Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: a1rTEcneuiJHkqDlVjyv4N4lO27SOTmBjftNkvzwcKg=
Subject key identifier: 4F:DD:9D:47:16:F0:2F:78:0B:CF:69:B8:98:CF:55:54:1A:71:52:7F
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 01A0CCA2D880DB0057B092AFE53AE8E88B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 1522
Signing time: Wed 23 Sep 2026 05:00:19 +0000
Manifest this update: Wed 23 Sep 2026 05:00:19 +0000
Manifest next update: Thu 24 Sep 2026 05:00:19 +0000
Files and hashes: 1: AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa (hash: fdkV0rGstUR1Pzncs3bfmTmh9JkFZ1wdI7Ez0Xn02hM=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: HKZ/6cL5wqpFPglq3jZhTPdAe8LhqUkWomxMHeh5qqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:d8:80:db:00:57:b0:92:af:e5:3a:e8:e8:8b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Sep 23 05:00:19 2026 GMT
Not After : Sep 24 05:00:19 2026 GMT
Subject: CN=4fdd9d4716f02f780bcf69b898cf55541a71527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:c4:d7:8c:d2:da:ba:dd:eb:ab:a8:e2:b5:
8c:f0:2e:fb:c7:7c:33:c3:ba:7f:28:7a:dd:d0:8b:
48:2d:40:a6:e3:7f:47:1f:14:91:b8:70:d3:a5:60:
73:b5:11:77:9d:c2:73:58:a3:4a:39:21:31:f6:22:
aa:1c:51:51:37:b5:e4:52:3d:0e:67:22:7f:94:a3:
a1:54:c0:3c:a5:8d:42:8f:e3:8f:e2:b8:b7:e1:80:
8d:52:7c:b5:11:ef:f0:42:2d:56:9e:2b:bf:a5:ed:
9e:34:02:a9:bd:39:e2:e6:b3:74:5f:ca:c2:61:87:
5d:9b:c1:06:35:0b:1e:73:db:9f:05:15:51:d9:7a:
32:a7:d0:51:4b:63:b4:1d:85:17:b6:b9:41:22:2e:
bb:d9:79:0e:ad:5d:3d:62:8b:4f:23:26:89:4f:e3:
b1:c4:d7:6c:d2:bd:27:12:54:9e:b3:16:f4:7f:fb:
12:f0:ca:40:a6:d1:c1:a1:ef:e0:69:5f:e4:ae:76:
92:54:6e:7c:99:5c:64:ff:97:c3:64:15:83:d3:a7:
bc:f6:1a:cd:fe:70:44:c5:52:72:3b:34:80:f6:73:
39:86:2d:0d:86:a8:93:99:38:79:50:a5:6d:37:00:
cd:3b:88:07:db:bc:11:c3:63:9f:68:b2:31:9b:e6:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DD:9D:47:16:F0:2F:78:0B:CF:69:B8:98:CF:55:54:1A:71:52:7F
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:2d:9a:58:fa:de:49:8b:14:46:11:2f:7f:35:83:f6:ad:
ea:99:ee:78:e7:31:13:1a:2a:b5:29:57:0b:bc:f2:0c:45:67:
f4:7c:e3:5d:7e:88:d8:3e:51:4f:d5:c9:fb:a5:be:d3:50:52:
b6:76:97:bc:8f:20:2a:39:5e:9e:d0:63:0f:28:a7:40:fe:93:
08:5f:84:9c:a3:f5:29:78:e7:9f:cc:4f:e6:4c:31:81:59:1c:
26:d6:32:47:00:5b:de:ea:2c:bf:63:a7:a9:2a:89:2e:e5:bf:
29:53:71:f3:4f:97:e4:b1:f1:85:80:b9:14:23:cd:4e:2c:e0:
d4:b5:95:e6:26:9f:fc:93:b2:cf:30:eb:9c:57:2c:3e:0c:5b:
1d:7a:9c:84:c8:68:cf:d2:03:02:f9:ad:47:07:8b:81:25:c1:
0a:c9:a1:1b:da:2e:cb:fd:6a:0f:11:ae:84:26:2a:ff:4b:7b:
af:67:5f:da:85:b1:f0:fb:52:7e:be:9b:00:80:29:7f:45:91:
4f:65:f7:c5:0e:9f:fb:4a:d1:e3:a2:5f:6d:90:e5:87:eb:43:
00:d8:0b:bc:c3:b6:1e:d5:21:fa:a1:94:e7:6f:c4:ce:87:2d:
37:b3:0d:17:44:2c:42:f1:f4:cd:bc:ee:32:56:b4:bb:a2:66:
54:c5:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:38:54 2026 by rpki-client