Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: 0OXyrU+B2huGKT1l2kqnKh6J0plzQLHHQc45uvBGe3s=
Subject key identifier: 61:DB:D1:F1:EF:87:59:6A:A5:22:BC:F3:24:FD:CA:B0:91:C3:C9:D4
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019CAA90091AA797A739C26970F82889860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 18:01:32 +0000
Manifest this update: Sun 01 Mar 2026 18:01:32 +0000
Manifest next update: Mon 02 Mar 2026 18:01:32 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: pbTNX9/W8NKre2xcusAKxOWDyQiwobfQkA10diaLG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:09:1a:a7:97:a7:39:c2:69:70:f8:28:89:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Mar 1 18:01:32 2026 GMT
Not After : Mar 2 18:01:32 2026 GMT
Subject: CN=61dbd1f1ef87596aa522bcf324fdcab091c3c9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:d6:35:b2:8c:45:c3:b2:dc:71:3a:b5:cf:
0e:1f:de:0b:54:e1:11:4e:84:cf:ee:af:31:06:27:
e4:f2:8c:1c:fc:e0:9c:98:e8:3a:d0:85:22:63:9a:
6b:a7:f7:9e:96:29:e6:47:fb:0a:ae:bb:58:91:82:
9e:a5:d0:79:c2:f0:a6:a7:c0:9a:06:e2:e2:24:83:
76:70:1a:f7:e8:f5:c3:fb:54:49:b5:6b:49:b4:1e:
73:46:8a:08:30:ef:05:00:a6:ec:24:eb:3b:40:af:
12:81:c1:fa:87:d7:cc:fd:8a:42:76:40:31:33:e3:
b3:e9:60:83:93:1f:9d:e5:0a:bc:b5:9f:54:10:a8:
e1:ed:54:df:9a:98:8e:0a:25:8f:6c:3f:06:a1:d6:
3e:d5:0a:c0:61:f3:25:80:cd:a9:61:bb:e4:83:c4:
8a:d0:62:fb:eb:1c:a8:cb:d2:17:a6:e4:b2:4e:1c:
75:76:09:07:f8:76:2f:94:a6:cf:7d:2d:7a:eb:fe:
77:c5:7c:28:1c:5d:00:94:27:d1:85:ed:d5:0d:89:
2b:97:7c:ab:4e:ed:79:47:0b:c3:d7:89:28:53:8f:
a0:8b:30:af:4d:f7:55:d5:b3:51:ed:2f:f2:97:59:
a3:53:02:5f:e3:b2:3f:b2:1f:0e:47:9a:1f:a9:80:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:D1:F1:EF:87:59:6A:A5:22:BC:F3:24:FD:CA:B0:91:C3:C9:D4
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e4:5e:91:6d:a3:a9:44:dc:87:02:27:d2:1a:9c:38:42:af:
85:dc:d3:61:b9:e4:b0:8d:bd:81:c7:b7:e0:cb:9e:e5:f5:90:
f6:55:c8:e9:0a:cc:f6:43:b4:86:0c:74:88:77:75:42:e3:67:
1c:29:2d:7e:43:16:61:53:3c:f5:52:5c:e2:59:67:3b:f5:0e:
cb:ee:13:7a:15:71:28:dc:b0:06:da:94:94:b3:19:96:63:66:
58:68:38:47:f7:0c:1b:28:7d:cd:92:29:d8:87:c4:4b:74:79:
24:ca:20:15:dd:41:8e:21:8f:4e:8a:bf:0a:0e:1e:ab:26:df:
02:a9:9c:c9:38:b5:e3:57:12:da:cc:b9:c7:a7:90:26:46:c8:
78:a6:b6:08:01:72:f5:0c:87:40:66:c2:f9:a7:fb:26:0c:48:
72:b7:2d:88:21:a0:37:81:5a:e0:85:e8:6a:08:19:b7:7e:c3:
da:fd:61:a4:42:61:d9:e4:ab:6f:71:3e:00:10:b6:e2:55:50:
af:41:bd:71:cc:98:d8:ba:2b:51:95:da:91:9f:11:ea:4b:d4:
c9:63:c4:c3:bb:21:d7:42:b2:9e:b8:a7:76:1e:8c:30:87:94:
1b:f4:19:53:6c:b2:32:16:1e:df:4d:ad:e6:b8:d7:5b:a7:76:
44:21:75:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkAkap5enOcJpcPgoiYYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjYwMzAxMTgwMTMyWhcNMjYwMzAyMTgwMTMyWjAzMTEwLwYDVQQD
Eyg2MWRiZDFmMWVmODc1OTZhYTUyMmJjZjMyNGZkY2FiMDkxYzNjOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU3WNbKMRcOy3HE6tc8OH94LVOER
ToTP7q8xBifk8owc/OCcmOg60IUiY5prp/eelinmR/sKrrtYkYKepdB5wvCmp8Ca
BuLiJIN2cBr36PXD+1RJtWtJtB5zRooIMO8FAKbsJOs7QK8SgcH6h9fM/YpCdkAx
M+Oz6WCDkx+d5Qq8tZ9UEKjh7VTfmpiOCiWPbD8GodY+1QrAYfMlgM2pYbvkg8SK
0GL76xyoy9IXpuSyThx1dgkH+HYvlKbPfS166/53xXwoHF0AlCfRhe3VDYkrl3yr
Tu15RwvD14koU4+gizCvTfdV1bNR7S/yl1mjUwJf47I/sh8OR5ofqYAPjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHb0fHvh1lqpSK88yT9yrCRw8nUMB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+RekW2j
qUTchwIn0hqcOEKvhdzTYbnksI29gce34Mue5fWQ9lXI6QrM9kO0hgx0iHd1QuNn
HCktfkMWYVM89VJc4llnO/UOy+4TehVxKNywBtqUlLMZlmNmWGg4R/cMGyh9zZIp
2IfES3R5JMogFd1BjiGPToq/Cg4eqybfAqmcyTi141cS2sy5x6eQJkbIeKa2CAFy
9QyHQGbC+af7JgxIcrctiCGgN4Fa4IXoaggZt37D2v1hpEJh2eSrb3E+ABC24lVQ
r0G9ccyY2LorUZXakZ8R6kvUyWPEw7sh10Kynrindh6MMIeUG/QZU2yyMhYe302t
5rjXW6d2RCF1hw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:40 2026 by rpki-client