Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: 7zYgqZmnm448hUAHVGa9+dSkOcnQMgWwZ7u0nL+4tCA=
Subject key identifier: 03:37:DB:A3:B8:80:75:7E:18:F3:ED:BD:98:5C:50:5C:FC:8E:D7:EF
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019EBE7F3058E14B02BB161473E87838ED35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 078C
Signing time: Sat 13 Jun 2026 01:01:06 +0000
Manifest this update: Sat 13 Jun 2026 01:01:06 +0000
Manifest next update: Sun 14 Jun 2026 01:01:06 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: KfKHu5rXeGdwqaRva2+Ctxjite85/ts1wW22u6Fg/Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:30:58:e1:4b:02:bb:16:14:73:e8:78:38:ed:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Jun 13 01:01:06 2026 GMT
Not After : Jun 14 01:01:06 2026 GMT
Subject: CN=0337dba3b880757e18f3edbd985c505cfc8ed7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:45:20:cb:09:43:a8:6b:47:c2:d3:ea:b1:
c8:46:1d:68:f8:41:47:86:c7:fa:d9:c6:c1:40:59:
21:21:70:c6:d7:10:f0:12:3e:a4:3f:74:6b:87:4b:
96:93:92:c0:d8:07:e2:5e:6b:49:66:50:94:24:33:
56:02:a5:d4:aa:1d:f9:28:13:8c:3a:7b:f3:14:e4:
05:df:73:96:08:e6:70:7e:0c:02:47:de:5f:44:96:
c2:7e:7d:fd:39:9d:41:7c:ef:18:2e:f4:41:5a:70:
69:f3:16:f8:bd:77:fd:1d:4f:46:fd:59:44:e2:22:
60:ad:5d:b9:c4:e9:48:1d:05:89:59:16:fe:66:c1:
b0:04:60:d4:d6:18:0d:83:a8:eb:be:7e:09:98:a8:
8b:db:e2:b9:ba:50:ea:9c:5f:f0:18:71:e0:d3:b6:
12:17:09:d3:2e:a8:88:90:a5:4f:84:7f:08:55:be:
9d:b2:1c:89:5d:56:c6:71:e5:7d:a8:85:50:66:2f:
ac:c6:d6:ae:a7:fa:49:3b:36:53:30:e9:ec:3e:52:
e9:af:f1:06:73:9c:65:5b:8d:6b:b6:c5:37:68:c8:
16:6f:38:02:2f:59:28:78:d5:68:1c:83:d7:25:ec:
81:cd:ed:b5:78:cd:8e:83:88:3a:33:e9:0f:4e:cf:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:37:DB:A3:B8:80:75:7E:18:F3:ED:BD:98:5C:50:5C:FC:8E:D7:EF
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:84:c7:c6:80:96:07:64:12:eb:98:ec:4f:fc:48:c0:78:28:
85:e2:4a:61:97:ae:02:e6:dd:14:98:fa:97:00:31:b3:a7:1d:
74:a2:1f:1d:01:e6:d9:c3:95:9e:c9:8f:9b:b7:61:62:94:7e:
1f:57:4a:ee:d5:98:35:38:b1:46:b7:8c:15:82:99:e5:e7:47:
ba:51:0b:06:90:d5:42:14:88:b4:f3:c4:07:7d:03:b6:a8:49:
15:26:71:7d:50:5c:59:4e:20:4a:06:dc:16:46:0d:4a:6f:fc:
15:36:f4:c5:b2:3b:1e:da:1a:53:66:f0:35:db:95:dc:9e:60:
76:01:b6:b6:c2:93:94:28:1d:21:15:00:48:38:9b:94:51:58:
30:61:51:90:1a:e4:7d:ba:17:fd:d2:28:ad:19:87:06:b8:ae:
b4:67:87:24:61:07:72:c8:bd:57:21:61:30:37:4c:9c:51:8e:
e4:cd:92:67:d2:83:5b:fc:e0:d8:ee:0a:eb:e9:60:9d:d3:2a:
ec:2c:35:46:e6:22:ba:2a:51:44:cc:fe:4b:27:94:f9:50:7f:
49:d1:27:67:d8:5c:74:1a:07:cc:45:50:b7:da:62:30:04:00:
e7:2e:e5:25:96:66:ac:bd:7c:80:23:7d:f2:5b:0c:c5:93:a5:
74:30:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:21 2026 by rpki-client