Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: iayc3P6ex1pRnQyQTr87n4ByNgBgrouj5koCVnjBiU8=
Subject key identifier: 46:1C:AF:4A:83:B3:7C:8D:3F:9F:F4:C3:0C:71:B9:04:00:5F:D5:42
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01A12655139697DF6FBFDB5AB92E536F338E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 15:01:12 +0000
Manifest this update: Sat 10 Oct 2026 15:01:12 +0000
Manifest next update: Sun 11 Oct 2026 15:01:12 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: HYy+SqJK9BUKo+4vkNdxtWSh+uptMZf3Kg/EL3/HScU=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:55:13:96:97:df:6f:bf:db:5a:b9:2e:53:6f:33:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Oct 10 15:01:12 2026 GMT
Not After : Oct 11 15:01:12 2026 GMT
Subject: CN=461caf4a83b37c8d3f9ff4c30c71b904005fd542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:2f:bf:9c:e6:da:17:e6:46:33:b2:aa:7b:
41:66:d3:d4:3b:0d:5c:17:b6:4c:98:97:de:9e:2a:
7c:9f:80:83:52:14:95:c9:7d:73:82:f7:e9:e6:e0:
f6:6e:74:9c:f4:f0:1b:49:cb:c8:ff:85:47:ad:eb:
33:d6:a0:da:e2:d3:2e:63:6e:8b:40:f0:ed:d3:c2:
5f:ad:11:3d:d7:41:73:91:aa:22:b7:08:3f:be:21:
91:5d:9f:4c:cc:30:59:90:d1:a1:73:7e:56:f4:b3:
fe:ed:5a:d2:1c:7c:13:89:27:73:a7:17:ca:c2:f6:
96:44:ee:98:66:d7:67:50:32:2b:ba:fe:34:02:e8:
4d:a7:46:c3:fd:e6:79:a7:b1:20:eb:b3:88:57:ce:
31:03:c8:e2:57:ca:40:1f:a5:23:a7:58:16:58:f1:
f3:4e:ab:94:1c:26:19:2b:89:8f:6f:30:b3:84:cb:
86:b5:41:67:11:e1:3a:2e:4d:29:75:6c:be:b2:6b:
fe:1e:1d:9e:7e:45:2a:d8:53:d9:0b:f5:95:cb:97:
0c:95:45:38:68:51:46:f2:40:c1:b5:cb:6f:78:29:
b9:d1:48:96:47:ee:89:9f:c9:a7:a2:a2:36:8b:8e:
4d:a6:19:45:ca:5e:56:50:57:47:9f:02:76:8b:a5:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:AF:4A:83:B3:7C:8D:3F:9F:F4:C3:0C:71:B9:04:00:5F:D5:42
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:31:25:12:ed:77:12:45:67:59:ce:cb:0b:a0:5a:17:bf:f5:
75:ad:8a:f9:83:87:b6:0c:0d:74:79:7e:68:8c:63:3e:d7:ed:
12:b0:50:88:ad:36:1b:e5:06:6d:f7:40:ad:d3:f1:1d:98:e2:
27:ed:8f:fe:5b:94:b1:a1:80:df:6f:9c:2b:6d:ea:25:34:49:
32:19:8f:aa:fc:ce:12:66:5e:3d:6a:c3:6b:5e:e1:cf:b0:01:
9a:93:a7:73:72:0c:f5:27:2e:85:ed:06:0e:03:d1:8e:69:64:
c7:07:7d:8a:fb:4a:fc:c1:76:14:5f:32:9f:f1:cd:4c:ff:6a:
c1:6d:c3:de:19:d0:3e:ce:3b:91:31:30:e9:d2:e0:94:04:a4:
3f:c5:ff:64:a7:30:48:9f:b3:11:c3:46:51:8c:fd:ad:a6:e8:
cc:99:e0:e7:f7:e0:f4:0d:e0:c5:7e:41:39:f8:56:61:d6:63:
68:5e:f7:c0:e7:da:35:92:94:f7:ed:de:3f:f0:c3:e2:b7:bb:
33:96:bc:58:d8:e1:99:1e:a0:04:90:ea:4c:d5:9e:5f:1b:c5:
67:72:6f:ca:a0:18:69:18:44:ee:bc:94:e4:36:c9:49:fc:52:
a9:d7:4b:fa:62:b7:2b:ca:45:bd:9a:69:3a:4c:6a:4f:fb:db:
f1:49:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:23:19 2026 by rpki-client