Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: F3/X6pfA7TXdwp/QRGGboic/JwtTtolJ02K2caXYtOY=
Subject key identifier: 15:4A:B1:EE:D0:54:26:77:94:0B:8D:D8:36:93:1A:3F:DD:6A:77:23
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019CAAC6F587C2ED9F12945F4E576F83F155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 0529
Signing time: Sun 01 Mar 2026 19:01:31 +0000
Manifest this update: Sun 01 Mar 2026 19:01:31 +0000
Manifest next update: Mon 02 Mar 2026 19:01:31 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: 39aboDR04Gffh4QvCtJ+/YigV82nqFZNxPCADyym2sg=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f5:87:c2:ed:9f:12:94:5f:4e:57:6f:83:f1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Mar 1 19:01:31 2026 GMT
Not After : Mar 2 19:01:31 2026 GMT
Subject: CN=154ab1eed0542677940b8dd836931a3fdd6a7723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:6c:7f:bf:49:67:2c:ef:de:ce:d5:c7:75:
7a:6a:64:46:8d:8b:a5:49:7c:6d:97:e7:c4:d1:d4:
2d:10:07:08:f3:b2:41:f0:33:bc:1c:f1:bf:b2:ef:
4f:1e:94:37:bd:d3:c3:da:cf:88:cd:47:52:5c:fa:
06:af:fb:ef:98:9e:50:54:fd:63:8a:cc:c8:47:e6:
d7:69:f5:47:85:11:06:fd:88:7d:d7:9e:87:8e:a4:
12:b8:85:f6:cc:22:a5:37:de:2d:56:a8:2e:30:2f:
5c:c6:3a:68:04:dd:08:d4:68:41:3d:8c:5f:c7:8e:
0a:63:0a:b0:e0:98:8c:c9:65:7e:59:4f:b2:47:d9:
b1:cb:57:fc:bd:2d:6b:63:29:1a:b9:67:5b:ee:22:
68:b0:4f:9a:6c:e1:9c:c7:f6:bc:e9:33:d2:dd:c6:
f9:bd:73:d0:50:bc:65:87:6e:94:d2:6c:c4:5f:47:
5e:0e:7e:3e:dc:63:d9:e0:86:35:b3:c1:91:c5:24:
ad:84:8b:53:47:76:80:c2:43:25:4c:da:34:2f:f0:
bb:75:12:bb:91:fb:17:9d:b1:90:6d:ba:18:85:ca:
f5:1a:6a:c3:c5:a4:49:26:ea:da:71:90:99:de:30:
99:e8:21:cc:82:5b:b3:96:d6:77:63:36:25:c1:20:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:B1:EE:D0:54:26:77:94:0B:8D:D8:36:93:1A:3F:DD:6A:77:23
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:29:21:81:fd:32:e4:24:ab:f9:ee:62:93:d9:19:eb:e0:2f:
b8:10:6c:68:5f:18:ec:92:55:f4:c1:03:d0:59:0d:e3:0a:74:
92:1b:47:db:f5:14:d0:5a:67:53:2e:53:4e:88:f3:f0:e7:35:
0b:0d:7d:f4:85:00:b4:5c:0f:8d:a9:b2:69:43:81:82:62:2e:
e0:64:94:c0:3f:b4:a9:a7:5f:f9:80:dd:86:18:8d:43:6c:fb:
df:05:26:ff:53:a9:ce:48:14:a3:f7:f7:e5:60:6d:ba:68:56:
a8:c3:90:05:67:7e:b9:ac:4d:65:a0:f6:e6:3a:4e:98:df:02:
d1:33:24:4d:32:8e:e2:0c:36:2f:d8:f3:8f:27:b2:26:95:69:
18:17:7f:e0:9a:72:76:ea:7b:e3:e7:a7:5b:f2:18:35:b9:1a:
37:0f:26:e9:64:6d:b0:d3:e0:da:b5:76:a0:a6:e5:9e:8c:82:
8f:b9:1b:db:45:cc:3f:7a:e7:8b:de:17:65:82:18:ed:ae:3c:
db:97:3b:4f:0b:78:75:90:fc:78:62:86:7c:7b:ed:df:22:2a:
53:21:54:be:4a:da:70:a8:c9:cf:3f:ac:91:46:a9:32:a7:5b:
15:a2:b9:4a:64:93:b9:fe:54:75:54:52:7e:d4:ba:b5:05:d9:
11:34:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:50 2026 by rpki-client