Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: twCYhnANx+xUvbFrOwE3Zo5OTWl9iU1fdA4lbgOJV8s=
Subject key identifier: 29:A6:E3:78:C7:05:7A:0E:36:76:98:A9:2F:9A:30:C7:92:0D:E1:17
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019DA3AF4DB0F5DE35BB75B2FA94222F3429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 03:01:08 +0000
Manifest this update: Sun 19 Apr 2026 03:01:08 +0000
Manifest next update: Mon 20 Apr 2026 03:01:08 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: +5iB22+GzGE8q6OqWSYBZ1xxq6v4CdO7lU7iime4UN0=)
2: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (hash: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:4d:b0:f5:de:35:bb:75:b2:fa:94:22:2f:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Apr 19 03:01:08 2026 GMT
Not After : Apr 20 03:01:08 2026 GMT
Subject: CN=29a6e378c7057a0e367698a92f9a30c7920de117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:17:91:2e:07:a4:65:3c:4a:32:47:d7:18:
ed:d4:4f:83:40:ee:96:cc:90:a0:00:18:5c:47:95:
9c:32:51:55:45:6c:79:0d:28:9f:ca:25:4f:7d:7c:
3c:0c:ca:a9:08:87:01:c2:f0:e8:57:48:09:75:0f:
ef:54:f5:24:be:f8:16:d7:33:ac:23:b9:4a:1e:88:
56:a1:b6:04:26:54:a0:f0:3f:44:3b:fb:49:e8:b4:
09:be:37:27:23:dd:5d:d2:40:69:61:68:0e:92:a6:
44:7d:f8:11:7d:29:23:2a:c4:a2:a0:ac:36:0e:b8:
d4:cd:6a:e4:af:14:68:77:62:2c:91:84:51:77:e9:
e7:31:ca:21:74:cb:6f:fb:d7:8a:0f:fb:9d:fb:73:
d0:b5:db:3a:1a:4a:4e:a8:95:9d:94:2e:79:0c:20:
3c:4f:4a:ae:3f:a5:d2:33:cb:0e:d6:1b:22:cb:1a:
26:06:3c:a9:ae:93:9a:90:98:41:15:6e:c6:86:49:
12:cb:c2:71:fb:21:39:29:62:19:8f:be:7b:8d:46:
30:62:67:5a:bc:2c:1f:b9:2d:69:29:68:36:38:08:
67:99:1a:6b:03:d7:6c:0d:c9:30:d1:e5:b9:1f:ef:
f2:73:73:56:1e:37:35:8e:2c:31:4e:06:be:c4:ea:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:E3:78:C7:05:7A:0E:36:76:98:A9:2F:9A:30:C7:92:0D:E1:17
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:61:56:84:ea:55:a3:8c:65:12:6b:4c:e4:4f:dc:65:5e:76:
3e:35:0e:6b:f6:77:f1:ab:99:9d:96:3c:cc:43:8a:30:54:7b:
c2:35:e7:40:37:3b:5b:2d:bb:2c:ee:0a:c0:fa:e7:b7:c2:eb:
bb:d1:49:04:b4:af:68:61:dd:19:cc:f4:97:2e:03:32:fa:91:
5d:32:45:22:28:f9:e8:27:21:e3:10:66:3b:29:f9:25:e5:48:
82:55:6c:f2:ce:9e:84:a9:9f:9e:0a:4a:e9:17:58:ae:77:46:
5f:37:20:18:95:8b:50:91:d5:46:81:d9:df:95:be:b3:10:1c:
9c:98:22:42:65:a6:a5:ae:08:c0:f6:e8:d0:3d:f8:78:88:4e:
80:29:d5:a0:aa:6d:d0:c5:c0:c5:43:08:f2:ab:c9:5f:94:06:
b6:a5:bb:6c:66:31:2e:9f:10:65:73:0b:19:a9:9e:36:99:02:
ef:28:68:65:61:69:60:c5:f1:f3:88:18:55:2a:26:b6:55:16:
0f:a0:b3:fe:76:4d:94:08:50:a6:1c:89:10:f8:42:56:59:ba:
7d:ff:49:d9:90:01:44:84:fc:d9:8c:dd:11:a5:0f:58:5e:78:
df:f2:31:28:f3:79:74:e6:12:8c:ba:06:8e:2a:7c:42:53:7f:
ba:37:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:19 2026 by rpki-client