Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: Bmmq34Y/L7DrwYNltZL4l/343JoW3mXQg+E/KWbc4CE=
Subject key identifier: F7:2D:0B:1F:FF:48:DD:88:81:19:11:94:B9:33:D3:01:AD:C5:23:DC
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019EC1B77E51462511D9038E7C0D23D3B6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 063E
Signing time: Sat 13 Jun 2026 16:01:28 +0000
Manifest this update: Sat 13 Jun 2026 16:01:28 +0000
Manifest next update: Sun 14 Jun 2026 16:01:28 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: gkDTE3ushSUkZdHIhMfcPOr1cvuBWV17zxC+hkWPijE=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:7e:51:46:25:11:d9:03:8e:7c:0d:23:d3:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jun 13 16:01:28 2026 GMT
Not After : Jun 14 16:01:28 2026 GMT
Subject: CN=f72d0b1fff48dd8881191194b933d301adc523dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:15:15:0a:a9:38:fd:0f:9f:22:e2:cc:ae:
51:35:21:96:93:16:2e:45:39:9a:86:bc:c1:19:09:
ff:09:2b:ad:e4:cb:35:f0:6b:b9:45:e0:64:6f:db:
bf:d2:47:ad:e7:2b:5e:45:b8:8b:a7:68:90:fe:76:
a6:17:4f:f8:c9:5f:b9:95:a6:6e:27:c1:80:82:bb:
3d:aa:4e:26:28:d3:f4:0e:e8:9b:96:d8:94:74:3e:
ce:38:2d:b3:61:df:06:68:26:39:b3:1d:ff:37:2c:
2f:97:0c:0a:70:51:aa:41:c8:18:79:ad:aa:78:33:
e6:9a:92:4b:4b:8f:81:80:80:b4:a7:2a:ab:79:cf:
5d:86:ba:af:00:45:d8:18:44:4b:cb:3d:f1:61:63:
fa:6d:97:b9:e0:7e:ad:ea:87:e1:36:d6:6d:5e:6b:
fd:fa:81:d4:c0:2c:a6:84:e2:08:19:b2:7c:4b:f5:
27:0b:7f:aa:34:72:dc:48:15:7c:8f:45:33:d0:04:
76:ed:b7:17:7d:ce:3a:84:9b:b4:3b:bb:fa:08:67:
a7:c1:a5:1e:1d:58:b6:b5:2b:39:1f:1d:76:04:a1:
42:07:66:84:ce:19:ae:75:a0:d4:fc:99:d0:30:bc:
85:98:0f:7b:4f:7d:63:71:cd:7c:25:a0:75:a9:bb:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2D:0B:1F:FF:48:DD:88:81:19:11:94:B9:33:D3:01:AD:C5:23:DC
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3a:fd:39:73:29:92:b8:69:ae:71:89:85:87:f6:8e:6e:96:
72:e9:9c:55:01:d5:e2:30:34:bf:90:c3:30:5e:1c:44:b9:e3:
c5:d0:bb:fb:83:3d:c7:84:9a:2d:15:45:27:ce:be:9d:70:73:
1b:be:fe:23:d3:7d:96:25:fb:b6:f2:3a:a5:9e:c4:62:d5:3c:
d4:d0:cf:f1:ec:7e:15:c9:7c:f8:12:50:4c:50:68:f1:15:0d:
0b:0b:a5:6b:7a:51:30:a7:a8:07:09:8f:2a:14:c5:aa:a9:a6:
0a:52:0e:29:95:38:c1:33:5c:4b:0b:82:04:ae:29:f7:f2:dc:
0e:4f:d2:29:ea:bf:41:7b:cb:80:3a:4b:07:2a:83:dc:1f:46:
36:94:b8:6f:53:f5:a0:fd:77:ab:7e:71:21:0d:42:fb:c7:df:
f2:13:22:c0:eb:5d:5a:47:d6:94:e0:15:4c:6b:e1:32:de:9b:
ae:07:d5:08:af:35:1b:01:f1:83:bf:e2:b3:bb:3d:61:81:36:
cb:47:43:f8:3a:f8:74:50:dd:7c:c7:f3:90:1c:7f:bd:47:ba:
43:82:1c:a3:78:85:d3:02:40:c9:5f:b3:01:a8:8e:62:60:0b:
48:80:73:fe:76:3e:b5:52:db:a4:59:40:0c:1d:b2:f5:cb:8a:
10:01:29:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:58 2026 by rpki-client