Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: TqxdW3f4HKUs6q5AMQPw1uJvGSxQK/UoRlo8/f18OQM=
Subject key identifier: 55:6A:D6:C7:5F:DC:CE:C6:BF:31:E8:EF:DE:9B:85:C0:01:6F:3C:90
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 01A171A576BC907093142A580536932158AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 067B
Signing time: Sun 25 Oct 2026 06:00:31 +0000
Manifest this update: Sun 25 Oct 2026 06:00:31 +0000
Manifest next update: Mon 26 Oct 2026 06:00:31 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: /ybpKKgkCVgKlboM8q4d3cN9uzSe0ygnFRQvjMRnMX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a5:76:bc:90:70:93:14:2a:58:05:36:93:21:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Oct 25 06:00:31 2026 GMT
Not After : Oct 26 06:00:31 2026 GMT
Subject: CN=556ad6c75fdccec6bf31e8efde9b85c0016f3c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:b3:3a:ab:bf:f1:ad:67:7a:24:2e:db:41:
2c:ce:a6:7c:f6:41:81:39:e1:75:23:1f:87:49:f5:
fb:95:9c:39:c8:e2:b5:92:18:81:bd:69:9c:24:b7:
22:b0:7b:6a:f9:58:f1:af:6e:da:64:57:ee:3b:44:
d5:9c:f2:3a:8b:87:d3:d4:8a:c7:b9:48:1b:8a:48:
7b:57:61:cf:c2:89:5f:d2:5f:d7:f8:80:c2:11:b9:
20:66:7b:a1:25:58:17:34:44:ba:5f:c1:e1:81:41:
4f:84:45:ff:0d:a2:67:50:12:fa:24:28:93:24:52:
50:8f:ae:b1:d8:60:72:fa:f6:67:18:d9:cc:b3:70:
72:bd:e6:4e:57:93:0a:b1:e7:1c:3c:05:52:ee:7c:
0d:70:13:96:47:4c:aa:3f:14:74:b5:c1:55:7b:f7:
4e:94:e2:d4:2b:74:42:f2:33:a7:b4:ee:f8:d6:8b:
6b:02:4e:74:51:f7:c7:83:8e:70:b9:aa:05:47:a7:
9a:78:50:b0:49:dc:de:bc:a6:2f:35:20:a1:30:c4:
3b:ff:46:e8:95:28:cd:66:e4:04:2e:44:4f:2c:49:
95:4b:25:df:47:81:e1:47:35:ff:a5:a1:ab:90:9f:
e7:73:75:a5:f5:74:0d:de:bc:bb:c6:d4:03:74:fa:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:D6:C7:5F:DC:CE:C6:BF:31:E8:EF:DE:9B:85:C0:01:6F:3C:90
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:86:8c:91:5d:4f:1b:ea:e9:0e:49:66:43:e0:ea:bb:be:54:
b1:0a:83:a5:4a:de:de:da:32:92:c3:2e:ff:c5:7f:a6:0f:db:
72:9a:ee:4d:2d:6b:61:77:4e:d7:eb:55:02:ec:6e:ec:90:51:
16:2e:1a:db:54:50:f2:a0:1d:87:d6:46:03:55:2e:5e:6b:ac:
e1:a9:02:39:4f:f8:6c:82:8f:eb:55:ef:d3:e0:6e:9b:2d:15:
12:9c:f6:d6:7d:ef:d1:f9:5c:f6:ae:bd:c3:df:c3:73:61:cc:
bc:e1:4a:9d:3d:df:d3:55:0c:22:0b:f1:aa:6f:81:57:fc:ab:
33:c5:31:01:48:51:6e:04:8b:34:f9:93:b9:9b:07:06:48:cf:
4d:0b:1d:c0:b9:f3:5a:f4:73:29:d3:1b:05:3b:8d:8e:e4:6d:
62:1e:45:03:66:e7:63:ba:a2:5e:a7:c8:bd:95:68:cd:dd:fe:
38:25:1b:b5:da:52:95:97:44:cb:be:bf:e7:72:fa:b8:b0:ba:
56:4c:9b:6f:df:85:52:50:36:fa:f6:ef:59:60:a7:68:d4:b5:
fa:f7:db:fe:a8:34:43:4f:fa:5f:4e:fe:0c:73:59:1c:7e:19:
f8:46:57:44:07:32:ce:9b:26:fd:29:5b:90:71:dd:0f:80:5e:
3b:14:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 12:34:09 2026 by rpki-client