
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: ev6VwQ9V0Eab3XGChFIBU8ah+qbjN37ljadJAeuSqPU=
Subject key identifier: 16:A7:81:91:34:3E:0C:33:0F:45:5E:72:B8:CC:F7:4D:4F:33:93:3F
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019D9A074C1C597FA077A4B1A34388686E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:01:02 +0000
Manifest this update: Fri 17 Apr 2026 06:01:02 +0000
Manifest next update: Sat 18 Apr 2026 06:01:02 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: peNWCjxjd8fK7L9oPBRFRgXMDT5b0sX6kR2VhpgwXEE=)
2: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (hash: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4c:1c:59:7f:a0:77:a4:b1:a3:43:88:68:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Apr 17 06:01:02 2026 GMT
Not After : Apr 18 06:01:02 2026 GMT
Subject: CN=16a78191343e0c330f455e72b8ccf74d4f33933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:b4:d5:34:6c:44:ae:6e:ae:90:00:fb:7a:
8d:13:bd:f0:cc:c0:48:96:1e:70:e3:43:3e:91:05:
7c:24:f6:21:b6:89:60:d9:73:75:ae:d1:c5:ba:4c:
82:00:31:fc:c7:27:ca:7b:90:d9:d6:b8:f3:38:e8:
6a:66:12:05:f2:9d:8f:73:e1:fe:b1:4c:5b:e6:dc:
d6:b4:f5:6f:2b:e3:30:29:c0:37:78:fa:cc:8b:a4:
f7:6b:7e:14:85:6d:4e:c2:e9:d4:80:df:6f:44:aa:
97:b4:c9:a2:bd:9f:d9:62:0e:b5:a6:15:46:7a:eb:
c4:ff:b1:b3:a8:84:34:75:2d:f3:a5:f1:27:a2:74:
59:d7:1c:00:f9:3e:7c:15:5d:9e:f3:be:2f:83:b2:
c5:99:45:17:31:04:46:2a:c5:18:c7:3f:8d:a3:c8:
93:64:b0:ea:e9:32:d0:a6:da:f2:db:5d:a7:ee:d1:
e2:93:a3:15:90:36:44:92:47:08:af:a1:70:9c:95:
eb:43:d5:b7:0e:dc:d3:30:6e:27:cc:a1:40:5f:b1:
e4:95:52:fe:d0:8d:be:da:8c:8d:df:f5:3d:1f:8b:
1e:96:06:9a:e3:c4:82:ba:63:66:32:d0:fe:16:1e:
27:64:4a:09:4d:b2:25:d9:ac:56:78:00:9a:46:40:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:81:91:34:3E:0C:33:0F:45:5E:72:B8:CC:F7:4D:4F:33:93:3F
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3c:44:a2:b1:c4:3a:e0:79:28:99:00:d6:e5:8d:cc:02:f2:
f6:ac:c9:cf:07:cd:60:fe:ec:86:38:93:e7:15:2b:92:66:a6:
b4:86:7f:94:4a:57:98:e0:62:12:5d:84:88:f6:0a:6a:6b:49:
c1:2f:42:fb:e0:35:46:74:11:61:87:97:c0:e6:b9:ef:bf:5c:
b7:97:90:0f:c2:27:9b:c7:ec:d9:8f:eb:b0:55:bd:91:b9:32:
f5:a9:5c:73:93:4d:79:de:0a:db:e7:00:2c:50:f9:23:1a:e1:
35:27:c5:42:ea:d0:e3:0b:b0:8c:b9:d9:29:ed:44:50:d4:7c:
8d:67:05:c5:35:d0:f3:ef:6f:25:a1:8e:fe:f1:37:7f:17:52:
00:12:28:50:ab:1e:e9:2f:51:0d:84:74:87:88:5b:f0:c1:c3:
55:a8:d7:25:65:51:13:32:3c:fe:3d:b1:55:02:da:c1:35:70:
29:2e:33:a0:db:50:1e:9b:db:3c:e6:b4:15:9a:d0:52:f6:5a:
70:13:a3:ef:03:b4:a8:5a:61:a2:b5:e7:b0:e3:04:56:cc:37:
23:3f:65:83:b9:b7:6c:e8:13:ed:ad:77:0a:a2:5e:78:34:85:
2d:9b:18:c5:d3:3d:c6:81:c5:a5:77:4f:43:d7:f4:f6:5b:aa:
30:68:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:04 2026 by rpki-client