Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: OyB0eZmMYMyMnCm/vZv/2bcWav1Oia+1GCXSVQbhwXY=
Subject key identifier: 88:21:F4:2E:5F:60:62:E6:2C:FC:9A:A2:9A:F1:CA:C5:A1:22:32:47
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 01A0C7B3EF40531CD25B3FC0CD369BA2925B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 0623
Signing time: Tue 22 Sep 2026 06:00:53 +0000
Manifest this update: Tue 22 Sep 2026 06:00:53 +0000
Manifest next update: Wed 23 Sep 2026 06:00:53 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: nzVb8P1cZGfeL4xd/BvuXahsZctvIm7LSIQoW2azZjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:ef:40:53:1c:d2:5b:3f:c0:cd:36:9b:a2:92:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Sep 22 06:00:53 2026 GMT
Not After : Sep 23 06:00:53 2026 GMT
Subject: CN=8821f42e5f6062e62cfc9aa29af1cac5a1223247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:eb:30:20:60:56:c9:93:00:b4:f7:5f:b6:
55:dd:10:2e:f7:e0:ea:1d:dc:51:8f:d0:be:41:1a:
2a:31:3e:ab:63:52:c6:3e:e0:fd:ad:3f:46:4c:34:
88:de:45:58:8e:3b:66:89:70:49:91:4b:ce:32:40:
66:f9:fb:22:4d:33:d6:27:2f:7e:ee:cd:f5:88:b4:
d5:08:09:bb:9f:35:2c:6d:ca:df:4b:14:46:d6:cf:
90:65:99:07:63:39:af:16:8d:6d:5c:8a:09:dd:db:
6a:bc:e5:f2:3b:7b:c9:82:f5:95:ff:13:5a:20:90:
a4:bf:fe:7f:ed:84:df:04:2f:bb:c0:86:aa:89:8f:
71:6b:f3:d7:3b:14:9b:b7:ba:63:d3:58:d2:5a:e6:
e7:9c:10:28:32:36:65:da:c6:68:0c:17:e1:5c:12:
b0:ed:18:52:bb:e3:1e:05:5b:ca:cb:1d:3e:5d:97:
df:00:14:4a:d6:dc:f7:bd:27:c9:69:d7:e3:d0:41:
d4:cf:4c:cd:6a:8f:47:b7:81:fc:44:d0:53:f9:78:
58:4e:87:21:46:b0:5a:9f:94:2e:e6:a8:be:57:2d:
00:7a:07:22:b8:6c:9d:c8:1f:e8:07:71:70:6a:2b:
93:ea:3e:a0:c4:ee:86:81:83:75:dd:f4:18:b3:03:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:21:F4:2E:5F:60:62:E6:2C:FC:9A:A2:9A:F1:CA:C5:A1:22:32:47
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0f:27:13:a7:32:8a:6a:a2:4a:e9:bc:08:7f:f1:9a:32:1c:
31:b5:4f:b5:83:8e:48:fe:77:5d:0e:9d:64:25:f3:44:80:f7:
77:d9:94:6b:09:17:25:16:83:40:1b:08:0c:31:c7:35:70:43:
b7:38:c0:ac:56:a0:64:5e:24:1a:8e:75:88:6a:09:ac:5e:e8:
3e:96:b4:b1:76:bc:56:d3:42:1b:6e:86:69:f2:a7:58:69:10:
4e:99:45:ca:8e:a9:15:90:be:e5:e3:7d:b0:35:14:77:02:45:
d8:81:73:cf:2a:ed:58:f5:67:d3:ae:8b:4e:e5:13:61:9a:78:
93:6c:11:e2:95:a1:21:27:24:22:49:4b:bc:d1:a7:78:aa:d6:
8d:c9:0c:ea:a5:e8:7b:ea:96:61:8a:ff:33:d3:37:d9:56:37:
91:b7:5e:47:85:fa:80:55:64:f2:7b:57:a8:d2:a6:2a:bb:be:
91:1c:be:82:c1:27:c5:2c:27:dc:56:2a:df:81:cc:35:83:4d:
07:80:3b:c4:e7:9b:a5:8a:b6:ac:79:cc:3b:0f:ed:a4:3f:88:
56:0e:2f:dd:b6:32:55:b0:fd:1c:20:53:26:c9:63:63:ee:a9:
05:32:15:6b:24:ba:c6:6e:0e:05:e0:ad:0f:d5:72:c6:aa:94:
9d:50:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:49 2026 by rpki-client