Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: RX7Sy2fcJg4w3mrmz2bOeNnvRH9f59qicQzkMpy9brI=
Subject key identifier: 82:7B:43:C9:EA:B0:F2:18:52:F4:B6:7B:61:A2:27:47:0E:C9:9F:65
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019D98F4A1C4B726C6168C864B002904EDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 06F4
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: E+rBs9PloH5lRj8PT4ugxbi9OqHuZaxX5KgZQcRZazA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a1:c4:b7:26:c6:16:8c:86:4b:00:29:04:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=827b43c9eab0f21852f4b67b61a227470ec99f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:fe:67:c2:39:b1:f5:1c:f1:4b:59:06:dc:
58:53:b5:b6:88:80:87:1b:b0:13:91:e9:57:f3:a6:
f6:ba:ab:63:aa:2c:87:a6:4e:60:39:a0:76:a5:c1:
9c:3a:8f:ef:c6:33:e6:9b:bd:d2:6e:7a:25:09:91:
cf:4a:91:f0:af:b3:83:d5:b3:d9:4e:35:b9:ec:b3:
34:1e:46:79:ff:40:0f:3b:b7:1c:9a:f9:db:57:93:
7c:9b:16:80:85:9d:59:45:32:76:22:8c:92:ae:d3:
67:c5:d4:21:05:54:40:d0:67:68:1d:49:e6:92:db:
b9:31:0c:1e:22:d0:b0:56:fa:2f:48:98:27:6e:4f:
78:f6:fb:e1:1b:37:97:22:94:a4:d9:64:6a:45:e8:
82:3d:9f:89:c8:18:34:f9:4d:61:f4:a9:98:a7:18:
eb:75:e4:56:be:ff:d3:9f:a0:a6:5c:be:6e:64:26:
61:e1:55:83:74:50:0a:d8:ff:fb:a8:72:8d:ea:c7:
36:c1:1a:55:1e:16:10:cf:2e:55:04:0a:18:66:c2:
5a:6a:9c:17:47:49:14:5e:18:82:6d:42:0b:e7:72:
a0:33:50:f4:24:77:de:5b:83:a2:2c:57:9b:18:d8:
8e:35:12:39:3f:5a:43:66:d5:01:c1:73:8d:d9:ed:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7B:43:C9:EA:B0:F2:18:52:F4:B6:7B:61:A2:27:47:0E:C9:9F:65
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:50:b3:7c:4d:96:ce:a2:93:f0:01:31:ac:1d:4d:ec:58:db:
94:23:4c:cc:91:92:bf:13:ba:3f:4f:9c:5e:50:ac:a7:c0:47:
fa:bd:dd:aa:70:bd:af:03:dc:a6:af:96:ff:3f:4e:5a:61:95:
f3:66:fa:79:81:f3:15:23:e1:ae:9c:97:21:74:41:ea:2d:fb:
ac:2c:03:74:c7:e5:22:2e:ba:67:c2:da:11:d9:32:ac:96:9b:
52:0c:08:0a:24:ba:f1:a4:83:cd:8e:ee:09:96:71:08:bd:45:
c2:77:ce:6f:f8:66:0d:4a:7a:ac:f6:74:7d:ab:45:8d:b3:5c:
af:53:79:36:79:3d:1c:0f:4a:33:4f:16:a3:54:61:c2:1d:cb:
b0:dc:4b:bc:4e:bf:dd:a5:a1:e3:a8:21:fb:9c:61:dd:b0:d8:
31:66:c1:09:ae:0b:cd:18:5a:92:cf:c8:63:9e:91:28:0b:39:
6e:d2:7e:d9:db:05:aa:1e:e3:44:64:4f:37:7d:90:5e:96:88:
35:59:42:f3:f6:83:86:68:40:31:12:70:0d:55:b0:59:51:0e:
9b:09:9a:f3:37:02:bc:49:ed:09:7b:b7:1e:a4:15:24:e1:6b:
3d:97:c9:18:31:51:2b:5b:72:8b:00:f9:84:5f:15:2c:d2:5d:
7a:a3:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:58 2026 by rpki-client