Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: piwaISydtlDTm/WUTu5ni90VGoGKWgtIRw1Ye1lUPjc=
Subject key identifier: C2:72:27:7E:1D:02:D8:BD:86:54:27:3D:EB:3C:D2:D1:F1:F4:50:37
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019D9AAB7BD3E20FF013638E95670F2AB8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 047E
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: 1/pqNqinOpoBMaLjZk8PoGrKYItwwzDofwiDWWgDqVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7b:d3:e2:0f:f0:13:63:8e:95:67:0f:2a:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=c272277e1d02d8bd8654273deb3cd2d1f1f45037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:fb:b7:e1:53:bc:ce:e3:5f:37:46:b5:b8:
c9:36:cc:cc:fb:e6:c9:d3:18:4b:6b:88:36:67:57:
e2:89:ba:f7:41:c9:1c:05:d2:f6:fe:4f:05:80:42:
04:ee:ca:f1:8b:a8:75:58:cc:bf:b0:4f:e5:fb:85:
60:f8:70:69:40:a5:c9:a2:92:08:8c:2a:ab:79:6c:
72:b7:fe:35:0c:81:2d:e9:4e:f7:3e:50:8f:c6:50:
04:a0:53:17:89:51:01:cc:6a:a8:09:bf:da:b4:83:
e4:40:a2:7b:ff:68:a1:3d:45:d6:57:2b:52:f5:51:
eb:33:35:7c:50:e2:e7:d8:88:a1:f0:9c:33:c3:6f:
24:ca:91:16:35:56:b0:99:ac:68:f8:3e:8c:07:1b:
09:ff:9f:b3:be:f6:83:6f:4d:9b:e5:56:0a:fe:f7:
d0:9f:0b:39:32:52:f5:51:42:63:30:bb:41:26:f4:
27:c5:f3:23:54:72:8d:88:10:ff:73:1e:a1:0d:a6:
ed:9c:9a:a5:4d:70:b2:6f:52:82:59:e3:0a:43:cf:
a9:d0:2f:42:33:04:58:5d:75:99:30:92:41:64:97:
9f:9c:b8:e2:4d:30:5a:39:ac:5a:5d:e3:6b:65:dd:
6b:d9:07:a1:9f:4b:62:cf:75:e0:50:41:d3:17:11:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:27:7E:1D:02:D8:BD:86:54:27:3D:EB:3C:D2:D1:F1:F4:50:37
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2b:96:74:60:54:c6:5a:6b:f7:c0:4d:1c:e2:e7:53:33:de:
2d:46:95:60:23:51:26:74:ae:d9:e6:ae:65:ff:50:33:33:a2:
bc:e0:68:b3:cb:84:0e:c3:dc:26:72:1c:84:b7:0d:77:85:78:
91:b1:d4:dd:a4:63:67:b2:a1:4a:69:20:47:63:09:2c:af:d6:
31:20:f6:50:e5:00:fd:f3:78:c0:ca:01:50:4e:43:8a:c6:c7:
f7:da:a8:c8:4b:74:ec:1c:4c:7b:37:fb:25:c8:45:29:86:a8:
3b:1d:4d:26:e2:0a:b3:76:d1:5d:8c:26:7f:10:a2:fd:21:5b:
19:fb:c8:42:e8:b4:a3:4e:7f:ac:1c:dc:78:1b:5e:31:f1:4b:
3a:73:ce:4d:f8:e2:94:bd:5f:21:f7:1c:52:ae:ae:36:66:ed:
39:0b:44:ab:7e:86:d7:94:4d:e7:5b:8e:24:59:df:9b:39:91:
92:33:7b:45:57:0f:e2:c6:63:e3:e8:c6:62:eb:6e:e8:92:9c:
1b:25:41:8a:80:f2:e1:07:56:0b:17:ad:2b:06:dd:28:aa:70:
86:f9:73:ad:46:a7:79:ed:49:b6:dd:0b:68:53:bf:ac:80:35:
1e:06:a6:56:11:d5:c9:fc:cc:ca:11:8b:61:e3:b2:04:a4:ee:
0c:6d:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:37 2026 by rpki-client