Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: /TDa7YoMMj5RF2u/jtf0h85xzoPpjg4P3WNw68axZxE=
Subject key identifier: 28:B1:23:22:25:30:2A:9C:11:6F:85:1C:B1:A6:11:50:2B:83:E8:BA
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019D38D2A9D3F295684924D1A90826518AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0EA4
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: KSLVJHxugbGgnLQh5qf9J9L8m1pOL/MQ/iDg7urItIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a9:d3:f2:95:68:49:24:d1:a9:08:26:51:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=28b1232225302a9c116f851cb1a611502b83e8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:a6:3c:78:cb:4e:42:cf:99:99:4b:e2:81:
97:bf:05:c2:bd:6a:dc:14:9e:a8:ef:45:98:44:75:
9c:fc:dc:43:ed:aa:e6:1c:eb:08:bb:65:b9:12:43:
0a:e5:2d:f3:e8:7c:f0:b0:fe:85:fb:32:10:42:b5:
e0:f1:18:86:d2:1c:d9:2c:84:8e:09:a8:ee:c1:0f:
04:fa:ca:2a:8e:f3:f2:c2:26:08:5d:9f:4d:cc:5d:
5e:70:eb:a1:d7:2a:05:b6:2f:26:c0:09:a2:ea:63:
02:b5:b6:9f:a5:4e:05:20:ec:fa:38:10:33:c6:e2:
89:d8:5c:1e:dd:3f:b1:ed:3e:92:13:0d:8a:59:72:
4e:e7:cd:df:d0:e8:ad:6a:1b:37:fd:d3:b1:4d:94:
7b:3a:e9:72:65:79:91:65:c2:99:8f:2a:f2:2c:bb:
c3:a8:48:21:26:ff:39:0e:4e:81:a2:1d:a2:d8:ee:
1e:6d:a7:0c:df:b0:31:10:27:c0:15:55:ca:b8:56:
3d:5c:db:01:69:a3:fd:41:ea:39:6e:96:85:1e:62:
f5:70:f2:d8:e1:f3:a1:d3:4c:f3:30:24:b6:96:24:
64:43:a2:8f:e0:b1:11:f1:b0:b4:05:f8:74:94:75:
da:18:d2:d2:af:5d:27:f8:36:b7:19:aa:80:dc:4b:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:23:22:25:30:2A:9C:11:6F:85:1C:B1:A6:11:50:2B:83:E8:BA
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8b:19:02:f0:6b:cb:ca:a2:f0:50:83:2d:6e:5f:73:ed:2b:
f0:b4:ae:ae:db:61:44:b0:7e:8b:87:c9:65:74:04:18:66:1c:
a8:50:21:bf:4b:f3:a1:a0:ec:5f:cf:cf:44:bf:2c:75:55:b0:
cb:31:a2:e7:93:13:ca:2e:9e:21:25:17:c0:f8:db:b7:09:e9:
84:ea:8b:cb:79:95:3d:b1:fa:66:76:01:cb:7f:2a:3b:3a:a2:
66:ff:23:fe:cb:e5:86:7a:16:d5:75:8c:1c:1d:a3:d8:87:9e:
4f:b9:51:0d:40:97:84:84:60:60:09:12:9b:a6:8c:62:e7:56:
bf:ec:73:91:76:be:60:ec:f0:84:3a:42:32:ca:74:00:fd:e5:
b3:80:05:ab:5e:b9:fb:58:fb:10:b9:8d:ef:78:56:08:3e:cd:
b6:7a:b9:e9:5c:c4:d0:93:9e:d8:f6:ff:70:48:0b:4a:c6:4b:
b2:2a:bc:4a:51:b0:1f:62:ad:3e:54:ed:4e:0e:20:39:84:a4:
c3:7f:ad:a4:e0:34:f3:5e:15:46:8c:2f:09:f1:b5:d5:89:61:
8c:db:a7:97:d8:08:24:ba:ae:d1:1b:5a:50:f5:b5:8f:ef:ae:
04:00:af:5e:82:77:8c:2c:73:a1:13:e6:0d:a9:a6:32:0d:9e:
41:da:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:39 2026 by rpki-client