Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: 9l+plYMDbJCSJ2fP/xGnAn+S7yNeGhF5SL7tatjawBo=
Subject key identifier: 7B:BF:5F:F1:FC:4E:04:C6:94:5C:E5:B6:06:21:5C:97:B7:69:CE:7D
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019EBF91AE0B7DD2E3C42A850851D1B4759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 06:00:55 +0000
Manifest this update: Sat 13 Jun 2026 06:00:55 +0000
Manifest next update: Sun 14 Jun 2026 06:00:55 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: oHIeFsvVJN79eL/i4bQGRx8kSRL46MOUv4MEVRh1xug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:ae:0b:7d:d2:e3:c4:2a:85:08:51:d1:b4:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jun 13 06:00:55 2026 GMT
Not After : Jun 14 06:00:55 2026 GMT
Subject: CN=7bbf5ff1fc4e04c6945ce5b606215c97b769ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:89:5a:0c:13:e3:1e:77:20:e3:d0:82:95:
44:72:8a:ef:76:fd:14:8e:ef:4c:9b:d3:4c:95:51:
f3:65:81:82:3a:3b:98:68:67:b1:83:78:07:4b:a7:
83:fb:1d:9e:90:91:d7:2a:2a:b7:d3:f8:88:ba:00:
85:d5:ef:04:56:7b:61:b1:a3:39:c8:8c:26:43:37:
87:b4:1c:db:2b:1c:f2:98:7d:16:92:01:e4:86:4b:
30:e3:ea:2f:06:b0:c8:88:69:d8:5e:27:aa:ff:84:
49:ae:f3:37:34:f1:7b:c7:a9:73:02:59:d7:4a:d0:
de:42:e8:14:13:ed:d5:9a:44:4a:12:00:f4:ca:56:
7e:23:51:c3:fb:a8:36:9f:eb:20:6e:34:be:96:e4:
28:53:48:9a:ec:79:3e:4c:3e:a0:39:e7:ef:f9:c2:
ac:e4:64:fd:e4:6a:34:bb:16:cc:cc:91:c5:4a:de:
22:69:d6:37:c7:69:40:f7:e9:33:44:0d:38:09:af:
d8:97:ec:59:38:d9:45:cd:34:1d:32:e7:d2:01:9f:
7c:db:2b:e7:c9:a2:ef:62:1e:35:10:b7:0c:76:3d:
f9:06:12:b2:ec:5f:7c:67:b8:a3:2f:08:0f:08:d4:
1b:1f:41:8b:ec:df:e8:fe:d2:d2:9c:5f:c2:b6:ae:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:5F:F1:FC:4E:04:C6:94:5C:E5:B6:06:21:5C:97:B7:69:CE:7D
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:99:de:07:dd:d5:2c:f5:8e:4a:37:3e:4e:ca:95:08:f6:76:
7d:7b:3d:64:69:70:89:0c:b6:31:c4:d8:06:d6:89:6e:f6:ed:
96:06:64:9e:2d:01:ff:f7:bb:bf:c9:e7:a1:8c:f6:a2:74:53:
da:5a:08:a5:85:4f:37:fc:ce:ec:b4:8f:1a:ea:ae:14:96:20:
48:62:53:89:05:3a:59:9e:65:7a:13:97:68:16:02:af:a4:1d:
64:0c:18:2f:b5:32:b1:91:ef:92:0e:93:c9:bc:16:43:b5:68:
30:0e:fd:0c:b4:65:82:1c:8f:0f:55:34:6c:5d:19:cd:d1:76:
f4:44:5f:14:e2:d8:a9:fd:9e:f4:13:8e:c9:eb:d9:32:81:5f:
8a:67:fe:7c:0f:fd:1a:26:af:04:3e:15:7e:a1:36:c4:da:7d:
97:c9:94:27:44:76:43:2e:ab:d7:f3:c8:f4:39:58:13:d4:e4:
d6:88:ee:cc:35:00:67:01:96:f5:8d:8d:48:41:2c:e7:f3:0b:
10:0d:89:3c:f8:97:68:32:bc:73:04:71:e7:7a:0c:07:18:32:
b5:ed:9a:81:7d:b7:e5:8a:96:9b:07:47:94:fa:fb:b2:b6:3e:
8b:dd:a3:eb:68:0d:d3:6b:ab:b0:ff:b1:0c:26:cd:c7:d8:82:
4f:0c:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:30 2026 by rpki-client