Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: +pfnQMIOev4BhElbBiRqsFUk+qezgIYJBbwwsPSZTC8=
Subject key identifier: A9:93:B9:23:D4:3C:30:DA:28:17:EC:EC:09:E9:0F:C6:F0:99:2B:84
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 019CB024074F203810F9FB81AF152775A2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 174D
Signing time: Mon 02 Mar 2026 20:01:17 +0000
Manifest this update: Mon 02 Mar 2026 20:01:17 +0000
Manifest next update: Tue 03 Mar 2026 20:01:17 +0000
Files and hashes: 1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: GCpCpBFTwgNSVnn1WwItU2mm0W3ih0QCW176v3rExi8=)
2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:07:4f:20:38:10:f9:fb:81:af:15:27:75:a2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Mar 2 20:01:17 2026 GMT
Not After : Mar 3 20:01:17 2026 GMT
Subject: CN=a993b923d43c30da2817ecec09e90fc6f0992b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:7e:1b:72:5a:ed:49:28:1f:79:ef:27:09:
8c:2c:31:5f:69:52:ca:61:4f:06:6a:10:34:43:de:
66:23:18:b2:27:c1:1c:f4:cc:d8:3a:53:43:d5:99:
c9:a0:a3:aa:03:f1:d0:19:21:bc:15:65:75:ba:b4:
cd:40:53:39:02:51:57:64:05:83:b0:24:be:6a:e6:
39:9d:9a:ae:58:15:0b:ed:87:63:e9:19:5d:ec:6f:
31:0c:80:89:86:ca:4c:af:a3:9f:95:d2:1d:de:2f:
9e:58:ae:e1:c4:a7:82:39:6e:4c:5b:bd:db:54:c3:
93:41:f5:d2:6e:de:8c:ff:b9:fb:81:9a:2b:e5:e3:
19:e4:c7:a6:04:63:db:15:c9:ec:e4:53:aa:0d:c6:
11:f2:d0:50:ee:38:3a:75:6d:1c:2a:97:55:ee:34:
16:3c:26:da:f3:ba:f5:2a:12:5b:43:60:4f:16:22:
8f:39:4d:6e:43:fb:be:c8:3c:ff:4d:3f:9c:a4:1c:
0a:08:fd:2d:a7:2c:d8:28:7c:84:12:0c:66:f5:57:
d6:af:0e:53:75:83:5c:60:1f:ba:65:f1:65:91:63:
7d:58:51:b4:08:e9:fd:33:d3:da:eb:18:a2:af:1c:
9e:fc:9d:fc:71:47:96:e6:e2:0f:0f:b8:87:5b:ac:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:B9:23:D4:3C:30:DA:28:17:EC:EC:09:E9:0F:C6:F0:99:2B:84
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9a:ec:7a:7c:37:33:0a:a0:6f:8a:01:8a:06:fd:98:d0:10:
7c:ab:c9:f7:33:77:df:da:c4:6c:57:52:4b:88:0f:f5:28:fd:
e6:a9:10:82:b8:80:54:e5:58:99:fa:33:6e:42:ef:30:da:52:
65:bb:11:e3:5f:57:03:f4:de:80:94:c7:89:8d:3c:22:b4:09:
af:b6:be:bd:b1:7c:13:41:a5:20:8c:b6:68:43:ea:c5:b7:35:
6c:3c:07:7a:01:4d:7e:ca:fa:a6:66:ac:e2:0a:28:91:1f:16:
26:31:77:f2:cd:f2:e7:79:3d:f0:af:6c:37:4c:c7:ef:a0:bf:
0d:8f:c6:30:bc:d1:93:d7:96:48:86:ab:7f:4c:63:b5:42:c1:
61:3b:a2:46:fb:07:90:b7:3d:bc:be:e9:4d:7d:97:ae:d7:31:
0a:02:46:97:2e:dd:f1:81:d1:e5:2c:54:10:9d:28:f1:32:a8:
9f:bc:71:6a:75:aa:7e:68:bf:df:62:77:7a:18:f2:61:59:ef:
1e:f4:9e:18:24:3b:22:91:67:7b:af:29:c0:1a:a6:2d:98:3e:
ec:3e:5c:49:71:10:f6:a1:04:bd:56:2b:70:54:ce:3e:66:41:
0d:50:3a:90:7a:bc:aa:8e:ea:63:48:09:47:f4:22:b2:8a:1a:
81:7b:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:19 2026 by rpki-client