Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: gQqp+B7T94SXKRMlt3xEBqjJRstAXBc4diitjetn/Ag=
Subject key identifier: E2:CC:63:31:57:F0:2E:92:8D:7E:97:69:8C:61:DE:43:60:7B:93:47
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019ED3865392775F127A0F8FFC32C3C5EAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 0520
Signing time: Wed 17 Jun 2026 03:00:56 +0000
Manifest this update: Wed 17 Jun 2026 03:00:56 +0000
Manifest next update: Thu 18 Jun 2026 03:00:56 +0000
Files and hashes: 1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: JjE+J46mll9dFRY+6cldPbARB0htlrPrI8FbaWyesfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:53:92:77:5f:12:7a:0f:8f:fc:32:c3:c5:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Jun 17 03:00:56 2026 GMT
Not After : Jun 18 03:00:56 2026 GMT
Subject: CN=e2cc633157f02e928d7e97698c61de43607b9347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9a:92:1d:bc:40:10:42:b5:ed:bd:2d:ee:1d:
6d:3b:ff:e1:71:f5:f2:77:0e:02:d7:d6:22:91:c4:
84:a7:fd:f1:1f:ad:a5:7c:5c:9f:d9:86:f5:e4:6b:
b7:64:2f:7d:55:58:cb:d9:d5:dc:b2:80:d0:3f:02:
3d:a6:fc:37:cf:31:20:68:61:eb:cb:77:e9:ac:4e:
34:21:1a:24:c1:c7:ff:27:ca:5b:b3:d0:68:96:06:
62:92:86:eb:dd:b6:7d:f6:59:f2:2f:bf:d4:50:b2:
9c:24:7f:7c:4d:5e:63:1e:0d:11:04:f1:0f:cd:39:
2c:6f:9d:8e:a3:80:41:8c:6d:66:3a:a1:33:be:a2:
40:81:cb:8b:66:2b:16:9e:f3:8a:2b:45:fb:73:39:
80:6b:20:f1:a1:17:da:ef:71:42:18:bb:40:6f:19:
a4:5b:eb:65:6d:8b:71:f7:b8:22:dc:7d:7f:dd:a1:
1c:7b:75:48:33:af:e9:40:2d:5f:5d:86:85:bc:61:
91:62:93:d3:75:bb:8e:fe:d1:ab:d0:50:2e:4f:e5:
ad:0d:b3:c9:8d:6f:b2:ea:46:60:59:63:97:35:77:
3e:66:4e:12:39:d4:f3:2a:07:f9:70:a2:ed:a8:75:
2b:b2:dc:7a:31:5f:c8:03:09:a0:62:80:d8:40:64:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:63:31:57:F0:2E:92:8D:7E:97:69:8C:61:DE:43:60:7B:93:47
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f8:2f:63:ba:56:6f:3c:a9:19:9b:91:53:96:30:7e:de:49:
e1:c6:89:ae:ca:3e:70:b5:49:c5:a5:a1:62:93:36:14:50:db:
4c:da:dc:b8:f2:d5:ed:e6:4d:20:ef:7f:4f:41:11:69:17:0c:
47:d4:b0:0b:68:7b:bd:19:4e:fa:7f:85:12:40:e6:95:9f:7e:
e6:b3:fc:60:29:0b:10:2f:0a:90:fd:39:43:04:99:fa:e2:15:
89:5f:ed:07:3f:a8:bf:38:af:23:3c:bc:74:c1:7b:1d:47:19:
66:99:c5:8a:9c:b7:4b:27:c2:eb:c3:49:e7:da:78:42:a3:38:
59:b7:fa:1d:63:6b:87:af:2e:23:a8:33:14:0f:e8:0f:ab:a3:
a5:e2:5f:87:ad:9e:02:08:e0:67:01:f1:39:32:9c:e0:42:44:
78:2c:50:26:f3:f7:f1:7f:38:0b:8e:5d:53:c7:ed:00:fe:54:
62:06:44:d8:99:01:4a:3e:ba:ea:f8:78:d8:ba:03:f8:18:10:
05:1d:e9:cc:d5:57:0c:f4:63:70:3e:a8:2a:e4:47:36:04:f8:
6f:b5:f4:da:7d:7b:21:81:d3:21:2d:aa:4f:fc:8b:90:90:74:
84:dd:36:1d:bd:27:ab:1a:df:b0:b4:7e:88:62:65:2d:a1:49:
4f:75:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:48:13 2026 by rpki-client