Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: wAt6eXKEvearEiEUexRxZv6APtteI/2qUvseNgsWN8Y=
Subject key identifier: 5D:CB:ED:E1:3D:3D:6D:92:8E:5B:C5:6F:D3:FC:AB:AB:17:4C:36:A5
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019FAA8891FB94F1C949EAAA51E9D261C0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0FE8
Signing time: Tue 28 Jul 2026 21:01:44 +0000
Manifest this update: Tue 28 Jul 2026 21:01:44 +0000
Manifest next update: Wed 29 Jul 2026 21:01:44 +0000
Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: jtCJ/7/aY+R7r5Ca/Olo5fwo3xIjJM+LbmpC3v1q80Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:91:fb:94:f1:c9:49:ea:aa:51:e9:d2:61:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Jul 28 21:01:44 2026 GMT
Not After : Jul 29 21:01:44 2026 GMT
Subject: CN=5dcbede13d3d6d928e5bc56fd3fcabab174c36a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:a5:f2:ca:a5:c4:15:a2:1c:9e:64:35:90:
0e:28:d4:95:6f:5a:b8:56:f4:05:4d:ba:63:2f:7a:
02:8e:9b:49:3a:58:1e:6c:d6:28:4a:98:fe:d4:8b:
f2:70:61:f1:cf:06:55:65:dc:93:fb:30:37:e8:c4:
16:e9:29:78:08:5c:7c:86:b6:53:a3:5c:b1:7c:16:
4b:b6:77:a3:b1:ea:79:e5:d0:4b:1e:f7:dd:da:51:
55:b5:89:52:5e:2f:5f:1d:9a:32:ee:38:a7:06:4f:
36:09:99:2c:47:7d:f6:67:38:d5:77:b3:e0:0a:fb:
db:3c:f4:65:63:84:af:c1:24:ca:8c:c1:85:08:b1:
ec:ba:cf:24:3e:33:aa:f3:8c:ee:1f:16:a9:de:8d:
c7:58:10:d5:2c:ad:7f:49:5c:99:84:58:34:2c:4f:
d6:3a:b1:b9:73:5b:0d:f0:00:fd:90:06:2b:ef:14:
0f:ce:b3:66:ae:3d:3b:57:0f:45:76:bf:94:37:5a:
0e:1c:08:d4:2f:a0:73:3f:75:33:2a:84:f9:10:a7:
71:10:0a:1a:5f:64:2a:c0:0f:aa:46:28:dd:e0:bc:
a1:9e:55:81:ff:62:51:70:17:a8:8c:db:32:10:0f:
d1:03:2d:e7:0c:c6:34:99:bc:0f:8b:94:04:17:93:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CB:ED:E1:3D:3D:6D:92:8E:5B:C5:6F:D3:FC:AB:AB:17:4C:36:A5
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f5:ea:96:21:4e:2c:dd:50:05:74:20:3c:20:f9:f9:db:cb:
a2:4a:92:50:fb:f9:2f:7a:fc:d4:1f:2a:65:95:a2:ec:25:ed:
9a:71:07:02:1d:67:ae:37:ce:61:2d:4f:89:98:e6:45:0a:85:
87:62:3f:fd:a8:0f:f6:2a:14:20:2b:c5:a7:b5:f1:04:82:d9:
f0:be:7f:30:9a:34:cc:ed:cc:ba:ae:aa:a0:84:e4:37:05:74:
30:63:73:86:b2:17:76:0d:ed:49:fb:63:f6:8b:b0:a8:b4:ca:
75:96:4d:83:7f:a3:4e:e1:ec:e9:16:fb:1e:3b:cd:87:fd:c3:
74:04:df:a7:9c:52:69:07:09:cb:b0:56:fe:94:85:79:93:83:
e8:8c:bc:95:13:e8:2a:31:6b:c7:0d:78:aa:db:ed:1d:af:9b:
e1:7f:71:e5:4d:43:23:62:f1:b4:35:4e:41:39:e0:c0:ef:90:
ba:66:ca:85:ad:0f:be:e8:86:ae:7b:5a:f8:e3:21:94:7f:2a:
6a:aa:50:e3:44:9f:97:bf:bc:7d:cf:fc:32:9f:c3:f2:fa:fe:
cc:5e:9d:7e:a8:1e:cb:4f:c2:31:29:d6:fa:8e:89:18:e4:46:
52:cb:20:a2:48:2f:20:42:05:d3:9e:70:34:11:d6:2a:89:f3:
62:75:bb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:45 2026 by rpki-client