Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: s/9pRTBBuRZw7q1a8BAjnC7m1B9AOeuE6gkH4XcJMgw=
Subject key identifier: DE:32:EA:61:7D:E0:CF:05:55:7B:1F:22:3E:A2:80:66:E4:70:DD:2F
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 019D9BBEE2B59D79C654F1C419159FAA5AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 17C7
Signing time: Fri 17 Apr 2026 14:01:11 +0000
Manifest this update: Fri 17 Apr 2026 14:01:11 +0000
Manifest next update: Sat 18 Apr 2026 14:01:11 +0000
Files and hashes: 1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: KN/XloIymb/XgZBZnv5FkONeu1yynSJfTpyk64irnkc=)
2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:e2:b5:9d:79:c6:54:f1:c4:19:15:9f:aa:5a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Apr 17 14:01:11 2026 GMT
Not After : Apr 18 14:01:11 2026 GMT
Subject: CN=de32ea617de0cf05557b1f223ea28066e470dd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:0f:6c:7a:a7:d8:f5:66:c0:37:4d:51:06:
05:80:a5:34:4f:b8:dd:6d:65:94:23:53:24:49:aa:
5a:68:1b:58:d3:72:a8:30:db:f1:2e:8e:0a:09:57:
fe:0f:ba:5f:1a:3a:1c:fc:d1:ec:c4:5f:59:5a:91:
0c:29:75:24:73:68:07:d9:eb:b2:bb:b2:3e:9e:25:
8a:79:59:bf:68:18:99:3e:53:ac:8b:4d:b4:e7:5e:
13:30:73:94:49:81:dd:b9:37:54:94:88:3a:29:c9:
14:b4:a3:1c:c6:b2:64:1d:6b:55:86:8d:0a:3b:68:
3e:90:b2:00:13:f9:c8:37:73:a8:62:7e:49:09:89:
0c:45:1a:90:79:0d:b1:be:ad:77:08:44:88:ef:0d:
0c:2c:83:e5:cf:91:47:68:00:6c:bf:cd:b6:c4:82:
f2:ad:28:95:37:bf:d2:45:2a:0e:e5:a2:54:66:e5:
dd:ea:5e:76:b2:3c:b1:3e:bf:40:45:a0:43:9e:a2:
bc:e1:59:60:68:93:61:83:4b:06:eb:f3:65:c4:81:
c6:a0:8a:05:7d:d0:92:72:ef:c1:f8:06:41:06:29:
65:50:6e:6b:99:75:75:46:7b:c2:a0:20:59:57:37:
5b:f5:03:fe:23:1d:76:4b:eb:87:0b:3e:c4:90:5d:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:EA:61:7D:E0:CF:05:55:7B:1F:22:3E:A2:80:66:E4:70:DD:2F
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3e:4f:3c:68:ac:98:84:89:2e:c2:6b:97:2e:2d:54:ee:63:
16:92:fe:55:03:b7:4c:cb:01:f2:e8:33:39:05:66:a5:25:b0:
34:56:73:ee:b6:db:1d:8f:67:1d:17:03:e8:ca:d9:80:ae:be:
a5:4c:06:b1:1b:ee:b0:af:7e:b3:01:7d:9f:31:ce:75:f4:a9:
6b:b2:dd:cf:43:db:44:7c:37:c6:db:64:b4:8a:e8:31:ed:e6:
e2:d8:47:1a:e3:d3:d6:de:0f:03:04:08:30:fc:1d:64:99:76:
f9:94:bc:96:6a:42:b0:4a:47:ba:d0:52:84:28:db:64:da:04:
18:62:de:25:92:d4:bb:bc:58:1f:35:3e:4a:53:c6:26:60:8b:
6a:4d:ba:37:af:45:46:20:0c:d5:71:d6:41:20:f9:57:5b:bd:
8c:f9:e5:16:0e:93:98:3c:61:69:2b:08:55:ba:e5:57:bc:96:
b7:8e:bd:f7:ed:89:da:85:96:25:34:23:6b:39:03:55:56:0a:
84:96:eb:65:16:52:47:4c:3c:66:d7:79:c6:6f:5f:35:09:fd:
08:3a:2c:63:d7:c0:76:4f:c2:0c:0a:a9:cd:30:a8:f1:d2:42:
29:a3:62:b5:b3:b8:d2:12:21:81:66:14:e4:d8:08:c7:76:6c:
4d:ec:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:36 2026 by rpki-client