Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: pZEgVtqeyo+seUsllR8i390MJWzckVmyoE/oYdgqhFQ=
Subject key identifier: BB:7F:16:E6:30:DE:D1:F3:6E:1E:19:21:A2:6F:8A:F3:57:A8:85:1A
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019E91DC9948EAA5D13EC18B0DA85B408959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 04FE
Signing time: Thu 04 Jun 2026 09:00:13 +0000
Manifest this update: Thu 04 Jun 2026 09:00:13 +0000
Manifest next update: Fri 05 Jun 2026 09:00:13 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: eTGyffjZBvEmrj3hnWUWmScn3kGAX6ei0A3va+f9zm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dc:99:48:ea:a5:d1:3e:c1:8b:0d:a8:5b:40:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Jun 4 09:00:13 2026 GMT
Not After : Jun 5 09:00:13 2026 GMT
Subject: CN=bb7f16e630ded1f36e1e1921a26f8af357a8851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:08:45:09:19:91:1f:7a:b4:67:92:ac:59:
54:5b:b1:bd:6e:92:6e:e7:bb:a6:c9:30:a3:85:a8:
ac:df:b8:82:4a:fa:bf:97:1a:9e:e4:72:c5:c1:c6:
cf:86:db:a6:04:c4:ce:a8:f2:23:34:7f:9c:e0:44:
0c:9b:76:2d:f0:17:cc:53:1f:60:4d:23:74:43:8f:
da:71:4e:f9:91:2c:14:77:2e:7a:0d:5d:5d:02:4a:
dd:70:05:fa:34:81:b0:21:fd:d1:cf:32:e8:1c:41:
ac:72:f0:70:a0:69:7b:7c:28:fe:93:e0:34:22:90:
25:30:db:1c:87:5f:68:ac:03:42:04:fb:14:13:2e:
e1:1a:83:71:1c:7f:21:22:61:60:82:a4:1e:eb:d5:
1c:cf:41:32:de:b9:90:de:06:65:5c:56:67:8f:04:
31:0d:10:eb:31:2f:d6:e9:7c:44:cd:7e:e6:f4:eb:
3e:22:bf:95:7f:78:cd:f7:f5:ee:07:7e:cd:9d:a2:
91:fa:f5:82:e8:7f:06:57:89:c6:b4:0c:46:35:5b:
41:db:a9:09:83:82:d5:53:47:03:71:e6:d7:45:13:
f4:91:40:ec:82:4f:a8:60:7a:63:1b:89:8c:e4:75:
0a:8d:34:7d:cc:8f:7b:a6:f7:57:ba:aa:de:07:2e:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:16:E6:30:DE:D1:F3:6E:1E:19:21:A2:6F:8A:F3:57:A8:85:1A
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:df:73:74:7a:06:50:f2:03:0c:77:dd:98:7b:4e:fe:15:3a:
13:51:34:21:b7:90:5e:15:42:0f:e1:2c:3a:39:91:82:97:04:
df:5e:8a:98:c1:9c:3a:ef:95:8d:b5:35:a0:b3:fe:2f:0b:17:
1d:c7:3d:ef:62:e3:72:1f:43:43:06:38:ff:49:75:04:25:fa:
84:b1:40:b9:cf:e1:6d:a1:98:10:36:a5:a7:c4:53:4c:04:8f:
e4:5d:f0:3d:7b:13:8f:91:7d:00:05:85:13:cf:2a:2d:e7:cf:
20:cb:f0:f6:99:d4:e6:3a:72:51:71:47:8a:cc:85:de:07:34:
b6:c1:39:76:80:a3:97:2f:f4:ea:f5:b5:93:9c:10:e1:db:05:
ad:27:19:b3:30:7a:a8:cc:db:3e:ef:af:1d:82:59:2e:b4:11:
26:50:86:2d:df:a8:9c:dd:e2:9b:76:80:0a:b7:b9:5d:b6:a1:
05:78:4a:92:d9:07:a2:2d:90:42:e3:15:59:c7:6f:57:95:a9:
82:d5:d4:28:34:b8:6a:c4:86:e3:a6:fb:47:0b:8d:4d:b4:c1:
6f:62:73:f9:fb:46:36:89:0b:08:de:5e:f2:3e:23:34:19:c3:
6b:7b:23:c3:ed:90:52:e7:e0:d7:25:e3:a1:07:6b:8b:94:f4:
90:56:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:00:55 2026 by rpki-client