Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: YdGdRtxt5bjj/ishU7BZNQklc4pcgKfMZmSYkkX+8BU=
Subject key identifier: 64:6B:76:03:68:AC:3B:D0:0D:9E:3E:DF:A0:2D:D1:03:D6:B0:15:4B
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 01A13E25BF73F6114D1DF29D5BA3D5067C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 10B9
Signing time: Thu 15 Oct 2026 06:00:23 +0000
Manifest this update: Thu 15 Oct 2026 06:00:23 +0000
Manifest next update: Fri 16 Oct 2026 06:00:23 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: wHGBxiaMkd2I6X+YSAkmEMnTifSrOX5TkPz511nlGyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:bf:73:f6:11:4d:1d:f2:9d:5b:a3:d5:06:7c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Oct 15 06:00:23 2026 GMT
Not After : Oct 16 06:00:23 2026 GMT
Subject: CN=646b760368ac3bd00d9e3edfa02dd103d6b0154b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:01:c0:06:bc:f7:b4:e9:81:17:d5:b7:ab:
a7:e0:46:50:53:c7:c1:5f:c9:d5:d0:8b:ad:73:1d:
b3:19:05:33:5c:68:fb:a0:2f:75:4a:5d:e5:e2:e5:
8c:41:fc:c3:af:f4:47:3b:27:e2:6e:ab:d0:81:56:
40:03:b6:5c:49:95:5f:d8:45:c1:e4:da:b0:83:ee:
27:5c:e4:8e:e2:9d:ce:c5:ab:22:cf:f6:42:f8:25:
2b:ec:23:af:ea:10:6d:10:dd:7b:24:dc:64:a7:97:
1b:1d:96:ab:a7:be:35:ac:4e:73:82:df:21:ae:0a:
8b:cf:f2:20:18:40:68:6d:4f:f2:05:46:3a:44:27:
60:a6:1d:56:44:52:98:88:ef:75:dd:bb:c1:96:d1:
5e:e2:af:34:47:44:90:de:6a:a7:d8:ff:d2:3e:96:
11:32:d1:f0:64:5b:64:02:32:e9:4c:dc:7f:d7:ee:
c7:77:a0:c0:a8:7b:06:82:d6:f9:12:18:7f:75:ca:
09:fe:42:3e:15:67:b4:90:fe:49:9e:df:96:ab:ce:
5d:bb:6d:01:d3:36:b7:a6:de:63:7a:4e:d5:ed:fa:
a4:56:62:42:a5:a5:a0:62:c8:56:3e:0e:c3:eb:86:
d9:65:f0:0e:26:44:bd:f8:f6:d3:c3:a0:46:12:16:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:76:03:68:AC:3B:D0:0D:9E:3E:DF:A0:2D:D1:03:D6:B0:15:4B
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5a:af:1a:bf:cd:38:9a:73:ec:f7:1b:6d:f8:77:a6:1f:30:
28:79:a6:87:ef:1e:e7:1b:23:fc:e6:d5:ad:eb:da:8c:3e:e2:
94:95:87:6c:ee:55:88:4e:66:0d:8b:a6:f1:eb:b3:19:02:e5:
af:b3:db:63:34:1f:22:f5:35:90:0d:b9:4c:23:2a:76:4b:5c:
8d:85:f4:7a:61:db:6e:dc:de:29:69:06:55:40:16:27:40:1d:
b9:b6:79:07:78:f6:cf:08:7e:16:20:a3:ab:dd:df:0a:e8:b7:
2b:8d:af:3b:7c:f4:a0:07:b6:38:ce:84:ae:ca:2d:1e:4c:7d:
df:99:8f:72:9b:2f:09:9f:09:c7:e8:03:c9:01:ea:c3:4e:de:
b5:1e:c2:1d:f1:e0:c1:71:68:35:88:c1:1d:a6:9f:4f:c7:5a:
08:b3:6b:88:33:82:f6:be:ce:92:11:61:4c:2f:7f:b1:ef:20:
03:cb:9b:9e:32:5e:7c:08:ea:30:e9:01:50:10:87:33:3d:e8:
38:9d:fb:30:df:62:47:62:1b:4d:28:f1:3f:4f:1a:08:b6:17:
17:7c:58:a2:65:82:74:b5:f6:7c:a9:64:d7:b4:78:24:af:73:
a8:9f:35:6f:53:ae:53:28:19:af:a2:7d:09:be:94:50:b1:ec:
6c:51:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:26 2026 by rpki-client