Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: oGDjX/Ze0LDbnvN57G7OituDzatuDCQa8uBKjYBzR5E=
Subject key identifier: B7:A8:AF:F5:2A:B2:A7:28:11:77:DC:17:2F:1A:4D:E3:86:CA:9F:25
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019EBDA33B00750AD18949773A62FF062DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 21:00:51 +0000
Manifest this update: Fri 12 Jun 2026 21:00:51 +0000
Manifest next update: Sat 13 Jun 2026 21:00:51 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: cPrGywKA2JsUOINKJ78Tp98O4yNToIIJUUqR4Ag6SBY=)
2: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (hash: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:3b:00:75:0a:d1:89:49:77:3a:62:ff:06:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Jun 12 21:00:51 2026 GMT
Not After : Jun 13 21:00:51 2026 GMT
Subject: CN=b7a8aff52ab2a7281177dc172f1a4de386ca9f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:81:2d:db:91:9d:69:18:d7:ff:ae:4a:85:
e8:83:af:66:b7:41:f1:70:00:4e:97:3e:33:b7:4e:
13:55:fe:4c:24:56:06:fd:4c:48:b8:78:dc:44:c1:
16:a6:0a:6d:f9:60:17:1f:54:d1:64:b5:be:ff:01:
4f:23:1e:03:ad:35:af:62:28:11:80:42:52:b2:63:
2d:b1:62:f9:4f:bf:a8:67:bb:a4:60:b2:2a:1e:94:
95:5f:13:67:c4:65:4c:2b:0d:62:98:c3:25:e7:e0:
78:4c:98:a9:52:f5:7a:11:28:b3:0a:7e:cd:9a:32:
65:0e:8f:c9:b9:85:85:d4:c5:43:26:14:1c:3c:0a:
a5:0a:3d:0e:0f:e3:39:e3:36:1e:09:4d:cc:6b:2f:
5d:75:bb:00:f1:c3:91:eb:9e:52:f6:1c:33:ae:2b:
0e:a4:0f:f1:1e:2f:77:5c:04:7b:de:3f:df:25:8b:
3f:3c:4d:19:7d:20:7a:39:75:f1:6d:f9:29:27:23:
03:b8:ca:78:03:36:f7:f7:dc:fa:0a:80:ef:28:49:
c8:14:40:57:5f:63:bf:c7:92:24:ac:27:77:47:c2:
2b:3e:ab:e0:b3:97:ad:54:97:c1:a6:83:af:e5:5c:
29:9e:2e:c5:74:69:09:ed:43:68:c3:5f:08:ac:fd:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A8:AF:F5:2A:B2:A7:28:11:77:DC:17:2F:1A:4D:E3:86:CA:9F:25
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f6:c7:d4:fb:e9:c5:29:12:81:42:23:df:ec:d0:e8:06:22:
a3:58:81:6b:7e:f0:31:d1:7e:5a:3e:64:34:a4:bf:a6:a5:94:
37:b0:37:54:12:50:a1:45:56:e2:d5:08:c0:47:a0:fa:b2:5f:
08:8e:d9:f9:d1:27:90:18:45:bc:a7:0a:7e:6f:bf:eb:41:9f:
75:7a:0e:a5:e6:27:c9:c1:6e:90:0b:37:63:0a:b0:57:50:ca:
58:fd:c9:c2:41:c5:e5:95:8a:e2:5c:3f:00:90:7c:9a:76:e6:
14:a0:d2:94:18:66:6c:58:c9:eb:66:59:88:50:16:b7:34:c3:
60:56:e4:f9:24:41:65:e1:41:13:82:41:33:55:ca:c3:66:93:
63:2c:9e:41:b5:eb:06:9f:1a:2d:c9:a5:d8:8f:37:73:38:e8:
61:80:49:7e:52:7e:9a:c2:30:50:d3:d6:6b:a9:00:c3:8b:06:
31:77:95:ca:d4:6b:62:9f:35:15:2d:3b:e3:73:21:7e:63:d8:
91:bd:d0:8e:94:f6:91:d9:c7:4b:ca:69:bd:46:74:d8:9e:8c:
07:52:e3:a8:11:d8:54:1e:68:5a:88:f8:a0:2f:fc:5d:52:c9:
b6:c7:1b:84:a0:e1:ae:48:88:57:8c:3b:28:a4:bc:6c:dd:1a:
8a:b0:a0:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69ozsAdQrRiUl3OmL/Bi2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDg0ZGRhYzUwYzU5YWVjYWYwNmIwOWI4NTczYTg2MmEw
ZWEzZGIwHhcNMjYwNjEyMjEwMDUxWhcNMjYwNjEzMjEwMDUxWjAzMTEwLwYDVQQD
EyhiN2E4YWZmNTJhYjJhNzI4MTE3N2RjMTcyZjFhNGRlMzg2Y2E5ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK6BLduRnWkY1/+uSoXog69mt0Hx
cABOlz4zt04TVf5MJFYG/UxIuHjcRMEWpgpt+WAXH1TRZLW+/wFPIx4DrTWvYigR
gEJSsmMtsWL5T7+oZ7ukYLIqHpSVXxNnxGVMKw1imMMl5+B4TJipUvV6ESizCn7N
mjJlDo/JuYWF1MVDJhQcPAqlCj0OD+M54zYeCU3May9ddbsA8cOR655S9hwzrisO
pA/xHi93XAR73j/fJYs/PE0ZfSB6OXXxbfkpJyMDuMp4Azb399z6CoDvKEnIFEBX
X2O/x5IkrCd3R8IrPqvgs5etVJfBpoOv5Vwpni7FdGkJ7UNow18IrP1/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeor/UqsqcoEXfcFy8aTeOGyp8lMB8GA1UdIwQY
MBaAFA3YTdrFDFmuyvBrCbhXOoYqDqPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMt
Y2RlZTk5OTVlOWU3LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMtY2RlZTk5OTVlOWU3
LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovbH1Pvp
xSkSgUIj3+zQ6AYio1iBa37wMdF+Wj5kNKS/pqWUN7A3VBJQoUVW4tUIwEeg+rJf
CI7Z+dEnkBhFvKcKfm+/60GfdXoOpeYnycFukAs3YwqwV1DKWP3JwkHF5ZWK4lw/
AJB8mnbmFKDSlBhmbFjJ62ZZiFAWtzTDYFbk+SRBZeFBE4JBM1XKw2aTYyyeQbXr
Bp8aLcml2I83czjoYYBJflJ+msIwUNPWa6kAw4sGMXeVytRrYp81FS0743MhfmPY
kb3QjpT2kdnHS8ppvUZ02J6MB1LjqBHYVB5oWoj4oC/8XVLJtscbhKDhrkiIV4w7
KKS8bN0airCgZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:52 2026 by rpki-client