Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: D6smzk+8ryuA8G6iDVCyBqrvcH/BQVBvcA4vU1wkUZk=
Subject key identifier: AF:D5:1B:45:03:B7:E3:34:E3:C8:AE:D2:E4:20:3F:06:CD:C3:E3:97
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019E23C91E0318D7596538AB9214C9DAD9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 190B
Signing time: Thu 14 May 2026 00:00:43 +0000
Manifest this update: Thu 14 May 2026 00:00:43 +0000
Manifest next update: Fri 15 May 2026 00:00:43 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: HYAHoLZVd0guPLCbe7fHZTdW9LLxoBQB/R2T/DTSDlU=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 22:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:c9:1e:03:18:d7:59:65:38:ab:92:14:c9:da:d9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: May 14 00:00:43 2026 GMT
Not After : May 15 00:00:43 2026 GMT
Subject: CN=afd51b4503b7e334e3c8aed2e4203f06cdc3e397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:36:79:f3:6c:7f:9d:64:6d:80:7c:85:18:
6c:80:94:2f:13:f0:e3:a7:c4:dd:1a:47:5b:27:78:
dd:ee:d0:44:c6:64:0e:2c:ec:2f:e4:a8:c3:cb:1c:
49:b2:5b:d6:ab:6d:12:92:73:9a:ee:33:db:1b:62:
ae:1b:f1:cd:ed:d3:81:eb:5d:ae:61:ec:30:19:ec:
d9:54:22:52:96:eb:b1:21:67:f3:dd:f5:74:25:fe:
4a:d4:55:e3:dd:cc:30:7b:b0:68:86:71:bf:85:4b:
2a:74:7c:cb:37:ca:a9:fa:95:76:c7:77:9e:3b:4f:
f8:9b:b0:7a:47:91:d7:8f:80:d9:5d:4f:35:ac:a0:
f1:73:de:d0:c6:3f:af:92:42:2b:93:af:ca:38:ad:
fe:d7:1f:51:a6:ba:bf:54:9e:72:a0:7b:0e:07:57:
2a:d3:c4:07:38:f8:ad:f0:cf:0a:cf:e3:8d:e8:a6:
ef:7e:98:63:b3:a9:ac:6d:d0:ee:4c:f7:62:f9:be:
c3:35:b0:5d:09:6d:fc:f4:18:19:d1:e7:37:e3:f2:
b8:88:02:fe:54:56:41:53:c7:05:51:de:3e:5c:46:
aa:40:dd:ca:36:c0:f5:af:1e:60:54:f6:d7:93:05:
06:6d:9b:4a:e4:13:b0:ca:a2:01:e0:7f:84:1e:96:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:1B:45:03:B7:E3:34:E3:C8:AE:D2:E4:20:3F:06:CD:C3:E3:97
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:23:e6:ae:94:61:a4:0d:e4:b8:89:c2:7f:f3:fb:39:15:4a:
b6:fa:0f:de:90:da:d4:3b:4a:f3:24:1a:8b:3c:b1:22:37:ca:
1b:5d:dd:b8:f0:73:76:20:c8:4e:f1:69:5a:46:3e:33:09:4e:
99:97:7d:99:55:6a:cf:77:63:40:69:4b:fe:fd:b0:ce:db:b2:
cb:62:a4:7e:65:0d:8c:f3:e2:1a:57:53:12:5b:86:f1:44:57:
c4:22:6a:23:98:80:90:ec:49:cc:22:76:28:d1:35:35:04:73:
60:21:ef:15:7a:41:6c:bc:8b:f7:71:85:68:67:a4:a2:00:75:
94:3e:e1:e0:8d:5f:ae:08:09:b4:c5:a8:57:22:be:66:75:78:
70:27:73:68:2e:01:73:28:eb:2b:4b:92:1e:a3:c1:54:cd:61:
2c:cd:35:34:fc:e0:d6:73:cb:85:79:7e:6c:a1:24:39:ca:50:
54:7f:c0:57:0d:7d:1e:b1:12:5a:e7:85:70:76:21:82:91:2a:
cc:60:76:c6:bb:fd:36:d2:65:b8:2e:38:81:8c:90:36:b0:0e:
97:f0:45:8a:f6:c0:f5:a8:cb:20:18:1b:44:dc:fe:90:30:18:
65:28:b4:83:d3:83:3d:a2:f0:3d:5f:af:7f:98:61:14:83:01:
7a:4c:9e:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4jyR4DGNdZZTirkhTJ2tmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2
OTBmZjIwHhcNMjYwNTE0MDAwMDQzWhcNMjYwNTE1MDAwMDQzWjAzMTEwLwYDVQQD
EyhhZmQ1MWI0NTAzYjdlMzM0ZTNjOGFlZDJlNDIwM2YwNmNkYzNlMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlA2efNsf51kbYB8hRhsgJQvE/Dj
p8TdGkdbJ3jd7tBExmQOLOwv5KjDyxxJslvWq20SknOa7jPbG2KuG/HN7dOB612u
YewwGezZVCJSluuxIWfz3fV0Jf5K1FXj3cwwe7BohnG/hUsqdHzLN8qp+pV2x3ee
O0/4m7B6R5HXj4DZXU81rKDxc97Qxj+vkkIrk6/KOK3+1x9Rprq/VJ5yoHsOB1cq
08QHOPit8M8Kz+ON6Kbvfphjs6msbdDuTPdi+b7DNbBdCW389BgZ0ec34/K4iAL+
VFZBU8cFUd4+XEaqQN3KNsD1rx5gVPbXkwUGbZtK5BOwyqIB4H+EHpZNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/VG0UDt+M048iu0uQgPwbNw+OXMB8GA1UdIwQY
MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt
MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy
LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSPmrpRh
pA3kuInCf/P7ORVKtvoP3pDa1DtK8yQaizyxIjfKG13duPBzdiDITvFpWkY+MwlO
mZd9mVVqz3djQGlL/v2wztuyy2KkfmUNjPPiGldTEluG8URXxCJqI5iAkOxJzCJ2
KNE1NQRzYCHvFXpBbLyL93GFaGekogB1lD7h4I1frggJtMWoVyK+ZnV4cCdzaC4B
cyjrK0uSHqPBVM1hLM01NPzg1nPLhXl+bKEkOcpQVH/AVw19HrESWueFcHYhgpEq
zGB2xrv9NtJluC44gYyQNrAOl/BFivbA9ajLIBgbRNz+kDAYZSi0g9ODPaLwPV+v
f5hhFIMBekye8w==
-----END CERTIFICATE-----
Generated at Thu May 14 06:14:40 2026 by rpki-client