Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: WV3jjUSqB7F1IQxnJnXx69uWiFkZ7FOfjDxOcpduo68=
Subject key identifier: 77:05:AE:B7:08:23:85:ED:DE:91:35:FF:24:8A:9C:3E:2C:C2:AE:14
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 01A0C47CAE12B7182DA8FC5A0A998F5C0E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 107A
Signing time: Mon 21 Sep 2026 15:01:40 +0000
Manifest this update: Mon 21 Sep 2026 15:01:40 +0000
Manifest next update: Tue 22 Sep 2026 15:01:40 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: x508cm6IL82fgaa0o9cQIoPLH97R6P2eoXP6OMUdE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:ae:12:b7:18:2d:a8:fc:5a:0a:99:8f:5c:0e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Sep 21 15:01:40 2026 GMT
Not After : Sep 22 15:01:40 2026 GMT
Subject: CN=7705aeb7082385edde9135ff248a9c3e2cc2ae14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:6f:c3:c7:9e:da:a3:ad:0a:b1:13:bc:a6:
13:d2:af:e2:6d:ec:2c:b0:11:85:4e:6f:ec:27:56:
4a:31:17:3e:8f:c0:bf:79:4b:22:3c:e4:0c:62:2a:
84:f0:9e:bf:0d:0d:d0:3c:4d:2e:1d:e8:d0:8d:a1:
22:75:8f:42:68:8f:6a:7e:75:89:12:ae:63:ff:f4:
44:0e:34:cb:fa:c2:fd:82:fd:ca:fa:53:80:91:30:
7e:2b:43:58:e7:19:2b:75:4c:66:5b:da:e2:76:3a:
98:ed:5d:80:62:3f:96:29:b2:c3:25:d5:9a:bd:8e:
b1:60:00:05:fd:a2:bc:6a:3c:9b:4b:ae:1c:29:6b:
6c:1e:a9:9f:8d:9c:e3:bf:17:2b:12:c0:63:3d:50:
b9:23:9d:23:1a:fa:82:3e:3e:34:57:76:52:71:cb:
c3:26:a7:69:4d:6c:3d:e1:10:7c:92:0b:df:98:c9:
a0:ea:0d:62:06:8f:82:6a:ac:48:e0:d6:f8:25:fa:
43:2a:89:5a:65:4a:61:e2:d9:02:6f:f8:f6:a8:54:
66:48:dc:6f:b3:79:3d:64:8f:7a:7a:8d:d0:7d:d7:
16:bb:63:c0:11:64:31:aa:22:5d:6f:fe:e6:c5:87:
5f:98:9f:ba:88:5a:c7:18:e3:20:c3:18:ba:34:7e:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:AE:B7:08:23:85:ED:DE:91:35:FF:24:8A:9C:3E:2C:C2:AE:14
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:40:26:7b:a7:0d:03:e1:9a:21:0f:b6:1a:09:2f:8b:4e:
0b:6c:76:31:ec:79:fa:16:3d:a8:95:38:4d:7b:2b:d7:6d:5a:
4e:2d:f0:4b:98:f6:c8:03:1c:98:97:a4:14:39:e7:e3:eb:8b:
81:17:16:90:79:5e:a0:38:41:44:e2:e7:57:26:79:23:c3:0b:
4b:06:2d:cc:11:b4:1a:a6:78:d9:e6:ae:ef:8b:6b:0f:8e:5d:
81:8d:e8:a2:fb:56:7d:4b:ae:ec:89:19:a0:ae:08:68:f4:e9:
fb:e4:b6:99:6e:24:db:93:81:c2:a0:b7:bb:ff:06:3d:be:c2:
a3:09:09:04:ee:5b:03:fd:e2:86:e8:9e:23:31:62:30:2f:85:
5f:06:f5:56:32:a7:4b:09:24:ec:e8:52:a4:4a:28:e7:64:93:
aa:ca:41:43:e0:6e:be:d4:db:b7:63:e0:b6:2c:6a:89:d3:52:
e2:4e:f7:6b:2a:22:59:e6:c5:47:46:a6:e1:5a:e9:9d:d8:e3:
ff:ba:3a:31:20:65:9d:71:f9:c9:81:64:f7:45:5f:f8:fe:3b:
fd:51:cc:d8:2b:ff:9a:11:eb:70:2b:02:68:8b:e6:06:72:e2:
42:60:84:d8:c7:2b:d9:76:a8:60:26:53:88:d5:bb:41:10:db:
66:bc:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:58:51 2026 by rpki-client