Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: 3ku9I4m1kDGAhIYN/1tEqcGz8DEAQBVI72lz7hKFJqY=
Subject key identifier: 3F:EA:A1:B8:DF:A7:A1:D2:CB:E7:B4:FA:3E:98:99:40:95:F7:7A:A3
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019FAABF2EADDE224825FD6885D0F304CE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 22:01:23 +0000
Manifest this update: Tue 28 Jul 2026 22:01:23 +0000
Manifest next update: Wed 29 Jul 2026 22:01:23 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: lc9Ha+Mu7Hq9FNkMw3POsLmbJNgNEzK1U+ivT+ZC4Zg=)
4: xKcBipuMvKp84RN5Ey0HBKtsVPo.roa (hash: /eh2S8GsbWcqnju6ljXJ0HQ5aHuof6/dHBl/9C9TCw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:2e:ad:de:22:48:25:fd:68:85:d0:f3:04:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jul 28 22:01:23 2026 GMT
Not After : Jul 29 22:01:23 2026 GMT
Subject: CN=3feaa1b8dfa7a1d2cbe7b4fa3e98994095f77aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:66:e0:54:c5:14:66:e2:7b:14:b3:ae:94:
73:ee:d6:7c:53:58:4c:68:dc:f9:d6:d8:2e:5e:ea:
7b:99:ac:1b:b7:16:11:e8:0c:dc:68:97:35:23:4f:
f7:0a:86:40:93:62:eb:76:56:1e:7a:a9:3c:c2:ef:
99:67:1d:ab:c3:82:3a:24:bb:e0:4d:7c:19:c5:f2:
d2:24:95:77:92:01:94:e7:0f:d9:33:b6:4d:03:e9:
d7:ae:5e:82:4c:a6:1f:8f:b0:0e:d4:08:79:a3:a6:
a4:68:11:e1:09:42:67:09:0a:15:15:b3:92:f9:eb:
64:09:a1:7b:fa:b4:6a:9d:bc:7b:bd:75:85:44:c6:
52:8c:1d:bc:45:07:49:6a:f6:11:1d:32:fe:a7:4d:
d8:15:29:d8:ae:e1:61:d8:4e:cb:71:22:80:33:6a:
54:07:35:93:3c:fa:1c:97:6b:6a:f0:cb:c3:0d:de:
c7:29:13:e3:86:5f:16:75:14:8b:10:a8:9d:ea:c4:
fe:90:6b:4e:29:f0:17:8e:32:66:ab:ad:53:5f:e7:
99:52:a8:25:58:60:46:0a:4c:82:95:bd:9f:9f:a4:
d4:cc:9e:94:00:d5:4e:0f:1e:67:57:5d:f0:ab:cc:
6f:e6:c3:14:36:dd:fa:67:49:2d:05:3d:d8:42:66:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:A1:B8:DF:A7:A1:D2:CB:E7:B4:FA:3E:98:99:40:95:F7:7A:A3
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2a:a6:d4:39:b5:8e:22:77:58:55:ee:30:53:7e:ca:9d:ac:
b5:46:61:73:4f:fb:db:3e:d3:6a:16:8b:42:5a:ee:fe:3e:1f:
fe:7a:b4:ae:35:f5:db:4f:95:78:97:fa:4e:70:f0:dd:92:75:
a6:56:29:7f:1d:64:50:e2:7d:4a:14:0d:0b:34:0f:77:76:e4:
c8:2a:e5:84:02:61:ce:25:72:41:7b:fd:31:15:46:81:f6:0e:
9c:3f:80:d8:b7:1f:2a:ea:c5:27:e5:cf:34:89:7c:e9:e6:bd:
b5:10:6a:c2:44:3c:97:b0:8f:ac:e6:50:31:bd:d9:0c:96:bb:
78:0b:2b:62:20:b5:fb:f4:5b:5f:fb:25:df:14:06:ae:bd:64:
1d:a9:d0:f8:bc:03:17:9f:79:90:50:96:05:cf:66:60:f6:84:
23:9a:2e:b6:70:6b:35:4c:f0:d5:a2:20:51:d6:92:bd:eb:c4:
87:65:86:f2:4a:a0:3d:7d:93:30:75:15:23:f0:34:3e:6a:79:
f4:ab:16:40:da:4a:62:f8:5b:a0:cb:ed:57:bf:35:11:bb:09:
5d:86:c8:69:c7:97:63:32:1f:9c:bc:24:10:c5:35:49:83:51:
b0:cb:19:57:00:39:57:95:14:0b:37:63:a2:2e:c0:30:c7:36:
5d:4b:50:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvy6t3iJIJf1ohdDzBM5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjYwNzI4MjIwMTIzWhcNMjYwNzI5MjIwMTIzWjAzMTEwLwYDVQQD
EygzZmVhYTFiOGRmYTdhMWQyY2JlN2I0ZmEzZTk4OTk0MDk1Zjc3YWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZhm4FTFFGbiexSzrpRz7tZ8U1hM
aNz51tguXup7mawbtxYR6AzcaJc1I0/3CoZAk2LrdlYeeqk8wu+ZZx2rw4I6JLvg
TXwZxfLSJJV3kgGU5w/ZM7ZNA+nXrl6CTKYfj7AO1Ah5o6akaBHhCUJnCQoVFbOS
+etkCaF7+rRqnbx7vXWFRMZSjB28RQdJavYRHTL+p03YFSnYruFh2E7LcSKAM2pU
BzWTPPocl2tq8MvDDd7HKRPjhl8WdRSLEKid6sT+kGtOKfAXjjJmq61TX+eZUqgl
WGBGCkyClb2fn6TUzJ6UANVODx5nV13wq8xv5sMUNt36Z0ktBT3YQmY+mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/qobjfp6HSy+e0+j6YmUCV93qjMB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyqm1Dm1
jiJ3WFXuMFN+yp2stUZhc0/72z7TahaLQlru/j4f/nq0rjX120+VeJf6TnDw3ZJ1
plYpfx1kUOJ9ShQNCzQPd3bkyCrlhAJhziVyQXv9MRVGgfYOnD+A2LcfKurFJ+XP
NIl86ea9tRBqwkQ8l7CPrOZQMb3ZDJa7eAsrYiC1+/RbX/sl3xQGrr1kHanQ+LwD
F595kFCWBc9mYPaEI5outnBrNUzw1aIgUdaSvevEh2WG8kqgPX2TMHUVI/A0Pmp5
9KsWQNpKYvhboMvtV781EbsJXYbIaceXYzIfnLwkEMU1SYNRsMsZVwA5V5UUCzdj
oi7AMMc2XUtQGg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:44 2026 by rpki-client