Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: 1oNhs2SS72Aa7k+bhAkGxp2vAh99SyCmC63/bVwyrW0=
Subject key identifier: 63:38:76:69:FA:C8:3E:97:09:7F:28:F6:38:8E:09:E2:EB:5C:7D:12
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019D9AABFC625B96E22540AB47B866C0EEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: WtgMVSzD1H0XEFMPn6AxiztaxduAANKzWYIhoVL2Jug=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fc:62:5b:96:e2:25:40:ab:47:b8:66:c0:ee:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=63387669fac83e97097f28f6388e09e2eb5c7d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:b6:fb:82:59:fe:32:85:51:7e:89:ae:f1:
f9:0b:1f:41:93:bf:76:1e:72:29:9d:84:d6:5f:08:
66:5a:cb:1c:8c:ac:91:a2:14:a8:fd:b0:52:f5:55:
f0:b0:e0:5b:d8:0c:37:fd:57:2d:81:41:1c:c9:d8:
97:7c:1a:c3:6e:fc:18:28:2e:65:be:5f:d7:5b:fa:
21:43:e2:de:33:e1:80:2a:c9:bb:ba:3a:6a:d1:30:
fe:7e:81:aa:87:a9:d1:47:ad:77:9d:fa:67:d6:d2:
cf:62:f6:0b:49:11:88:29:0c:1c:4d:ef:f2:c7:ac:
5a:8e:24:c9:ee:e6:81:9e:64:a2:c9:47:64:af:f6:
ba:29:75:7c:b7:37:f3:28:e7:dd:89:bb:d5:f2:21:
99:ff:31:11:1b:ac:eb:13:6d:e7:f8:9d:fd:d3:18:
e2:34:ce:be:b5:90:c9:8d:ca:03:7c:9b:2c:ac:e9:
5a:88:ac:74:c3:92:82:3e:b2:17:aa:fd:d5:82:a1:
fb:7f:66:34:12:b6:fa:0a:77:f2:f4:b3:a7:4c:9a:
8a:35:2c:77:fb:c8:55:dd:47:87:f9:fd:8a:ff:ff:
21:71:09:a8:93:fd:4f:c9:b0:3b:91:91:05:61:56:
06:68:92:5c:5f:77:32:06:48:dd:da:e1:e7:fc:4a:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:38:76:69:FA:C8:3E:97:09:7F:28:F6:38:8E:09:E2:EB:5C:7D:12
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ac:68:90:aa:9c:af:e0:d8:a3:29:1c:d7:41:67:a3:20:ed:
41:83:55:80:e5:b8:a1:b0:4b:83:79:0b:9f:b3:2e:5f:89:42:
9a:48:96:95:57:e7:0f:52:ce:ad:78:ee:75:3d:f1:4e:78:f2:
22:4f:01:3f:59:de:8d:e0:ae:63:61:e5:96:94:5e:d8:7c:db:
eb:50:6b:f5:90:04:c2:48:6c:22:27:18:6f:13:6c:ad:b4:f3:
09:5f:99:a8:9a:85:6a:a3:a0:71:82:e3:e8:b3:49:0f:5a:21:
61:b1:60:10:76:99:2a:81:24:13:b7:26:e5:46:db:87:02:53:
61:6e:b1:ca:83:f1:b8:dd:9e:26:89:7c:0b:92:25:94:85:cb:
57:32:d1:6a:d6:74:8d:e4:12:1f:08:c2:45:45:38:9b:70:23:
61:47:b7:77:1a:ab:cd:b2:ca:d0:06:1f:0a:c3:b3:83:38:a6:
c6:e8:f4:2d:fc:60:3f:ca:58:22:cf:48:df:03:15:f4:12:6c:
ff:38:b1:9c:f2:d8:6d:03:31:92:8a:92:72:16:5e:fb:08:aa:
e5:ad:07:87:23:39:cc:66:02:14:91:43:0b:95:59:18:48:b8:
7e:35:ca:0d:80:05:b7:00:a3:50:00:12:fb:d3:40:97:4b:fb:
4f:de:58:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq/xiW5biJUCrR7hmwO6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2
OTBmZjIwHhcNMjYwNDE3MDkwMDU1WhcNMjYwNDE4MDkwMDU1WjAzMTEwLwYDVQQD
Eyg2MzM4NzY2OWZhYzgzZTk3MDk3ZjI4ZjYzODhlMDllMmViNWM3ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDi2+4JZ/jKFUX6JrvH5Cx9Bk792
HnIpnYTWXwhmWsscjKyRohSo/bBS9VXwsOBb2Aw3/VctgUEcydiXfBrDbvwYKC5l
vl/XW/ohQ+LeM+GAKsm7ujpq0TD+foGqh6nRR613nfpn1tLPYvYLSRGIKQwcTe/y
x6xajiTJ7uaBnmSiyUdkr/a6KXV8tzfzKOfdibvV8iGZ/zERG6zrE23n+J390xji
NM6+tZDJjcoDfJssrOlaiKx0w5KCPrIXqv3VgqH7f2Y0Erb6Cnfy9LOnTJqKNSx3
+8hV3UeH+f2K//8hcQmok/1PybA7kZEFYVYGaJJcX3cyBkjd2uHn/EoshQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM4dmn6yD6XCX8o9jiOCeLrXH0SMB8GA1UdIwQY
MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt
MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy
LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKxokKqc
r+DYoykc10FnoyDtQYNVgOW4obBLg3kLn7MuX4lCmkiWlVfnD1LOrXjudT3xTnjy
Ik8BP1nejeCuY2HllpRe2Hzb61Br9ZAEwkhsIicYbxNsrbTzCV+ZqJqFaqOgcYLj
6LNJD1ohYbFgEHaZKoEkE7cm5UbbhwJTYW6xyoPxuN2eJol8C5IllIXLVzLRatZ0
jeQSHwjCRUU4m3AjYUe3dxqrzbLK0AYfCsOzgzimxuj0LfxgP8pYIs9I3wMV9BJs
/zixnPLYbQMxkoqSchZe+wiq5a0HhyM5zGYCFJFDC5VZGEi4fjXKDYAFtwCjUAAS
+9NAl0v7T95YgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:39 2026 by rpki-client