Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: GzSwmiLFPptYs3m552XTQ9EpSb9Bb12NtLWm0LbkE6Q=
Subject key identifier: 9E:20:5E:49:9E:AC:6C:A0:D0:10:B9:48:B7:72:48:B8:15:91:78:B0
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019D9A3E1D5674994ABB1FC8EBB2F54C7B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 05A5
Signing time: Fri 17 Apr 2026 07:00:55 +0000
Manifest this update: Fri 17 Apr 2026 07:00:55 +0000
Manifest next update: Sat 18 Apr 2026 07:00:55 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: NgABMkD1yyVThj0OzUYiFp21Cmy7gf6yxJOD6CzKngM=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1d:56:74:99:4a:bb:1f:c8:eb:b2:f5:4c:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Apr 17 07:00:55 2026 GMT
Not After : Apr 18 07:00:55 2026 GMT
Subject: CN=9e205e499eac6ca0d010b948b77248b8159178b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:1c:55:08:ba:c6:da:1b:2f:6d:44:3a:d2:
eb:53:2b:15:18:33:5b:3e:df:33:66:7a:c9:3c:ab:
2f:84:21:6d:d3:02:e4:39:ed:f4:17:40:9e:e8:d1:
c7:30:c0:bd:a4:cc:9c:71:01:81:d2:b7:0b:74:a7:
8a:29:6b:61:a1:03:1c:1c:c4:b9:53:91:3f:3b:2c:
5a:50:45:7b:a6:6c:85:70:24:b1:d8:7f:c8:81:0c:
5a:57:95:c2:05:91:31:02:20:8c:fb:10:b9:9b:dd:
84:ae:7c:ff:8b:8c:ed:87:09:77:7f:04:c0:11:f6:
45:db:16:48:6b:07:a7:1b:c1:e0:61:7b:a3:4f:0c:
38:75:47:40:a5:5c:1b:4a:0f:94:51:e5:e7:48:99:
52:8e:e0:2d:6b:a2:3c:cd:e4:82:74:5d:92:0f:f0:
48:69:1f:4f:57:5f:a5:86:14:62:54:b0:7b:fa:fb:
bc:25:e8:0a:42:e3:bb:e7:ae:f1:7c:b8:60:4b:ed:
fb:37:17:32:27:d5:6b:84:c9:b1:53:19:23:4b:53:
f1:1b:1d:27:be:08:c0:6e:ae:bd:b8:66:95:cb:eb:
18:d0:40:d8:63:7d:5b:4f:84:5b:e7:e9:8b:ff:77:
af:05:96:3e:5c:64:f4:ee:99:d8:1a:ab:fe:39:24:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:5E:49:9E:AC:6C:A0:D0:10:B9:48:B7:72:48:B8:15:91:78:B0
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:15:1b:d8:84:64:26:41:67:09:8c:db:34:17:12:bb:02:5a:
b8:e5:81:9f:77:9e:0e:c9:bf:5d:a2:ce:c4:ca:37:ec:8b:37:
3c:4e:9e:ca:41:85:57:9e:57:f1:08:be:99:e9:a5:6e:d6:52:
5b:cd:b6:42:b4:e3:0c:45:b4:46:0c:21:aa:79:a6:72:c0:dc:
c0:96:4d:6b:66:be:00:06:b7:08:df:04:20:96:da:88:f0:0b:
5f:a6:78:b3:78:15:81:a0:e5:98:58:b4:92:07:b2:e2:70:d1:
fe:ac:0e:2c:52:a6:17:e9:b0:9f:ae:3d:dd:2b:b2:34:53:a0:
99:0e:b5:46:24:ca:6e:74:64:3f:69:b1:83:9a:17:9d:bb:4d:
58:7d:8f:52:59:95:45:16:f8:a0:37:83:7a:8e:50:91:eb:30:
f7:18:ea:8c:03:eb:75:27:e7:dc:9b:77:f0:cb:f9:6a:e9:71:
09:8b:03:d9:5c:d5:26:b0:dd:ff:50:db:29:f4:c9:73:0e:58:
32:19:77:dc:52:cb:06:83:49:8b:1f:fb:61:33:56:ed:0a:09:
20:eb:79:a6:85:ba:2b:fc:56:1f:0e:4f:e8:83:c6:18:b6:b5:
7a:a5:80:eb:54:65:9a:36:0f:e5:0e:b6:9d:91:91:57:a4:87:
ad:84:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:36 2026 by rpki-client