Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: RuoQ9dTmjwTHET22/6xaarHqa8oJwnratDZORmUwEVM=
Subject key identifier: 68:B5:DC:FC:B9:1A:89:30:37:52:E2:34:A0:AE:76:BA:20:47:13:81
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019D996238C910D4437DF9E4296E99924069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0ED6
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: 6EO8rwOemlfTze3KnunbrLOaInOE1cawdqsESzRXIPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:38:c9:10:d4:43:7d:f9:e4:29:6e:99:92:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=68b5dcfcb91a89303752e234a0ae76ba20471381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:2a:51:8f:c6:70:ca:45:dc:19:a0:3b:b1:
88:26:86:11:38:69:8e:eb:c2:34:c3:1e:72:9e:2b:
1d:4f:e9:6d:79:19:82:78:7a:7b:7b:eb:a4:af:a6:
a3:50:d0:47:5c:ad:e0:df:d9:60:0e:78:d2:34:7a:
22:cc:e3:92:6b:0a:7e:70:c9:94:ee:db:ed:5a:04:
55:ff:ba:32:08:bc:d0:95:65:23:92:fc:75:1a:90:
53:a3:ac:74:92:f7:13:5a:00:9b:b1:42:1a:6b:37:
65:60:b0:ff:8d:70:01:93:02:fb:b8:f9:cd:09:0a:
f8:80:70:c6:a8:74:63:da:c7:d4:27:18:ff:8a:54:
a4:30:28:53:87:ee:13:64:c2:41:c6:19:37:a2:6b:
6b:34:03:fa:58:cb:70:21:4e:c6:5c:1e:90:55:77:
7c:5e:6e:d9:97:f1:c5:2d:f5:e5:80:5d:eb:4e:2c:
fa:6c:44:0e:76:94:ef:e8:8d:85:ef:36:fe:6e:88:
92:3b:08:a0:83:c2:e9:51:19:73:50:40:c3:fd:61:
e3:39:8f:b4:2e:54:c4:dc:c3:ec:f2:3c:d4:35:87:
92:5a:4a:bc:d9:eb:de:18:da:89:0c:27:e7:c6:2a:
c3:22:35:9d:64:65:a2:3a:50:e8:de:39:5e:00:70:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:DC:FC:B9:1A:89:30:37:52:E2:34:A0:AE:76:BA:20:47:13:81
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:21:a6:24:2a:b6:f2:c0:d6:4c:de:4f:40:1b:e7:12:16:99:
b2:4b:4f:f8:a9:69:5a:44:22:c0:4b:e5:a9:12:15:b6:82:3d:
5f:f8:7c:7f:e5:71:35:51:10:c6:38:b9:55:a5:83:7b:97:47:
a2:81:2d:98:2f:38:0e:01:c8:53:83:58:23:49:eb:78:41:39:
24:06:08:11:fb:43:71:77:44:79:d2:12:f3:2a:00:80:b8:ec:
82:4f:45:9e:c9:e7:79:79:b0:85:ed:5e:4d:af:da:b3:7a:61:
cd:8a:2b:51:a9:fe:98:57:53:70:70:b0:2c:3c:a4:39:2b:6d:
37:43:1b:11:d9:7a:13:26:0f:ce:b4:fa:29:cf:cd:7e:b5:20:
b4:e2:c5:37:35:41:86:37:2f:71:0c:ce:4d:3e:8e:fa:31:58:
c3:7d:63:dd:bf:73:dd:d1:4d:76:17:b6:6b:cf:c6:47:d0:a5:
c3:15:48:d2:a4:3c:e8:74:cf:82:9a:9d:03:52:bd:0e:ba:c7:
6a:e0:56:fb:52:8b:21:44:df:ea:05:7a:b1:84:6a:fd:a6:92:
17:1b:fa:e6:82:c4:e6:04:c8:7a:f9:17:52:06:8c:00:1f:47:
17:50:ad:ed:6f:0f:1b:60:f8:03:99:ef:60:9e:fc:d5:e2:e5:
9b:3f:34:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:04 2026 by rpki-client