Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: s6OnuewOBwOYbravGRmYLSlAfOiy3I+tIscDT60grDU=
Subject key identifier: 99:B3:F2:E5:B8:E7:99:6D:DE:AF:AE:37:D8:36:B8:0E:7D:C4:0B:37
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019D99D086171883EFAE09D5C96335834207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: 9s8WxkcFVlatw2iITc2vZUXV5yiFqp3Rq/zsm2KX+a4=)
2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:86:17:18:83:ef:ae:09:d5:c9:63:35:83:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=99b3f2e5b8e7996ddeafae37d836b80e7dc40b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:9b:33:a1:50:3f:0f:3f:e7:34:b9:92:ac:
8b:6f:2a:c0:0f:d4:ef:68:8a:db:0d:0f:29:b8:ce:
a9:e0:c1:d2:4f:c1:f2:84:61:ef:39:b0:51:5b:9a:
a7:bb:4f:b3:86:f7:81:08:3b:01:a5:68:64:9e:ec:
16:0c:c1:f7:cc:87:69:e4:0f:30:ed:fe:b6:4a:ce:
fc:26:55:f0:d4:26:11:83:60:98:e6:45:f7:a6:7e:
be:50:6e:4d:97:5f:cc:82:30:6c:c6:1a:01:87:de:
15:83:44:03:19:76:e3:62:20:4c:e3:cf:22:83:84:
e8:3a:21:36:6c:2e:ec:59:28:55:30:f7:57:77:ff:
35:03:97:12:74:6d:5b:6b:92:3d:69:6e:9d:e4:1a:
a2:94:4e:15:bc:cd:ec:42:4f:0b:e5:3d:e2:8f:d7:
68:92:c7:5b:5a:1b:ff:4b:a0:af:82:f5:0f:96:af:
71:1e:f7:68:05:db:8c:28:c0:c4:cb:f4:52:60:d2:
42:a0:87:38:89:74:b5:a9:1a:90:bb:9c:b3:55:d8:
b7:8a:ca:7f:46:60:e9:4c:ca:e4:b1:30:32:a0:bb:
87:28:75:9a:f2:1b:ae:c3:3e:25:46:0d:42:b6:93:
b1:b2:af:cb:dd:20:fa:6c:cb:83:ac:5b:55:49:59:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:F2:E5:B8:E7:99:6D:DE:AF:AE:37:D8:36:B8:0E:7D:C4:0B:37
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:32:ab:bf:b1:4f:d7:92:e9:49:b0:34:da:06:a1:06:8a:
20:0a:27:4b:af:f1:57:7c:d3:47:b6:0d:bb:c6:82:16:28:4e:
2d:37:9a:0d:e5:d2:3b:21:8f:e5:e2:2d:7a:41:81:c5:5b:c0:
1e:c0:35:28:08:16:5b:6c:bc:79:8b:a3:91:14:7d:e8:8e:c3:
b4:fe:0d:4a:9f:7c:c0:47:f7:bd:12:97:90:c9:95:d7:1f:b2:
1d:ad:53:b9:bf:9f:3d:6e:9c:54:a3:fd:a9:5c:45:e6:ce:a0:
fd:80:c4:17:44:7e:17:50:89:cc:68:85:73:2d:61:ee:fd:90:
4f:e8:01:5a:ab:bc:c1:6f:c6:fd:65:19:27:16:4e:b9:c7:9b:
78:ad:83:7a:be:3b:0b:82:21:6b:c1:f3:8c:56:4f:7b:66:2a:
83:66:f8:af:5d:26:6a:e8:73:b5:73:a0:05:2b:20:d9:bb:e3:
4f:ab:ec:92:86:f9:40:dc:08:6b:98:41:d7:f9:e7:39:c3:be:
2d:3e:83:d5:58:7b:c3:2b:33:4d:f4:fb:83:cb:2b:46:64:f9:
82:07:3f:fb:d4:03:78:2a:09:20:43:39:22:9c:c0:69:4b:44:
31:8b:17:31:f1:fa:97:b7:3b:3e:fb:66:d2:d1:6a:98:3a:fd:
cc:5f:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:23 2026 by rpki-client