:1f:62:b9:ab:bd:a6:52:3a:5e:5c:fd:
e4:fc:a8:d6:06:09:2c:51:4c:1c:ac:a3:16:e5:4c:11:f9:93:
58:c2:a6:30:6c:f5:df:ab:ab:75:ba:48:d6:98:07:9c:a4:02:
8a:a2:5a:1a:19:4f:0f:f7:b2:98:4e:cb:de:c8:fd:d0:af:68:
88:d5:43:2a:c7:91:49:8e:82:2e:df:1b:7f:59:da:d6:19:f8:
ab:28:73:ff:8c:71:b0:05:93:c3:e3:aa:34:2a:3e:53:bc:7e:
0a:44:cf:cc:b0:d5:77:4e:97:3d:f1:49:21:91:fc:83:19:36:
50:c7:ae:ce:ca:e2:59:12:49:53:75:7a:66:24:62:c8:25:94:
ff:8b:d0:b1:f7:52:e6:bf:c5:eb:18:8c:18:3c:73:ce:84:72:
e8:82:a0:0f:b3:8d:6e:83:ee:c3:b4:78:e3:4e:3b:51:62:43:
f9:30:83:8c:22:d6:15:5e:e5:ab:29:1e:74:86:bc:49:ca:35:
5b:12:8a:8a:50:30:35:9f:57:96:45:43:c2:8c:19:ca:37:a1:
25:c3:1a:e9:50:ff:68:ec:d8:d0:5c:67:2d:94:20:cc:34:88:
56:ed:7f:22:bf:48:8d:43:dd:b7:63:a8:72:eb:d7:04:90:a1:
39:22:60:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwsyYJ0f+u77zfO6ayKY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw
N2FjN2QwHhcNMjYwNjMwMDkwMTEwWhcNMjYwNzAxMDkwMTEwWjAzMTEwLwYDVQQD
EyhmNGU1NGEyMzE5YjUyNWZlZTMyZDIyMTk4ODBiZTVjMzlhMjg3MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHnGgj44t23HDX6QK1YUCclit0mX
VkrVFJwCPuy287fQ0G8GVV5max9XxpIeMiDBoy5WZFzfvDmQVX3FBXEFJYUzIf8h
BXi82j/F1+Z/xrpffozdYF6hJ7AEYsNRuo5fWBkgn9wp3gPBpezo4D3NArCKZDW2
meKlMurEiA1uVkVXaAV0F9j8ttT0APNzM5k/4t/P0bvCUQKMUamUb7Ube42K5Qmt
ingRjlJtCLLOMRsCkNuLT1N9JFc4eN4rdEdYdd6D8V/AA2m8Kyv5lNdEL45DrVrD
jWtUngeAsLDtpoela8MjkD7/FzWfwW9tnWuhnyfnSA1C7v+yoKNrkofYFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTlSiMZtSX+4y0iGYgL5cOaKHKnMB8GA1UdIwQY
MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct
ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1
LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/n3c/Dl
1R9iuau9plI6Xlz95Pyo1gYJLFFMHKyjFuVMEfmTWMKmMGz136urdbpI1pgHnKQC
iqJaGhlPD/eymE7L3sj90K9oiNVDKseRSY6CLt8bf1na1hn4qyhz/4xxsAWTw+Oq
NCo+U7x+CkTPzLDVd06XPfFJIZH8gxk2UMeuzsriWRJJU3V6ZiRiyCWU/4vQsfdS
5r/F6xiMGDxzzoRy6IKgD7ONboPuw7R44047UWJD+TCDjCLWFV7lqykedIa8Sco1
WxKKilAwNZ9XlkVDwowZyjehJcMa6VD/aOzY0FxnLZQgzDSIVu1/Ir9IjUPdt2Oo
cuvXBJChOSJgKg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:21 2026 by rpki-client