Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: sBWeEdxbyRuoOf7yP5Ggz5aGq7W91mx4LwQBEj5x0p8=
Subject key identifier: C8:B2:23:5E:87:FA:4E:B5:9B:BB:C0:EB:24:86:75:DF:A2:AC:D2:A3
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 01A1758244A136F9E9FBFD8AA26C32DD1700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 067D
Signing time: Mon 26 Oct 2026 00:00:33 +0000
Manifest this update: Mon 26 Oct 2026 00:00:33 +0000
Manifest next update: Tue 27 Oct 2026 00:00:33 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: G8KUZ5M+Y5dt8WUZG1Oy7/AErW2N7jbBmSQdQuhsFcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:44:a1:36:f9:e9:fb:fd:8a:a2:6c:32:dd:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Oct 26 00:00:33 2026 GMT
Not After : Oct 27 00:00:33 2026 GMT
Subject: CN=c8b2235e87fa4eb59bbbc0eb248675dfa2acd2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:b5:0b:60:97:87:8d:64:09:3d:c0:98:74:
e9:00:0a:9e:82:0b:c9:16:c1:5d:68:74:6e:32:d9:
ae:45:0c:dc:e7:2a:a2:0e:78:06:ac:75:43:6b:5d:
74:db:47:10:6d:fa:28:c1:a3:5f:b4:80:c3:9c:c3:
65:d0:e4:5a:50:f6:d1:b8:13:7a:2a:25:cf:e0:04:
69:b9:dd:57:d9:f9:00:8b:44:24:12:0d:ec:4d:4e:
3d:c7:19:f6:96:1e:f9:50:e5:92:53:e9:b5:02:39:
22:48:14:43:ec:39:6d:4a:37:24:16:c1:9c:cb:c7:
a8:a7:c7:6f:93:5f:9a:d2:f5:11:63:61:ef:a5:18:
a0:47:0d:a6:5b:07:b8:25:ae:8f:5b:3b:4e:2f:1b:
be:1f:f6:3e:b4:8c:a3:78:60:73:10:be:b3:50:06:
2c:1e:9b:4a:e8:89:46:dd:c9:99:fc:57:d8:91:a9:
8b:5f:1c:ca:4c:53:1f:fc:a0:d0:e1:d7:06:cd:f0:
c9:cb:4b:59:34:2d:22:60:b1:f9:80:44:d3:76:9a:
76:48:5b:95:b8:ad:97:a5:13:9f:51:ac:c2:b9:9f:
a2:10:ec:f1:e2:fe:ae:ad:5a:36:89:d1:70:4c:ff:
f5:44:66:dd:0c:10:e1:62:dd:3b:9e:ed:3b:1a:bf:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:23:5E:87:FA:4E:B5:9B:BB:C0:EB:24:86:75:DF:A2:AC:D2:A3
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:dd:b2:a9:ba:bc:d7:74:20:49:c9:a5:65:16:8c:1c:30:96:
b5:5b:d3:c8:4c:88:4f:95:c7:9c:2c:a3:93:6e:2d:cd:1d:61:
45:da:72:fa:be:42:70:b7:34:ba:b1:f6:6f:6b:ee:57:8c:6d:
f8:a4:7a:0e:0d:b0:92:4a:a2:c7:8b:f2:6a:2f:b8:33:9c:c1:
90:cd:fc:33:71:2a:c3:98:17:29:58:86:00:a8:22:c5:de:70:
0f:f5:3f:26:0c:67:8d:18:80:be:29:88:76:b9:fe:cb:91:45:
70:5c:d3:3c:84:ac:5e:8a:9c:50:54:42:d3:3f:a5:fe:80:18:
ef:36:e3:e8:f3:45:a6:f7:20:da:04:72:22:58:92:34:30:9a:
28:4a:8a:19:34:6d:44:a1:80:ed:69:c6:aa:3a:4f:5e:bb:47:
05:5f:b5:0e:6e:5b:ac:55:03:47:e0:87:58:7e:16:cb:2f:28:
dc:42:dd:f0:7e:4c:ed:05:b9:a6:19:1c:dd:f4:8c:50:93:e3:
de:aa:5b:e5:04:9b:c8:d3:fd:0a:3e:8f:a7:04:83:e3:cb:96:
cc:cf:ff:28:70:76:58:f3:54:75:0f:25:56:dd:19:10:e9:99:
a0:e7:41:70:82:db:29:b2:a3:17:6e:a1:96:1b:fb:70:39:46:
7e:75:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:41 2026 by rpki-client