Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: mRaq+1sGi5215bEJQEPZ2h2+S1VQac585LMDAFDhVZU=
Subject key identifier: 3F:1B:E8:75:93:B3:59:03:F1:C2:A0:E3:49:6A:B8:48:00:01:7D:E8
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019F1152E3C36F7395D5E617A085EF8E39A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 03:01:12 +0000
Manifest this update: Mon 29 Jun 2026 03:01:12 +0000
Manifest next update: Tue 30 Jun 2026 03:01:12 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: nZdGtMH/eKkaVb+klq2PNBdhE8URluDPGNybpihvELE=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:e3:c3:6f:73:95:d5:e6:17:a0:85:ef:8e:39:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jun 29 03:01:12 2026 GMT
Not After : Jun 30 03:01:12 2026 GMT
Subject: CN=3f1be87593b35903f1c2a0e3496ab84800017de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:b5:b0:cd:c4:c0:0b:c9:a3:46:93:81:d0:
5c:0f:1b:b4:c8:e3:44:ca:da:59:9a:82:61:c1:97:
ae:94:d9:d0:26:a1:53:d2:30:df:9e:48:3a:fe:8a:
59:8f:9f:f8:12:84:a9:f9:f6:f9:06:a6:ee:8b:8b:
df:6e:9b:70:5d:b1:16:94:48:42:32:91:7b:01:f9:
69:2c:81:c1:9e:d9:ed:eb:be:d2:d5:f4:99:7b:f9:
e5:46:73:5f:d1:e1:41:8e:a6:a5:8c:8f:76:6a:34:
04:a3:49:57:2f:59:2a:b0:80:0e:d8:55:09:ed:22:
76:81:f3:0c:3c:b8:5d:9d:4d:81:97:be:76:dc:a2:
d8:bd:40:54:f8:f6:24:b0:ff:ed:26:c8:67:c4:04:
45:20:20:f6:86:6a:0a:c8:64:a2:cc:2f:3c:99:95:
02:29:30:e7:12:0a:bd:d4:8d:f8:42:25:6a:45:1d:
5f:2a:b2:40:6d:1c:25:bb:08:a5:0b:7f:33:a1:a4:
f2:f1:8c:f9:bb:1b:37:cd:5e:51:a7:17:1e:ba:9b:
9b:21:67:67:26:be:5a:9f:05:ce:4c:01:d8:39:40:
33:b0:fe:cb:6f:fa:66:25:79:33:15:a3:ae:23:49:
52:67:7f:96:9c:c3:6c:51:d4:6d:e4:0c:e2:f5:11:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:E8:75:93:B3:59:03:F1:C2:A0:E3:49:6A:B8:48:00:01:7D:E8
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:52:9e:25:c6:9d:e3:f1:aa:9b:40:a4:06:52:51:5a:97:
d7:9a:de:2d:d0:3a:f8:57:b6:aa:9b:e4:de:4d:cf:b1:97:8f:
72:44:d5:75:dd:db:47:13:b1:4c:a7:2c:c1:31:42:9e:e0:8c:
e5:f0:58:8a:6d:52:fa:ae:d2:a9:1d:75:2e:a0:f5:9c:bc:7d:
65:0c:19:8c:ad:98:e9:2d:2a:88:71:27:c2:92:a8:42:76:f5:
31:9d:39:2d:ef:c4:a1:53:34:32:ef:dc:f7:99:76:d6:7f:7f:
17:e9:ad:b1:93:f6:ac:cd:02:1e:61:b6:e0:35:a7:c9:61:3a:
2c:43:78:83:2c:6a:bb:b9:ab:c4:c4:2f:35:8d:fe:be:b5:5f:
30:06:4b:17:33:f3:5a:2c:0c:c9:7a:f6:0c:eb:e4:3b:db:28:
b6:72:bb:d9:d1:c1:28:29:f9:17:17:d7:08:78:fd:0b:b0:36:
6a:25:d6:54:e7:eb:6a:6f:3e:de:a0:b0:ea:92:82:7c:0e:bb:
4f:7b:be:84:e2:79:ce:27:b0:00:d6:eb:bc:2e:2d:eb:97:c3:
41:90:0b:be:51:93:47:07:6a:a9:59:a2:ed:78:e4:e9:12:8f:
ce:2b:0d:f5:de:9e:82:bb:7f:d9:fa:6e:d1:77:e4:32:8b:17:
3f:90:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 08:02:40 2026 by rpki-client