Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: vXlxwEEgYGLwpmMB5stiKskfx4FfsYZrgP631Z1crhQ=
Subject key identifier: 02:71:D9:08:E4:32:77:63:C6:02:99:B6:C1:A7:51:3A:CA:A6:19:E0
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019FF83611602B303A2627E6E6377C517668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 19FC
Signing time: Wed 12 Aug 2026 23:02:00 +0000
Manifest this update: Wed 12 Aug 2026 23:02:00 +0000
Manifest next update: Thu 13 Aug 2026 23:02:00 +0000
Files and hashes: 1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: TcCtG2oZLCidWt7uWmcaSPfg0sjaYToNtnHfZSeHSsw=)
2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:36:11:60:2b:30:3a:26:27:e6:e6:37:7c:51:76:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Aug 12 23:02:00 2026 GMT
Not After : Aug 13 23:02:00 2026 GMT
Subject: CN=0271d908e4327763c60299b6c1a7513acaa619e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:21:a9:16:aa:d5:43:4f:af:42:46:4c:bb:
36:34:ca:1e:e0:f0:3a:e4:dd:3a:53:87:64:7d:46:
5f:e4:69:9b:77:ab:10:6b:31:c1:d3:b5:35:74:bc:
54:0c:a2:40:6d:ca:f7:87:a1:b4:6d:21:1a:b1:ba:
fa:b0:e3:ea:ee:99:c9:eb:7e:0e:db:2f:da:e9:9f:
ce:b1:8c:b1:d4:f2:06:8f:60:81:33:54:81:b3:52:
57:5e:9b:99:29:26:81:1a:7e:67:01:4f:6f:03:bc:
6f:37:07:c5:60:3d:8e:19:5d:f9:05:fa:fd:3c:ba:
d8:f4:a1:66:4c:6d:ff:5c:24:34:fd:9b:fa:b7:89:
8a:ad:c9:38:37:43:0d:54:4e:73:2a:c0:b7:90:0f:
23:7b:6b:df:96:49:fc:c2:04:57:26:e8:ea:6b:1c:
b4:05:c7:55:78:64:43:fd:f3:6b:79:b6:51:8a:55:
39:42:3b:fd:30:62:e7:8c:ad:10:5b:b8:a7:50:32:
bb:21:87:6a:22:b7:37:6d:b8:10:45:6a:93:7c:89:
fe:a6:69:a0:7a:39:86:30:1c:71:b6:30:4e:98:ac:
21:22:54:46:85:f5:17:2a:10:7a:08:ee:91:91:ce:
8c:d0:16:60:93:da:61:9d:96:ad:ef:10:47:32:9c:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:D9:08:E4:32:77:63:C6:02:99:B6:C1:A7:51:3A:CA:A6:19:E0
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b5:8d:f1:af:ec:82:71:69:39:f3:20:72:27:99:b5:b3:2a:
0c:cd:e7:cb:03:14:e7:9d:c1:54:28:5e:4e:ff:cb:31:2d:db:
e8:6e:48:6b:68:82:22:96:d2:29:ac:93:89:04:10:70:7b:b0:
66:c8:8e:52:76:02:78:23:b2:83:6e:ef:55:37:86:53:85:6b:
24:db:a2:6b:46:83:67:64:27:7f:03:a7:eb:b3:73:87:2e:1f:
12:3e:a7:4a:e5:1b:f4:9c:cf:df:f6:d7:56:92:ad:e9:f6:cf:
de:38:b8:53:20:6c:53:be:39:46:2a:9b:41:0b:81:32:70:3b:
7c:6e:dd:9e:7e:03:4c:a4:88:29:9f:00:ab:cf:77:35:00:a5:
10:c0:88:80:47:f7:c5:b0:ef:ba:f5:ac:41:30:04:f6:83:72:
c8:d5:4e:07:bd:17:d2:19:1e:ce:0e:f9:6b:ec:a9:16:c1:7a:
1c:c6:bb:de:59:9d:d3:88:2f:dd:97:41:48:12:8f:ea:e3:66:
40:6f:a5:10:1f:db:a9:9d:cf:99:5e:3b:cb:7f:08:ab:4d:1a:
e1:f5:de:cc:6b:13:41:3a:0d:a4:3e:36:de:ca:ff:a3:88:db:
63:16:db:0c:6e:40:36:f5:ee:9a:c4:c8:11:0c:13:fe:d1:b8:
82:45:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:21 2026 by rpki-client