
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: aI49R/Cr4UxBJl2SQHOd1Mj/XooIFo9lrNlvbF7NxUY=
Subject key identifier: B4:51:7A:A8:D9:9B:B1:2D:21:67:85:DB:F6:B4:C6:2C:CD:22:0B:BE
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 019FACE3CFC94B2F03ECA9A3C00D0405464D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 18D9
Signing time: Wed 29 Jul 2026 08:00:38 +0000
Manifest this update: Wed 29 Jul 2026 08:00:38 +0000
Manifest next update: Thu 30 Jul 2026 08:00:38 +0000
Files and hashes: 1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: jqnZlTt4H3jfvOWr1hODeGqsU2+XY/GJHtIeHD5ISGI=)
2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:cf:c9:4b:2f:03:ec:a9:a3:c0:0d:04:05:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Jul 29 08:00:38 2026 GMT
Not After : Jul 30 08:00:38 2026 GMT
Subject: CN=b4517aa8d99bb12d216785dbf6b4c62ccd220bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:2c:0a:00:05:91:99:95:74:5b:aa:01:07:
bb:e2:32:e8:b4:f8:b3:92:01:f2:23:07:dd:09:ac:
3e:80:26:9b:2d:23:2c:56:3d:57:72:14:17:9b:6d:
79:84:ef:77:a4:0b:dd:52:18:02:54:81:fc:f5:6f:
34:b8:f7:bb:ec:f7:22:64:47:8d:66:e7:2f:3e:04:
15:7a:9a:a8:6e:fc:a9:bd:bd:a8:fe:7f:5e:af:a7:
12:33:e3:88:df:76:7a:35:d1:13:ae:89:7e:56:c4:
0b:83:14:b6:a8:ad:a1:62:bb:ae:99:2e:b8:be:c7:
62:17:4e:83:01:1f:0e:ac:4e:89:ed:ec:3e:8b:6e:
0f:39:dc:7b:9a:cf:28:3a:19:c4:9a:f3:d9:dd:61:
0b:84:bb:2d:47:82:c9:6a:16:1d:5d:cb:c9:19:8d:
c2:0a:4c:ae:8e:de:bf:ba:c8:df:e9:0f:2d:f2:f4:
d9:df:d2:f9:36:a5:36:5e:12:0c:7a:6d:b3:88:d6:
ff:c2:a3:e9:f7:1c:7a:92:d0:ee:73:77:58:2a:20:
0f:dd:6a:eb:db:a5:8a:e5:d4:45:88:98:b6:30:6c:
db:22:f3:4b:80:b2:51:c4:1b:0b:9d:28:13:36:75:
03:2f:7c:97:67:e0:f3:a5:1e:65:91:15:ff:33:01:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:7A:A8:D9:9B:B1:2D:21:67:85:DB:F6:B4:C6:2C:CD:22:0B:BE
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:89:5f:af:95:42:85:2e:ab:78:3e:78:89:30:0e:37:7c:1f:
e4:1c:2a:8a:a1:53:c6:35:71:1e:51:f8:02:07:d7:d0:4d:64:
30:ef:d9:84:f1:aa:f9:28:12:58:1d:d8:6f:aa:09:50:01:f6:
6b:25:9a:c0:d7:3e:4a:f4:57:51:2f:e2:e7:8a:a7:14:5f:b7:
e8:c6:d1:08:aa:34:89:e2:de:73:7d:fc:c6:b8:b7:9b:b4:a0:
63:de:37:e1:21:42:cb:1d:82:7b:b6:6e:18:4b:e6:6e:d5:cb:
71:e8:65:f5:b0:4d:cc:93:ec:83:e3:6e:e7:89:5b:f1:89:5f:
f3:27:d7:49:2f:cc:71:88:a4:20:07:2f:5f:77:aa:f3:0d:44:
76:02:89:c9:ea:1c:41:0a:b2:bd:e1:3f:ed:db:71:86:13:03:
8a:08:1b:b5:d9:73:be:c2:9e:73:57:9b:00:67:07:02:1d:6d:
f9:cd:de:7e:d3:a0:b7:7d:68:01:b1:a8:28:b3:0e:70:31:19:
4b:b7:c7:7d:90:ee:db:11:69:19:90:03:5b:c1:04:a2:f6:58:
34:35:b5:00:91:93:86:93:3b:09:84:ae:2f:ac:b7:5b:5c:37:
2c:93:36:07:a1:9e:d7:a8:69:f5:16:83:65:9b:93:df:38:a5:
2c:77:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:31 2026 by rpki-client