Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: 2EgfYWmax1A47S8CX+LfsC8o5kc3SYTxnw8wvhezv+Y=
Subject key identifier: 31:0D:3E:D1:B6:BD:1C:69:6E:45:ED:0F:28:A8:47:5C:44:86:16:EC
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 01A001DD0BDD2B63B112CCFD7D35F248757F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 20:00:58 +0000
Manifest this update: Fri 14 Aug 2026 20:00:58 +0000
Manifest next update: Sat 15 Aug 2026 20:00:58 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: 3c+I7N6YJA9SkIqHA0rS0wXs7+VSF/IHBHIMC4uabxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0b:dd:2b:63:b1:12:cc:fd:7d:35:f2:48:75:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Aug 14 20:00:58 2026 GMT
Not After : Aug 15 20:00:58 2026 GMT
Subject: CN=310d3ed1b6bd1c696e45ed0f28a8475c448616ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:f1:39:ab:93:d8:b1:d4:66:75:87:32:0a:
3e:62:5e:c8:f2:c4:43:30:a5:93:24:0b:f9:a7:f5:
3a:bf:58:cf:09:cd:f2:54:0e:f4:16:92:ac:d1:a1:
3e:4b:cc:04:b4:2d:54:00:87:ff:68:52:10:e7:8a:
b1:01:0b:44:77:4c:d9:31:24:a8:27:d2:11:b6:f0:
a6:87:70:96:19:77:ed:67:bf:c0:43:0f:a3:e7:8f:
bc:1c:cf:79:37:fd:0c:40:a2:5d:3f:1e:12:cf:c3:
be:8b:49:c4:5e:b5:cf:c2:8d:17:9d:3b:96:ea:52:
71:1f:a4:9d:95:5d:8f:4a:66:ec:60:9e:4e:3d:43:
1a:ba:56:d0:5d:0d:e9:cd:2d:5d:e7:e5:72:61:6e:
f0:ef:e3:c3:2d:b3:22:f5:42:3b:2e:f6:f1:0f:9e:
bd:f2:81:af:a9:18:27:d4:96:3f:32:96:9b:7c:28:
c7:8a:6b:9b:a5:33:e6:e0:40:36:c8:63:84:3a:b2:
b7:b7:1e:fc:5d:c6:d9:a9:e2:c7:c8:f3:63:cd:c7:
02:68:76:0d:1d:60:e4:5b:1b:fe:47:44:6e:97:8c:
42:2b:67:2b:04:b1:d3:4a:1e:68:6b:55:7c:10:41:
57:56:66:79:d2:61:44:e8:77:e0:5c:ae:96:c4:26:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:3E:D1:B6:BD:1C:69:6E:45:ED:0F:28:A8:47:5C:44:86:16:EC
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:75:f7:b9:48:6d:72:2f:7a:ba:ec:70:4e:ee:bf:6c:2e:
59:a3:ae:c1:95:d5:a0:a3:a9:b6:a0:b7:4e:05:e8:9a:07:ed:
cf:e9:a0:d2:e4:7c:7f:21:3c:6d:c1:9e:26:18:34:80:bf:b4:
94:42:65:60:94:2d:51:d5:3e:d9:a7:27:04:d8:9c:d8:aa:e2:
77:92:57:18:fa:59:bf:fa:1c:51:79:0b:c9:c1:d4:9f:71:e2:
42:33:4d:d5:b2:3a:32:b0:c9:84:77:2b:f5:8b:6d:82:ec:b5:
0d:c3:9b:a5:0c:ed:7d:8e:55:76:6b:7d:2b:c3:3e:9e:dd:cf:
19:b6:f7:30:25:77:36:c6:be:ef:45:94:ae:3b:f7:79:17:64:
56:4b:dc:6d:f9:2f:ee:bb:13:b0:ba:8c:e2:2b:1f:24:76:7c:
57:58:2f:3f:95:7a:52:37:80:b2:d8:4f:33:82:de:ab:7a:f9:
b6:4e:c5:55:8e:d6:61:68:f2:21:2a:29:1f:9e:6e:a5:a2:7b:
64:a9:20:7d:a4:ee:96:dd:d0:6e:56:09:ad:14:ed:9d:ce:34:
65:67:2b:a5:d5:1f:ae:9a:32:41:76:3e:3f:dd:33:13:93:ad:
38:56:99:43:e5:67:f7:01:1b:c4:e0:18:3a:12:0f:6e:0a:1e:
56:f4:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:01 2026 by rpki-client