Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: KZU2T4/HmH62ejGe8Va0vXbBIsHNcBqtxzuGyVbyDTw=
Subject key identifier: 52:4F:45:26:26:F3:72:CA:8C:3B:C2:D9:88:30:0F:5E:E1:97:72:7A
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019FAA19C45E86D663706B80CF077A96D871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0806
Signing time: Tue 28 Jul 2026 19:00:43 +0000
Manifest this update: Tue 28 Jul 2026 19:00:43 +0000
Manifest next update: Wed 29 Jul 2026 19:00:43 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: SIldusDT5AhgRASig1j3uE7pGubid+r6xIz+22hzLEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:c4:5e:86:d6:63:70:6b:80:cf:07:7a:96:d8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Jul 28 19:00:43 2026 GMT
Not After : Jul 29 19:00:43 2026 GMT
Subject: CN=524f452626f372ca8c3bc2d988300f5ee197727a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:0f:5e:8f:fe:82:9b:b3:ca:93:3a:a3:0a:
b1:76:71:fe:15:3a:65:db:10:6f:76:d4:1c:12:50:
89:dd:0e:7e:34:65:c7:af:a2:61:3f:0c:80:68:73:
1e:a5:29:82:f4:3a:a6:6e:08:cf:77:6b:f5:fe:30:
d2:dc:d2:19:62:52:3c:67:f1:ee:04:c7:51:1a:d7:
e3:8c:a0:b0:0c:30:9c:eb:12:fb:32:c5:28:27:91:
03:2f:69:09:20:2e:12:ff:77:79:27:d7:46:e4:8a:
82:c2:4a:28:38:5c:87:67:48:76:c7:b9:0b:2c:cf:
78:fe:ea:79:71:37:bf:b4:17:26:cb:87:01:28:0b:
39:a5:f9:22:30:08:14:e4:fe:ee:7d:89:88:27:65:
7b:00:ff:94:32:c6:ec:db:54:45:df:de:d9:2f:8a:
69:ec:1f:92:d2:a0:00:48:04:99:1f:5a:21:d6:b8:
c9:57:2d:aa:98:ce:1d:7d:04:10:79:f0:8a:62:ad:
9a:19:64:d2:de:f5:b4:8c:1a:0b:3c:c1:2a:82:c7:
9d:74:96:cb:1b:e2:59:cf:1d:39:b6:60:00:9f:d5:
8a:dc:8e:e7:57:5a:f1:89:c0:5e:32:f7:e0:8e:10:
32:d1:63:8e:f2:ce:52:f0:d8:df:8a:06:ed:e9:e8:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:45:26:26:F3:72:CA:8C:3B:C2:D9:88:30:0F:5E:E1:97:72:7A
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2c:94:6c:22:f2:9e:6e:e5:61:65:30:14:9a:67:da:ca:e0:
10:f0:bc:ea:e9:19:0e:6e:0c:23:cc:99:ae:76:b1:cf:67:dc:
1a:4b:d6:4f:06:fc:ed:f9:24:31:c3:cf:9c:de:cc:59:03:0f:
fa:32:e9:e0:fa:6b:91:da:10:cc:b8:32:d6:6a:59:0c:09:c9:
29:5b:13:a1:f9:6e:21:91:c5:c2:bf:f8:71:58:ca:4a:7d:df:
2f:4b:e3:88:23:49:69:26:07:61:ee:ec:7c:53:63:47:a5:69:
17:e6:fb:0c:26:68:da:c4:01:b6:80:4e:c9:8d:98:7b:84:a2:
ce:d0:72:66:ac:a7:91:ae:ad:28:20:0c:7f:6b:14:c4:00:b2:
48:85:32:1e:54:0e:5c:4d:fa:55:51:ac:46:58:aa:1f:af:f2:
63:62:00:70:ee:f0:57:14:c5:7c:46:eb:88:a5:f4:23:8a:0d:
fc:50:f0:77:5d:65:67:54:25:b4:f0:07:62:30:db:ed:53:67:
cc:f0:46:d4:bb:7f:0d:fd:96:a4:26:b5:47:fd:46:f3:66:46:
55:0a:fb:f1:e4:50:9e:36:35:96:3b:c8:79:3a:fe:07:b9:05:
94:09:d3:dd:b9:8d:18:70:92:ad:2f:2a:f4:7f:22:bd:28:e0:
2a:44:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:06 2026 by rpki-client