Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: 4k3DdFmdsj/TqqQMxwegvT4BiNL/sZtPi95ERF9WJpA=
Subject key identifier: F6:A0:6B:6A:43:94:EC:37:1D:8F:76:09:F4:D6:2E:A1:58:29:D3:E2
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019EBDDA7FFD501D3A1FB6F1005297E9D08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 063C
Signing time: Fri 12 Jun 2026 22:01:13 +0000
Manifest this update: Fri 12 Jun 2026 22:01:13 +0000
Manifest next update: Sat 13 Jun 2026 22:01:13 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: p6u6X8aV0uG4BPBUCs2iq+sigalGD1T7KV85HBfW0lM=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:7f:fd:50:1d:3a:1f:b6:f1:00:52:97:e9:d0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jun 12 22:01:13 2026 GMT
Not After : Jun 13 22:01:13 2026 GMT
Subject: CN=f6a06b6a4394ec371d8f7609f4d62ea15829d3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:0e:48:20:77:98:3b:43:11:0d:b9:22:e1:
b1:07:3a:2c:9f:c4:c4:32:10:ed:c9:f6:1b:a0:d7:
61:5a:7d:34:56:9c:16:7a:88:17:7f:e6:1f:dc:29:
db:84:b3:0e:40:58:cc:03:0d:7c:4b:f0:92:92:fe:
ac:b1:aa:e9:16:5c:c4:71:98:dc:7e:aa:68:a2:aa:
88:4a:de:c3:64:c3:f2:71:0c:e3:e6:88:74:be:56:
03:c0:6a:78:d3:a5:f2:83:a9:fb:c7:6f:88:5a:95:
2f:a3:57:57:67:1e:30:ea:ba:d3:3e:bc:b8:d6:dc:
23:f3:3f:00:74:c3:3c:cf:2c:39:8f:bb:7a:6f:5a:
20:dd:b1:64:e2:59:f0:6f:cc:2e:b6:7f:d2:84:93:
8b:00:62:e6:b7:69:03:3e:8d:fa:41:cd:20:c2:83:
da:57:15:19:ce:94:49:69:17:77:20:7f:75:de:44:
7f:5e:70:c9:35:81:cf:a7:89:b2:f9:91:7b:60:06:
c8:3b:33:17:a7:eb:81:fc:2c:c5:09:f8:95:69:b9:
ab:1c:75:31:38:52:19:b1:45:3e:d1:f9:ad:c6:ef:
5d:37:59:ea:46:96:44:3e:5b:4a:81:28:42:03:dd:
03:71:74:bc:6b:d0:f3:65:78:44:8d:88:47:de:98:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A0:6B:6A:43:94:EC:37:1D:8F:76:09:F4:D6:2E:A1:58:29:D3:E2
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9c:22:52:29:a0:e1:0f:67:ce:23:d4:e4:9d:b0:f5:83:0d:
90:d9:7d:f3:09:6b:ef:5b:92:43:c9:e4:d4:1b:bb:ee:39:85:
62:0c:9b:f4:42:4e:e6:fd:08:20:96:e7:e1:63:fd:35:13:f5:
fd:30:ec:69:2b:5e:28:ff:ba:5b:56:87:10:34:f0:f9:46:57:
67:12:af:2c:19:8f:2e:6f:4c:7b:4b:ac:45:67:59:87:11:57:
59:63:25:b7:21:bd:d6:b1:84:31:df:34:46:59:89:22:10:64:
5b:d6:e5:a5:6c:f5:66:c9:4a:08:97:cc:95:17:9d:57:51:0f:
a1:8f:e0:27:cf:8f:29:74:17:ce:0c:c2:dd:f5:3e:44:bf:af:
52:48:0d:b4:b7:37:f1:32:b5:e0:ae:9d:19:57:e6:1c:a3:17:
b2:05:c9:2a:aa:45:e1:18:3a:d2:1c:0d:e7:90:91:81:27:79:
ea:16:b3:3b:b5:4d:28:8b:48:0a:84:8d:0a:82:fc:ee:0a:8a:
df:f5:6b:5c:40:e6:15:5c:f5:f9:a0:98:3d:af:75:09:cd:ca:
c6:f4:f0:9d:3b:27:16:43:60:38:83:1d:58:d5:8a:05:de:20:
be:14:22:81:9a:cb:2c:ca:c2:23:5a:6c:04:33:7e:fa:df:09:
0b:e1:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:58 2026 by rpki-client