Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: PAL3V78XwDgPWtifWgqQZ8+vTdRAjsfypyBisN3b6pQ=
Subject key identifier: BE:78:21:46:78:8D:2B:4B:BE:DF:34:0C:91:FE:4A:88:F4:1C:AB:1B
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019FA93DCC9943F8358BDDCC9217B78311FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 15:00:27 +0000
Manifest this update: Tue 28 Jul 2026 15:00:27 +0000
Manifest next update: Wed 29 Jul 2026 15:00:27 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: mLdrdyy1awyWG2EHe38GtAazLn1+B+6bnl7ddblA+/U=)
2: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (hash: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:cc:99:43:f8:35:8b:dd:cc:92:17:b7:83:11:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Jul 28 15:00:27 2026 GMT
Not After : Jul 29 15:00:27 2026 GMT
Subject: CN=be782146788d2b4bbedf340c91fe4a88f41cab1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:62:a2:ac:3b:fd:d8:07:db:b5:ac:97:a0:
87:89:88:ab:bf:ac:36:b4:c6:5c:e8:ce:de:78:82:
f6:36:79:89:e0:37:b0:6c:34:a8:6b:57:58:df:31:
02:82:5f:f9:b2:40:d2:d6:c4:06:fd:14:6e:3f:ad:
fc:4b:ee:1d:2f:e5:39:a9:d3:86:03:06:38:df:b4:
11:58:f6:ed:f8:fb:7f:cb:61:91:d9:93:a7:97:2f:
89:1b:68:ef:65:ce:02:13:12:82:4d:2a:2e:b3:6e:
53:f8:b8:55:c3:1d:6e:99:ff:61:30:d2:d6:8b:af:
b6:2b:17:b3:2f:1d:e4:0c:00:c6:41:99:58:ee:a8:
ff:35:07:b8:10:d5:05:66:5a:8a:a1:a7:22:e6:e4:
c5:00:dc:11:47:30:2c:04:b6:03:f5:a8:59:dd:7a:
27:c6:3f:e3:54:b3:8f:27:5d:3f:52:9d:10:bb:8d:
02:c2:68:4b:6e:7a:ec:92:61:1d:89:fa:7d:31:63:
bd:a0:67:08:7a:d9:6f:c8:b4:fb:9d:7e:d9:2c:37:
ce:a4:a3:97:af:11:3d:22:50:3c:b1:62:ac:31:15:
ac:ea:0e:c8:5e:71:af:39:08:65:b7:6a:3f:39:be:
57:64:9a:0c:cb:3c:2f:f7:be:4e:8a:68:55:4b:b3:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:21:46:78:8D:2B:4B:BE:DF:34:0C:91:FE:4A:88:F4:1C:AB:1B
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:13:24:fd:71:14:6c:ef:71:4c:10:42:27:52:b2:83:8a:5e:
1e:f9:ba:8f:4d:13:ef:03:17:3a:f7:17:d1:d6:5a:67:86:4e:
2d:52:35:a7:24:22:29:bb:f0:c4:00:a8:b6:e4:99:37:0e:5b:
b9:79:75:7c:2a:4c:0f:f8:b0:c6:d6:ad:db:04:91:2c:26:d1:
02:fa:92:02:5a:d6:33:33:7d:68:57:32:0a:66:7c:6e:e3:5e:
41:35:24:a3:6d:72:91:25:d1:6c:ac:1e:46:de:7a:5e:ef:c4:
85:64:6b:69:82:e6:3e:02:a1:26:8b:94:f5:3a:f8:ad:cc:50:
7c:ce:5c:c1:28:25:20:80:ba:5e:fd:22:67:94:9e:8e:86:28:
bc:27:07:1f:a9:fa:d5:90:43:2f:ac:23:fb:18:ac:6e:63:3d:
85:f5:d8:ec:a3:51:1b:1e:22:ec:f7:72:d9:d1:bc:d1:f9:34:
e8:3b:62:0f:ca:1b:4d:ee:4d:5f:25:e3:78:d8:d6:ee:05:94:
28:e0:ba:5b:74:2d:44:bf:e1:75:9f:ee:8e:a2:20:ed:e7:e4:
32:48:bb:1b:8f:9e:6d:bc:36:12:e1:8f:c1:b0:8d:88:09:29:
d1:0d:51:3f:82:a0:c3:18:11:b9:25:c3:eb:4d:bc:e7:1c:cc:
83:4a:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:54 2026 by rpki-client