Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: QkYOO94kh3gGvLDVv4v+xqOz5jzR22tdUbJKdA4qFHE=
Subject key identifier: 2F:FB:ED:05:37:07:4F:83:51:76:18:41:5B:B7:59:90:7B:12:7F:02
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 019FAAF5C8E1E1E06F372D83E6CEDA558200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 148C
Signing time: Tue 28 Jul 2026 23:01:02 +0000
Manifest this update: Tue 28 Jul 2026 23:01:02 +0000
Manifest next update: Wed 29 Jul 2026 23:01:02 +0000
Files and hashes: 1: AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa (hash: fdkV0rGstUR1Pzncs3bfmTmh9JkFZ1wdI7Ez0Xn02hM=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: d0I6Vbksb6JXKf5Ri4CAS6ZfCNgKw4Ci5yhrtEWFHeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:c8:e1:e1:e0:6f:37:2d:83:e6:ce:da:55:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Jul 28 23:01:02 2026 GMT
Not After : Jul 29 23:01:02 2026 GMT
Subject: CN=2ffbed0537074f83517618415bb759907b127f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:41:b5:ad:e9:c9:24:7c:68:d9:b6:b6:68:
ff:93:35:e8:44:a5:76:2c:2b:d8:8b:a1:8a:c1:eb:
82:8b:74:9b:bd:77:35:98:45:4e:72:19:2d:fe:90:
8c:db:00:d0:20:9f:bf:7a:33:13:0a:5a:01:71:fa:
bb:3a:b7:f0:3c:b2:19:1a:4b:1f:3c:79:40:99:91:
fb:41:27:77:a3:32:7b:85:65:cd:55:00:08:8e:27:
91:0a:32:ba:d9:88:99:b6:c7:97:a9:50:97:e8:0b:
09:ca:70:9a:71:23:d2:7c:95:0a:12:11:e9:51:ff:
27:49:94:71:c2:bf:a0:00:6a:47:d6:38:7e:28:ef:
37:14:bb:4c:7d:ab:4f:c9:32:0c:a6:db:20:89:7c:
96:77:ae:e7:4a:89:bf:79:e1:16:d0:35:1a:e9:92:
01:a3:ce:46:31:4e:79:31:7a:aa:cf:69:a9:62:d4:
44:5d:97:a7:86:36:30:33:c4:34:7a:f9:07:ba:a8:
ce:46:db:1e:52:c5:43:18:87:0f:ce:14:02:b2:21:
49:b0:c6:5d:79:d9:3e:a6:ea:9c:8d:77:fe:82:8d:
27:ad:87:98:eb:9a:56:27:3a:7b:57:1a:4e:e5:ae:
5c:a8:1b:b8:d2:50:91:63:74:d5:2d:80:b4:a3:bc:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FB:ED:05:37:07:4F:83:51:76:18:41:5B:B7:59:90:7B:12:7F:02
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ec:5f:55:77:2b:d1:de:7d:2f:57:89:6b:02:ee:86:4b:54:
d3:80:17:14:89:54:51:1e:dc:c5:07:b6:d3:9e:a5:6e:16:f6:
cb:4f:42:74:f0:aa:1b:c2:70:d4:e0:75:a2:8e:d3:67:33:eb:
80:17:67:3d:e1:a8:50:05:05:52:b6:80:73:1a:95:82:ad:6c:
31:70:b0:c4:d0:52:99:af:fb:8a:f6:b0:a3:a5:27:8f:4e:9b:
6a:72:7e:4d:a1:d3:43:dd:95:08:e3:aa:cb:62:b3:c4:fd:18:
47:af:9f:9a:07:d9:72:a1:fa:68:36:61:0b:e6:c7:84:69:96:
41:4e:40:33:44:4f:16:98:86:a4:42:59:db:11:69:d2:59:4a:
68:6a:db:33:5c:f1:36:3b:76:91:39:1f:6d:a6:1c:c7:bf:36:
cc:b9:66:d9:f8:61:23:fc:3a:7d:5d:2b:1b:40:a3:0a:cc:a6:
f2:ac:73:db:e5:dc:c2:b1:bf:07:62:7b:d0:56:ce:67:3b:93:
98:24:94:8d:c3:e3:d9:a2:3d:52:97:fb:93:06:b7:e8:96:7c:
ff:3e:d5:e9:cc:a9:8a:4d:9d:5a:34:de:8c:d3:e1:63:a6:14:
ad:1f:e9:d3:b9:f3:c4:bf:c8:40:7c:ca:25:b4:90:0d:a1:5f:
e4:83:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:10 2026 by rpki-client