
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: qh2TLEcrEbyp50F748DC5kmJ2W6YLbuHnyGQdcJECWo=
Subject key identifier: 95:78:F0:3D:4A:1B:7E:9C:4A:E5:42:6F:AF:C1:06:8B:AC:D4:A5:10
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 01A1341078DF6FCD10981A5E7320C18B14D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 17D7
Signing time: Tue 13 Oct 2026 07:00:57 +0000
Manifest this update: Tue 13 Oct 2026 07:00:57 +0000
Manifest next update: Wed 14 Oct 2026 07:00:57 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: orS64ElPoqDR/7wXA0JI97/3VLz/8WAXRYWONhQUd9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:78:df:6f:cd:10:98:1a:5e:73:20:c1:8b:14:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Oct 13 07:00:57 2026 GMT
Not After : Oct 14 07:00:57 2026 GMT
Subject: CN=9578f03d4a1b7e9c4ae5426fafc1068bacd4a510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:1c:d8:0a:1e:d4:28:46:7c:b4:3f:b9:5e:
11:23:2d:fd:a9:18:95:d6:06:fa:01:db:00:4e:ff:
2f:e4:e2:a5:37:3e:e1:4a:4c:b4:39:7e:eb:3c:2a:
a9:39:b6:cd:e7:f7:c7:42:0b:92:35:25:5f:46:00:
e1:8c:b0:fb:2a:62:2c:08:54:e6:8f:fc:e8:5f:02:
00:42:ce:1d:78:bc:ae:a0:59:d4:95:6d:64:99:dd:
91:f2:66:6c:05:f5:01:0b:62:a2:36:0f:5d:91:eb:
ef:9e:02:ef:1d:77:4a:8a:32:1b:e2:0e:27:b9:d2:
a8:85:79:00:8d:d7:63:10:bf:ed:f1:dc:48:11:7e:
94:a2:90:69:b2:7c:55:9e:d0:56:8f:bd:b1:40:a8:
22:d7:4f:cb:d5:94:00:4d:73:40:e1:e9:ed:1b:95:
78:5e:ff:e3:eb:4f:f3:c5:34:43:ab:69:db:e6:b2:
4b:dd:9f:89:24:59:bf:74:cf:3d:d6:3d:e0:d0:fe:
20:c7:e2:f8:69:fe:a3:d0:b7:cc:6a:d1:00:0d:03:
6c:a9:c7:78:ee:17:c1:f4:6d:87:b9:8a:b5:6e:d7:
d5:46:11:76:d3:68:04:58:63:b1:c5:23:1c:99:ac:
0c:e1:a7:95:a9:01:44:94:50:4d:d8:c7:67:33:da:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:F0:3D:4A:1B:7E:9C:4A:E5:42:6F:AF:C1:06:8B:AC:D4:A5:10
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:41:42:b1:55:aa:52:04:f7:5d:67:7b:ed:72:49:a8:d5:95:
5e:a7:fb:7e:88:9c:0b:73:97:80:c6:95:c8:59:f0:3e:64:00:
8e:81:01:b5:d1:ed:76:15:94:66:a6:d0:40:da:9a:b0:65:03:
2f:84:cf:ce:b3:e7:1c:63:47:02:d9:87:fd:1f:3f:7c:e0:17:
c6:3b:7e:cd:b1:30:62:17:a8:93:a1:1a:34:72:28:fd:a9:dd:
1d:82:47:64:f1:a4:39:16:f2:f1:86:8f:d9:9e:41:9d:04:e6:
f4:30:a9:1f:0a:98:0c:aa:9b:8c:62:f4:93:28:55:71:e0:78:
ea:45:6f:28:37:94:61:a5:d6:f1:f9:c2:8e:7c:d3:0e:05:a7:
a4:85:de:2d:44:e8:c0:60:50:94:4a:59:e8:20:53:c6:8a:b6:
2a:60:9a:af:da:a9:49:a0:ab:aa:ea:d1:2d:fa:15:98:ef:d8:
1a:13:66:99:1f:48:e7:e9:f9:8f:29:b5:c6:71:db:b1:f8:d5:
1b:00:b1:50:e0:48:46:a3:5b:13:69:be:10:c9:9c:00:36:91:
08:0f:bf:56:c9:95:2e:6e:72:88:a9:8c:4c:c5:6d:fb:00:d9:
85:11:2c:fa:b6:d1:40:3d:d1:be:da:d5:81:c7:b0:90:4a:55:
c3:db:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:07:36 2026 by rpki-client