Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: WWI65qaakTPQhfXPpriK7X/RAQiUQjDnFniy02zFo0A=
Subject key identifier: CC:67:63:ED:82:D9:BA:18:8D:A2:6F:98:52:21:FF:F0:F1:8C:6A:1D
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01A0C3D6BEDDFF38B0EE7B1494F82A5CF2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 12:00:25 +0000
Manifest this update: Mon 21 Sep 2026 12:00:25 +0000
Manifest next update: Tue 22 Sep 2026 12:00:25 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: fd1/I678hBgCHJd6Rw4J51iTxLINwBEEYIR68fYioZ4=)
2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:be:dd:ff:38:b0:ee:7b:14:94:f8:2a:5c:f2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Sep 21 12:00:25 2026 GMT
Not After : Sep 22 12:00:25 2026 GMT
Subject: CN=cc6763ed82d9ba188da26f985221fff0f18c6a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b0:14:57:64:82:79:72:8f:a8:78:80:12:aa:
a2:71:69:79:f3:09:8a:43:5d:0d:67:fa:d3:08:bb:
c1:59:34:2d:36:50:61:86:3c:3d:30:01:1e:f1:d6:
ce:ce:01:4d:72:86:bb:5b:07:8c:e6:fc:4a:72:4d:
4c:6a:ba:88:f7:04:ca:ad:dc:81:2c:4b:28:4d:28:
ee:d2:f9:f4:a2:23:44:39:e7:33:db:09:9e:9c:e2:
e2:35:ac:30:fb:3a:2b:4d:fe:27:b0:c0:6b:df:ca:
a1:ec:2e:6a:e5:3f:85:65:22:26:50:00:2a:4c:62:
02:31:2f:50:44:2a:12:37:91:53:23:54:f3:cf:80:
8a:ea:23:8b:c6:c5:6d:0c:a9:6d:97:17:d2:73:03:
f9:83:0c:11:24:d4:f1:89:95:30:ac:9d:ca:f2:e1:
35:e1:e9:28:6c:7d:94:8e:de:68:f7:9c:20:0d:bf:
9a:80:30:9c:cf:eb:88:84:55:a7:ea:da:7d:7e:69:
07:51:ee:da:cf:e1:af:73:3c:87:32:ac:0e:9a:75:
19:45:cf:e6:40:31:33:21:a9:b1:e3:5c:1e:80:f5:
06:18:a6:90:b1:23:fc:93:e5:f0:80:a2:b6:87:52:
af:16:a1:65:ae:91:1b:06:84:b4:97:9c:18:a3:7e:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:67:63:ED:82:D9:BA:18:8D:A2:6F:98:52:21:FF:F0:F1:8C:6A:1D
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6d:5e:4e:77:d6:60:f1:27:8e:c1:e7:44:47:2c:1b:00:c7:
e6:02:fe:01:c7:de:6d:7e:82:6f:25:55:77:1f:6d:49:7c:e2:
fd:bc:9c:8c:36:f7:08:c2:69:2f:c0:89:57:b5:63:9c:60:d0:
d6:a8:2a:a8:cf:67:33:83:15:a6:59:44:f6:cc:ca:b8:6e:02:
7c:b3:56:0a:45:04:92:ca:4c:65:d6:e2:19:c9:f5:18:02:fa:
1b:f5:b7:fd:c4:08:09:72:b4:ba:82:50:ef:a5:ff:b0:79:14:
af:e4:cf:b8:85:9f:a5:9c:29:1a:51:87:65:de:09:1a:71:57:
d9:32:5d:88:40:35:05:b5:7c:3e:0b:06:79:75:d3:a1:8d:de:
1d:ee:58:25:7d:68:b6:8e:ba:72:59:88:10:93:d9:5d:d3:2d:
0b:bf:52:26:f7:78:6a:ff:f7:a1:66:17:8e:4a:09:0b:b6:70:
2d:26:7d:e2:e6:73:19:50:ed:80:bf:cd:b0:81:3d:46:e6:40:
1d:58:12:ea:38:45:cc:c6:92:68:da:b2:92:72:94:c0:63:97:
fd:a6:8e:23:96:c0:ec:cb:3f:96:88:26:82:06:ab:a9:4d:65:
cd:57:93:fe:b8:0b:54:8b:f7:86:fe:12:2f:9d:01:28:22:3f:
a2:d7:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:18:45 2026 by rpki-client