Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: KouX32iiS7QUa/QW48BLilNRIlzUKfcwxkmB/fFD6b4=
Subject key identifier: 9B:49:B2:17:A0:9B:98:F2:C1:45:87:7D:04:47:B6:64:8D:8E:B9:C6
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019FA97524EE7B3F7393BA1D38CD3AF222AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 06B6
Signing time: Tue 28 Jul 2026 16:00:54 +0000
Manifest this update: Tue 28 Jul 2026 16:00:54 +0000
Manifest next update: Wed 29 Jul 2026 16:00:54 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: IlNJlxLsb3WIpj5Y6p6RmtXgprSebQFGB84wfst6hqE=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:24:ee:7b:3f:73:93:ba:1d:38:cd:3a:f2:22:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jul 28 16:00:54 2026 GMT
Not After : Jul 29 16:00:54 2026 GMT
Subject: CN=9b49b217a09b98f2c145877d0447b6648d8eb9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:19:05:41:fa:71:50:88:b2:b1:06:53:8b:
3a:0c:23:e9:bb:5f:7b:44:93:8d:bb:cb:23:a7:d6:
eb:03:c9:45:08:82:e1:1d:ba:ef:dd:8e:3e:89:b6:
cb:19:7f:66:dc:8a:1e:41:ab:06:d6:bc:f9:d7:1a:
04:41:a5:69:67:b2:18:2b:bc:65:0f:67:33:d9:ac:
89:de:33:3b:b8:c3:f9:3d:d7:db:09:a9:79:29:8e:
b2:7c:ab:bd:62:b4:3f:97:cc:17:35:28:2a:df:e9:
e5:34:f4:04:cf:11:ba:8b:7c:18:a8:a9:6b:9c:15:
a7:92:29:db:16:ab:7c:bf:39:4f:35:32:99:4a:0d:
dd:63:9e:57:21:1c:38:3b:09:81:42:21:d7:1c:f8:
c5:b6:3c:b1:2b:ef:43:86:3c:1c:d5:9a:0c:48:b1:
c0:9d:ff:ca:78:16:4f:81:53:1d:85:01:3b:72:00:
fb:92:70:88:ee:f1:b5:b6:2d:c5:d8:a3:a6:86:d1:
48:c4:5e:67:28:58:3c:58:56:28:97:1f:82:e2:6f:
7c:e6:0d:da:f9:87:e1:10:84:c6:96:c4:89:89:a5:
40:21:f3:34:56:22:02:73:dc:4d:8d:fe:68:5b:85:
fe:b3:75:73:23:45:5c:d0:e2:b0:71:36:d9:a5:e2:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:B2:17:A0:9B:98:F2:C1:45:87:7D:04:47:B6:64:8D:8E:B9:C6
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f6:18:51:b9:5a:cf:5d:b2:e2:45:eb:53:2a:2a:c3:fd:b5:
79:0f:e9:9c:e1:48:a8:07:c0:d5:de:6a:fa:bb:64:7c:c7:af:
fb:04:79:a3:86:e6:d5:95:7e:70:04:08:2b:8b:c0:6d:d8:4d:
44:5a:e9:24:ea:74:56:0a:88:1d:b1:08:11:12:83:5d:d1:45:
23:15:36:82:fd:cc:b2:86:8b:75:b2:51:51:f6:69:86:85:6f:
97:4c:f6:1c:b0:b7:fb:f3:8f:ef:a0:f7:1c:93:3d:c8:67:63:
87:77:98:07:6e:b2:3d:5e:8a:9a:9e:f0:60:4c:4e:93:74:19:
d2:25:ef:29:0d:34:05:43:68:7e:79:68:37:32:b1:64:11:bb:
48:4e:cb:7c:ea:e2:4a:b7:3e:99:17:2a:97:83:35:87:63:62:
0a:98:ca:4b:84:a7:8e:ad:0e:66:9c:0c:15:71:67:59:1c:4a:
68:f5:d9:cd:ea:39:0d:45:af:13:d8:4e:ec:e0:b7:22:3f:05:
4a:ae:84:83:e6:30:57:a1:f7:4f:d7:82:a5:1a:1b:06:ab:71:
2a:86:34:3d:06:0b:14:e2:02:8a:5c:2b:9d:9f:58:fd:83:1a:
79:4a:01:07:f2:86:78:52:7e:84:37:00:e7:90:11:12:52:6c:
d2:e4:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:49 2026 by rpki-client