Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: ByFoVLQ8xMTQz7pJwwGqIUiHwuty8n4EM9AYqMQWBBo=
Subject key identifier: BF:C6:B8:E3:3D:4F:16:48:24:C4:28:62:BC:36:CF:4B:DC:A5:9C:1C
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019D363FF2A3E400565BC89F4CF3B98BF238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 21:00:53 +0000
Manifest this update: Sat 28 Mar 2026 21:00:53 +0000
Manifest next update: Sun 29 Mar 2026 21:00:53 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 8BWaAJeISzAqGWUA31vBf4Ksh89YGddr7JZklxLjojg=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:3f:f2:a3:e4:00:56:5b:c8:9f:4c:f3:b9:8b:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Mar 28 21:00:53 2026 GMT
Not After : Mar 29 21:00:53 2026 GMT
Subject: CN=bfc6b8e33d4f164824c42862bc36cf4bdca59c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:87:e9:3e:85:69:63:bd:12:8e:98:36:c8:
cb:4c:34:d6:2c:c4:f2:9f:33:34:f7:04:d2:83:38:
36:d9:12:7d:a7:91:5f:44:1f:74:18:50:ce:63:37:
9f:90:ba:a3:64:53:52:56:42:a4:01:43:6e:98:4c:
b7:77:28:4a:50:60:d7:5e:53:35:5e:2c:16:0b:27:
38:ed:01:ee:45:77:97:56:2d:7e:0e:e4:05:fe:54:
70:84:8b:be:c9:69:c3:93:a8:30:0a:23:eb:d2:54:
03:de:cd:cd:d6:e1:99:d7:23:66:d8:a0:97:bb:36:
df:42:c1:9b:34:fb:17:87:1b:03:22:9b:32:ed:d9:
8d:9f:b6:d7:07:2b:c2:f1:9a:5f:e7:b7:da:6a:cb:
af:9b:71:3f:e4:c7:ec:37:ad:ef:d6:63:b8:2a:e1:
2c:e4:32:9c:54:fb:a0:57:f6:72:1b:d0:91:8f:fe:
f5:ee:71:89:dc:91:90:ea:8d:5e:a9:3c:30:64:19:
ee:1c:e9:a4:68:47:f0:36:0e:17:0c:7a:5b:84:b4:
e2:6c:08:7b:28:c6:43:60:d1:d5:50:a8:a2:63:1e:
0d:bf:47:1b:36:60:f9:a0:24:53:4d:6e:0f:d2:03:
e9:63:18:fd:03:9a:17:67:87:72:45:8f:0d:1c:72:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:B8:E3:3D:4F:16:48:24:C4:28:62:BC:36:CF:4B:DC:A5:9C:1C
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:59:f1:09:e2:7d:61:ea:41:64:1b:85:3c:24:cb:c4:b6:
10:84:fe:95:17:e6:94:39:ab:d3:3f:24:53:6c:8f:7b:e1:66:
bd:ac:56:7d:dd:50:2f:53:4c:91:e7:ad:68:aa:65:ca:d9:e3:
00:16:0f:c9:0f:b8:ae:a7:08:a9:a6:b8:be:76:4b:a6:11:59:
14:fe:67:5d:40:f9:9e:d6:69:af:34:32:56:b9:00:f6:1b:8c:
08:bb:23:56:01:3e:3f:dc:3f:76:78:4a:45:d8:fe:45:58:2c:
a7:17:63:11:f0:21:6a:d9:26:be:92:b1:6a:22:1b:42:82:dd:
1e:fd:05:13:d6:64:8d:88:ec:0c:78:7e:76:11:64:22:bd:f9:
1c:4d:96:d8:18:a4:35:12:6d:b2:fc:28:31:93:63:b5:36:ed:
5e:fc:ab:65:93:c8:ea:99:6f:87:35:af:c6:20:1c:5c:37:2d:
b2:89:da:bd:49:03:d9:d9:46:ee:4e:5b:7f:c6:34:46:e0:07:
97:d7:39:30:58:a9:6d:94:e8:63:0b:4e:a2:c1:ae:81:75:fc:
a1:d3:34:c0:f1:52:c7:9c:0b:d9:90:a5:60:1b:56:47:bd:bd:
bf:0f:b9:49:79:71:20:4a:e6:6e:df:2b:3d:9e:38:8c:1c:c3:
88:12:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:38:27 2026 by rpki-client