Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: rYWeMot0yMo3aTP+qYBiTeH1R1IrwCbHQFRiKROt8h8=
Subject key identifier: C7:D2:D6:87:08:A0:9B:25:11:47:59:3B:7E:A8:47:7E:49:50:F9:55
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019CAD22B816C8355A8D19ED105A26538167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:00:59 +0000
Manifest this update: Mon 02 Mar 2026 06:00:59 +0000
Manifest next update: Tue 03 Mar 2026 06:00:59 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: HhQHyxn3DdZsFiIBg+x1XEm8ThJifKCcQdAPEG86388=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b8:16:c8:35:5a:8d:19:ed:10:5a:26:53:81:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Mar 2 06:00:59 2026 GMT
Not After : Mar 3 06:00:59 2026 GMT
Subject: CN=c7d2d68708a09b251147593b7ea8477e4950f955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:38:0b:8e:06:94:fb:5d:02:b6:0f:40:ca:
f7:61:4d:f1:be:e9:99:c1:dc:89:45:a3:28:26:e5:
59:60:d5:d0:a9:e2:1d:35:25:5b:45:ea:ff:2e:d7:
04:4f:8c:00:49:84:c3:bb:db:20:f9:69:ce:b9:ae:
e9:c7:7c:08:1b:79:c6:b1:80:fb:93:17:56:d1:78:
f2:12:9a:0d:d4:f3:0e:0c:81:9f:02:6a:54:5d:06:
f0:19:1d:16:e7:29:fb:37:df:ec:e0:26:e4:74:6c:
bb:48:6b:92:08:e8:d9:e4:d4:c6:c7:58:66:0d:45:
e9:70:01:3c:8f:f8:c8:80:34:eb:a1:d1:0d:c3:05:
9d:f7:20:b8:49:93:a7:c1:38:1d:b3:9f:f8:1f:2f:
fa:24:87:af:47:d5:ea:94:28:b0:b7:3f:19:59:e0:
9b:70:18:7f:68:3a:c4:9a:30:4c:f9:bc:f1:05:4b:
33:8e:2b:04:95:15:b2:be:38:07:87:0f:1b:41:0e:
19:0b:b8:d3:24:03:41:66:09:a4:ab:81:a2:d5:d0:
03:a4:3a:97:e1:70:80:fb:82:15:05:79:ee:15:58:
66:a7:73:e4:f6:56:e4:e5:87:db:9c:df:62:d9:32:
b6:ac:52:22:92:87:18:6e:61:7f:c6:32:cc:b6:e6:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:D6:87:08:A0:9B:25:11:47:59:3B:7E:A8:47:7E:49:50:F9:55
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4a:de:68:2f:74:c4:a1:83:85:f8:28:fa:08:2b:a2:4b:c1:
ae:5c:ab:49:96:7f:3e:dc:4a:8f:c3:b5:20:1f:31:6a:60:0e:
09:c0:60:3a:bf:7a:f6:d3:af:c2:b3:9a:6d:45:4d:f2:45:bf:
31:2f:64:b5:6e:91:28:a7:0c:96:ea:96:dd:df:7e:8f:11:8e:
58:35:65:a5:bf:99:7d:fd:64:00:d4:63:37:4d:e3:62:ac:81:
44:b3:68:ff:ab:6d:cf:5b:8d:c2:a9:b3:a3:f6:ea:30:08:37:
75:4f:f7:03:28:6c:d2:3f:c6:5c:55:48:9b:f8:72:61:b1:a6:
31:2e:2a:df:cf:d1:13:f4:fc:fd:d5:26:97:f9:95:19:dc:98:
ba:ee:21:35:e9:2e:0e:e6:f0:c0:10:63:da:e8:99:ca:a0:44:
e4:0c:4b:d3:6c:1c:a5:d3:88:fc:aa:5f:2e:36:b1:33:57:7c:
d6:57:75:0e:f2:b3:95:74:8e:bd:b1:9a:dc:22:72:89:d4:3c:
7e:af:97:19:1b:91:79:fd:dd:1e:8e:08:a8:b2:bd:50:7b:dd:
c0:63:98:2e:b4:68:fa:21:0d:42:9f:45:a2:60:ca:e4:6d:fa:
44:c4:bb:3e:b0:56:a8:ae:87:bb:fc:c4:36:af:e4:72:5a:e6:
8a:b8:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:52 2026 by rpki-client