Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: GOsOd0SWbONi1STtoYPaGWY03R6pLoSFUTUqUj+8tnU=
Subject key identifier: 99:2E:B4:25:61:9C:C5:83:9E:8E:F4:A2:DA:34:C6:37:D7:CF:CC:84
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 01A0D192BE04AEBA6C5C18AA6FCCE527345B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 089F
Signing time: Thu 24 Sep 2026 04:00:50 +0000
Manifest this update: Thu 24 Sep 2026 04:00:50 +0000
Manifest next update: Fri 25 Sep 2026 04:00:50 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: mLgCkZlurT7FfpD9HepgXXPl3Rz++FAEadHcq3fJwSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:be:04:ae:ba:6c:5c:18:aa:6f:cc:e5:27:34:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Sep 24 04:00:50 2026 GMT
Not After : Sep 25 04:00:50 2026 GMT
Subject: CN=992eb425619cc5839e8ef4a2da34c637d7cfcc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:a0:64:4f:88:91:8b:6e:50:b3:f4:85:e9:
14:38:05:a6:f0:86:12:92:01:3d:98:01:a0:95:b5:
dd:6f:49:e1:44:a2:62:24:a6:81:b0:e5:c0:64:fa:
4d:0b:fe:7b:16:a5:97:67:df:8c:9b:4e:7e:de:4b:
73:6e:9e:df:40:db:b1:8c:ec:39:5f:3f:56:a5:cb:
1f:2c:ab:78:a9:35:32:74:18:e0:d0:60:bc:cd:d7:
17:07:39:0e:e5:a1:27:f6:72:d6:cb:74:a3:f5:47:
91:83:71:7e:6e:54:52:0f:74:6b:7f:49:a9:d0:68:
cc:bb:23:c3:81:da:4f:fc:7b:80:dc:2e:7a:12:a8:
c9:15:b2:aa:38:5d:ae:a7:56:7b:08:8d:ad:86:5f:
76:17:39:60:30:9a:e2:b6:c4:20:dd:c1:ef:a2:dc:
69:80:c7:a2:2c:46:de:5c:b5:f2:67:ee:70:5a:b7:
d8:a4:eb:0e:0c:15:92:90:a3:a7:c4:ca:be:ea:f3:
b5:ba:a2:40:86:5e:6a:4e:d7:90:29:e8:47:2c:25:
fc:49:16:f3:a1:02:99:c9:b5:47:71:b6:bf:65:a2:
69:f4:18:ed:c4:3a:56:7d:19:47:06:ea:fe:e5:15:
f5:cc:5e:e2:64:88:a4:ed:08:2f:b6:fc:51:72:b8:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:B4:25:61:9C:C5:83:9E:8E:F4:A2:DA:34:C6:37:D7:CF:CC:84
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:6e:bb:fd:1b:a1:94:42:ba:dd:27:91:f2:43:c3:b8:59:
5c:8c:bd:c2:3d:a2:68:ed:65:08:17:ef:7c:fc:12:73:3c:21:
87:91:1e:bb:a4:80:b2:58:8d:5e:73:11:15:a6:fd:0b:92:ce:
3e:47:e0:fe:7c:aa:e2:a9:3c:97:3e:55:6d:61:4f:67:ac:3a:
18:29:02:bd:96:70:0f:ad:0e:a7:19:9a:51:df:36:03:bf:60:
5f:6c:ee:94:a4:0e:0b:f6:f3:09:8a:99:3c:06:11:0b:9c:af:
36:db:c6:e9:71:f9:6e:55:a9:96:e6:f7:89:3a:28:5c:9d:b3:
99:f0:9f:da:b0:17:3c:ca:b0:56:96:85:71:30:da:82:28:ca:
a2:61:3c:e9:e4:27:03:c4:18:7c:9b:f6:56:aa:7d:c9:3a:07:
1d:68:73:03:95:22:65:a3:f6:b3:39:a4:98:a9:34:af:06:83:
ee:48:01:97:17:e0:ea:e8:28:30:8c:de:4a:54:77:72:a8:94:
32:ce:bc:40:77:eb:e3:94:84:12:b8:17:01:fa:a8:5b:97:8f:
10:6f:c1:77:0a:58:71:d0:78:08:40:50:f1:79:21:5f:b5:f6:
72:ba:43:57:34:97:c3:8e:cc:69:c5:40:7f:33:4f:83:a9:82:
38:af:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:33 2026 by rpki-client