Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: nzlpN6mhox1RrBPDogrAczXNSsvLlHoxssHl5lOfC+M=
Subject key identifier: 58:93:72:F2:75:5F:7A:4E:3D:30:FB:E7:67:D6:38:0F:B1:F7:23:AE
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019EC036B57C2648F161E01C00080594EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 09:01:11 +0000
Manifest this update: Sat 13 Jun 2026 09:01:11 +0000
Manifest next update: Sun 14 Jun 2026 09:01:11 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: /ZCYuNROCksDJY/1ulSfcKgvkr+5Hr+1x9CAglqxmTg=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:b5:7c:26:48:f1:61:e0:1c:00:08:05:94:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jun 13 09:01:11 2026 GMT
Not After : Jun 14 09:01:11 2026 GMT
Subject: CN=589372f2755f7a4e3d30fbe767d6380fb1f723ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:3e:ac:6c:02:26:4c:f5:c6:0e:38:80:60:
ce:65:0e:87:99:5e:4d:f9:64:53:95:07:1c:cd:11:
0b:16:58:45:63:20:6e:dc:2b:4e:5a:24:65:b1:c5:
5c:db:d5:cb:f7:e9:92:f3:86:ab:67:39:be:a2:da:
b0:07:26:ff:ec:2c:af:ef:9c:61:38:2a:29:e7:23:
0a:bb:85:3f:31:ea:90:00:9a:b5:07:03:54:08:d9:
45:f8:96:4c:96:64:66:64:7f:e4:ff:f4:7c:ff:cb:
9b:a9:86:53:d1:56:e3:74:03:fa:63:42:93:f9:6a:
66:23:b0:72:89:48:e5:66:d0:fa:8c:83:58:da:09:
16:87:9f:ae:e1:5e:db:ea:f6:5b:09:9b:dc:80:79:
d6:d5:66:7b:df:bc:20:61:90:22:ec:91:23:13:64:
cb:33:a4:41:9d:e1:22:9f:71:d2:01:b7:c9:43:87:
1a:cc:72:16:e7:e9:46:cf:7c:ae:90:ee:71:d0:99:
5a:b9:0d:fd:e1:33:00:81:7f:d7:23:b7:e9:07:1c:
c7:1e:96:87:55:6a:26:8c:47:42:cd:92:d4:be:37:
f5:38:58:98:7f:ec:7c:0d:2e:c6:a0:0c:36:6e:af:
87:08:c1:88:78:84:4e:0d:57:46:e2:34:64:47:30:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:72:F2:75:5F:7A:4E:3D:30:FB:E7:67:D6:38:0F:B1:F7:23:AE
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:cd:fc:98:e4:53:d1:a2:00:d8:4b:d8:36:49:aa:4b:f3:
3a:d3:2a:7c:57:cc:26:60:f8:c7:24:79:e9:17:ac:52:68:48:
22:db:e2:68:d3:a8:7e:b1:6b:da:a7:ac:68:05:12:5f:38:a9:
61:68:8c:a8:8c:46:38:d2:af:4c:a0:ed:a2:0e:37:05:47:cb:
16:80:c6:dd:b1:3e:ff:de:45:e3:b1:a4:37:ef:78:be:bf:24:
5e:2c:bd:4b:12:b2:8a:96:9a:91:7e:4c:a4:6f:7b:da:5f:09:
e8:b0:6f:b5:26:0a:cc:aa:44:85:2e:f7:e5:fa:a6:cf:a1:e3:
98:c7:72:0e:44:71:ce:37:ed:24:52:fb:3c:93:7b:0c:db:31:
00:a7:63:b2:4b:0d:d2:82:4e:33:48:27:e7:fb:30:0b:f5:b1:
0d:6f:cf:6d:64:df:05:c7:28:5f:df:34:c0:ec:48:bc:89:41:
45:8b:85:31:bc:e7:32:c4:41:cd:bb:3b:b4:0b:b7:42:7d:ad:
4f:b2:18:ae:e3:09:9a:4e:ab:4a:6c:f3:22:e6:a1:9c:73:2d:
9f:24:1c:9d:80:f4:b5:86:2f:7e:60:42:ba:75:12:cb:f7:15:
ab:8b:b1:e6:10:9a:7a:3a:07:3a:1e:7d:bb:65:81:2f:d2:4e:
ab:f2:ce:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:57 2026 by rpki-client