Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: PJ5Qd/mY/oSUNL5K6GB6Jk0Xqr9fJt6SPsTWm8ht4qs=
Subject key identifier: 4C:A1:C8:CC:D8:19:5D:EB:D4:1A:75:85:1F:66:9E:78:3B:FC:8E:35
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019CA97D63C6D2405B894BB50A0F15179057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0678
Signing time: Sun 01 Mar 2026 13:01:32 +0000
Manifest this update: Sun 01 Mar 2026 13:01:32 +0000
Manifest next update: Mon 02 Mar 2026 13:01:32 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: Xwbr7uRILLaaVhBn4LPV6prbdkmCKi+0WXe3J2p3CBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:63:c6:d2:40:5b:89:4b:b5:0a:0f:15:17:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Mar 1 13:01:32 2026 GMT
Not After : Mar 2 13:01:32 2026 GMT
Subject: CN=4ca1c8ccd8195debd41a75851f669e783bfc8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:a3:a5:b7:2d:47:f0:f1:f0:52:61:5b:84:
28:8b:2b:1f:c2:d8:53:34:21:0f:84:cb:dd:43:fe:
23:2d:cf:d9:d3:64:bd:ef:3d:d0:ea:1b:04:4c:80:
82:ea:e2:49:cc:b4:19:0b:63:49:f5:d0:fb:f8:45:
c1:9c:8c:e5:b7:96:39:63:bb:cf:7b:3d:91:f9:82:
f6:82:e5:62:be:d0:4c:07:be:fd:c6:5d:ab:a3:24:
21:97:95:96:65:92:08:7d:03:8c:82:bd:ae:ec:fe:
2c:12:8c:2c:2a:63:b0:64:8b:c8:a3:4e:12:db:50:
cc:87:ae:9b:cd:8d:64:8f:0c:34:b0:a6:1c:c9:af:
6b:c7:58:83:c0:03:ab:37:e8:b6:e3:07:92:8a:7a:
84:d6:7c:9c:09:96:43:2e:4d:59:dd:e8:34:61:b9:
ad:fe:8d:2b:be:8c:1a:dd:c2:ee:60:ad:91:da:b5:
2f:75:88:88:29:63:cc:36:02:0c:83:9a:50:94:d2:
11:c6:39:e4:9b:60:f1:39:d2:17:16:1b:62:0f:c3:
01:55:e0:bc:be:a2:41:e8:f6:f6:5d:30:d9:6c:16:
70:83:61:4d:92:d5:24:d9:a2:36:02:60:91:6e:82:
d5:4f:18:c7:27:d4:86:eb:5a:9a:09:49:66:78:35:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A1:C8:CC:D8:19:5D:EB:D4:1A:75:85:1F:66:9E:78:3B:FC:8E:35
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:26:8c:a9:3c:3a:68:73:01:bb:58:3e:44:f7:9c:04:1e:
d0:d5:0a:1d:62:85:f6:93:f4:88:d4:60:18:b9:95:fc:20:c3:
72:cd:e6:22:68:96:4b:02:b4:33:e2:42:83:a9:e8:35:f3:8f:
6d:3f:7b:bc:fd:95:cf:c7:cd:05:8b:e1:cf:77:e7:33:aa:d8:
be:c5:16:3f:ce:bf:0f:68:cb:75:99:f3:10:1b:1a:34:2b:3f:
61:46:3b:ec:3b:1b:0e:08:d5:93:68:87:97:97:61:af:b9:9c:
10:df:2c:be:e6:68:47:2c:df:97:67:50:70:56:e3:d2:15:4b:
71:1c:1c:10:91:af:f0:7d:ce:dc:10:cc:d0:2d:32:9a:0f:c1:
b7:02:a2:78:10:cf:ab:77:44:14:49:44:88:bc:2e:9e:bb:11:
49:68:71:9e:12:23:25:23:b6:c6:10:9f:5f:b0:71:ad:5f:05:
50:70:ab:42:90:01:3a:55:1c:61:bc:68:e3:e6:1f:5f:f8:53:
25:56:cf:ab:ab:10:4b:ef:0a:c2:eb:67:32:0c:f0:f4:e8:b7:
2c:5c:cb:62:0b:7f:92:a9:07:21:6d:fc:67:f4:82:60:7a:25:
46:47:94:28:92:60:ce:1c:c7:1a:0b:dc:b3:2c:eb:e0:34:5b:
4d:25:49:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfWPG0kBbiUu1Cg8VF5BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDIyNDA4NjQ4N2VjODY2NmJhNjE1YzE1ZGM4ZjQ3OWRm
NmE0OGQwHhcNMjYwMzAxMTMwMTMyWhcNMjYwMzAyMTMwMTMyWjAzMTEwLwYDVQQD
Eyg0Y2ExYzhjY2Q4MTk1ZGViZDQxYTc1ODUxZjY2OWU3ODNiZmM4ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ejpbctR/Dx8FJhW4QoiysfwthT
NCEPhMvdQ/4jLc/Z02S97z3Q6hsETICC6uJJzLQZC2NJ9dD7+EXBnIzlt5Y5Y7vP
ez2R+YL2guVivtBMB779xl2royQhl5WWZZIIfQOMgr2u7P4sEowsKmOwZIvIo04S
21DMh66bzY1kjww0sKYcya9rx1iDwAOrN+i24weSinqE1nycCZZDLk1Z3eg0Ybmt
/o0rvowa3cLuYK2R2rUvdYiIKWPMNgIMg5pQlNIRxjnkm2DxOdIXFhtiD8MBVeC8
vqJB6Pb2XTDZbBZwg2FNktUk2aI2AmCRboLVTxjHJ9SG61qaCUlmeDVUnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyhyMzYGV3r1Bp1hR9mnng7/I41MB8GA1UdIwQY
MBaAFA3SJAhkh+yGZrphXBXcj0ed9qSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDkt
Mjk3MTgwMDc5NDIyLzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDktMjk3MTgwMDc5NDIy
LzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnEmjKk8
OmhzAbtYPkT3nAQe0NUKHWKF9pP0iNRgGLmV/CDDcs3mImiWSwK0M+JCg6noNfOP
bT97vP2Vz8fNBYvhz3fnM6rYvsUWP86/D2jLdZnzEBsaNCs/YUY77DsbDgjVk2iH
l5dhr7mcEN8svuZoRyzfl2dQcFbj0hVLcRwcEJGv8H3O3BDM0C0ymg/BtwKieBDP
q3dEFElEiLwunrsRSWhxnhIjJSO2xhCfX7BxrV8FUHCrQpABOlUcYbxo4+YfX/hT
JVbPq6sQS+8KwutnMgzw9Oi3LFzLYgt/kqkHIW38Z/SCYHolRkeUKJJgzhzHGgvc
syzr4DRbTSVJEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:04 2026 by rpki-client