Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: UHnnv6Co7+9MQULIm8t+7HAY/ruQWqOrTzrqabEBpgM=
Subject key identifier: D9:F2:ED:9F:F0:A6:2C:DC:73:B8:0C:B6:62:86:34:BC:D7:01:CC:EC
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019D2816EB5BA46EEDA88B1786A7DD1E3CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: cF/eWQ5Q9PkvHxHs9malWXw3FeiLrJpO+u5JGCF5Y2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:eb:5b:a4:6e:ed:a8:8b:17:86:a7:dd:1e:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=d9f2ed9ff0a62cdc73b80cb6628634bcd701ccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:2a:5a:8f:b4:18:9d:03:80:13:f4:1d:6b:
f0:38:fe:3b:43:86:84:88:6c:5f:73:6b:80:eb:43:
c0:ab:c5:f2:ce:5c:a0:0a:5e:33:2f:94:ae:00:eb:
b7:14:37:41:f3:64:22:ee:f7:eb:46:d4:96:09:f6:
a8:73:e1:41:ae:1f:40:ab:04:65:ff:70:fb:12:22:
65:c6:56:4b:d8:9f:53:07:0d:40:32:1c:69:1d:68:
6d:d0:38:f7:0f:71:ac:21:bb:89:f8:b9:e4:34:03:
c8:43:3f:7e:9a:64:b5:35:5f:a9:0a:43:d5:e3:e0:
b0:89:d1:c8:d3:4c:4c:e5:84:b3:a8:ea:4a:3e:fa:
63:06:ff:ad:64:a2:52:40:a4:7e:63:a8:7c:21:32:
a3:7d:6a:e8:1f:59:19:a2:36:3b:16:95:39:f4:47:
60:22:29:62:30:a0:3e:44:7f:98:f1:26:db:d6:38:
67:3d:30:29:3a:db:2f:c4:af:cd:2c:9c:8a:83:10:
3a:73:41:41:d7:01:13:41:7a:19:4f:8e:e5:f5:80:
d0:8f:ed:f4:3a:9f:fe:1e:8a:a0:34:fe:23:79:0c:
fa:b3:85:4e:32:4a:69:ba:59:67:04:16:3b:fa:d8:
97:46:0a:70:f0:74:f0:b6:49:73:e3:ea:35:a7:04:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:ED:9F:F0:A6:2C:DC:73:B8:0C:B6:62:86:34:BC:D7:01:CC:EC
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0b:67:73:db:46:76:66:67:9b:e5:43:0d:42:c9:4f:b8:f7:
46:f3:62:43:3d:f7:1e:05:ee:4a:c0:74:e5:ef:db:6b:f8:73:
d0:52:fd:1a:ce:c5:b5:2d:a8:86:d4:41:ac:b6:a6:91:3c:ce:
21:d0:64:7c:57:c6:53:07:6a:05:00:f4:60:b2:18:3f:95:ef:
a8:c6:b3:7a:67:3b:43:c9:22:40:67:43:f5:12:c9:b9:a1:c8:
1e:04:5e:e4:ac:71:4f:5c:7e:8e:28:b0:80:5f:bb:e9:d7:35:
a6:b1:2d:74:7e:db:fb:92:24:67:18:f9:0c:9e:c8:ed:92:b0:
79:3c:34:4c:64:fd:17:d6:28:82:e1:78:52:ab:ff:f0:8b:41:
aa:91:d8:12:ab:ae:fa:6e:09:40:68:b0:a0:3b:01:25:39:95:
77:67:77:57:1f:0f:50:7c:1a:e2:52:8c:e4:67:fc:3f:9b:a3:
92:79:e7:00:10:d7:5e:9a:75:8d:68:17:5b:68:73:a1:b4:1f:
9f:27:60:02:81:b1:94:85:f5:78:5b:5e:28:87:ec:f0:04:ed:
6d:28:1c:c4:83:97:0c:3b:b3:18:73:42:e6:d7:c9:1c:d9:f5:
d9:e8:6d:b0:18:fb:11:58:fc:f9:d1:a2:da:63:dc:ca:10:bd:
61:8b:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:04 2026 by rpki-client