Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: aGhwI9ULNvaEo1hFtJPkpUYXc0/WRIjXIroPu554sd0=
Subject key identifier: 98:AB:63:CD:A9:F2:EC:BF:8D:79:D0:A9:61:71:A1:60:BD:EF:C0:8C
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 01A0D61513FD0D1860663B7F90C58263013D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1A76
Signing time: Fri 25 Sep 2026 01:01:40 +0000
Manifest this update: Fri 25 Sep 2026 01:01:40 +0000
Manifest next update: Sat 26 Sep 2026 01:01:40 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: ZvB22WPByWsnFSEGjOPJ18R/ukqMKcZWM6YaFwhqVmY=)
4: xKcBipuMvKp84RN5Ey0HBKtsVPo.roa (hash: /eh2S8GsbWcqnju6ljXJ0HQ5aHuof6/dHBl/9C9TCw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:13:fd:0d:18:60:66:3b:7f:90:c5:82:63:01:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Sep 25 01:01:40 2026 GMT
Not After : Sep 26 01:01:40 2026 GMT
Subject: CN=98ab63cda9f2ecbf8d79d0a96171a160bdefc08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:9e:f8:6d:8d:29:20:7e:b4:9e:08:7e:ec:
55:95:5c:b4:01:f3:87:81:ef:f7:6f:91:d1:c8:99:
34:07:35:2d:b7:36:ec:4a:17:a1:6f:30:a6:00:73:
c5:59:c9:e8:c7:18:2a:54:66:e5:9b:b7:5e:c4:da:
1d:e2:50:2f:fd:c6:0b:02:8d:e6:66:a1:16:b3:9b:
f1:19:ef:d8:43:9c:11:ce:78:67:c4:a0:06:7d:d2:
75:0e:88:45:4b:d7:06:79:db:a8:8a:26:f8:1b:ed:
7f:09:f3:9b:5b:ad:2f:ed:25:4f:92:3e:8d:65:ae:
b0:b7:82:34:14:1a:13:94:dc:f7:90:08:28:c1:98:
09:7b:9f:c9:20:4e:b6:21:9b:b7:74:0b:c3:94:d2:
9b:9c:6e:23:74:df:38:15:28:64:e8:30:7b:d8:c3:
ba:c5:da:be:06:0d:f2:c4:8a:23:85:fb:fa:ed:58:
1c:e7:8b:e1:d2:d6:5a:f2:7b:14:e2:30:0e:6a:1b:
58:e7:cb:9b:2d:e2:ac:95:7a:06:c6:87:38:ef:48:
25:4f:2e:33:7c:1f:41:db:84:e0:6e:a5:c4:5b:20:
c4:69:c9:73:4f:77:f8:a9:2d:07:f2:6a:e2:c5:fa:
c8:e1:c7:81:dc:77:de:5f:35:97:95:b0:54:a4:40:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:63:CD:A9:F2:EC:BF:8D:79:D0:A9:61:71:A1:60:BD:EF:C0:8C
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d7:01:bb:d5:4f:f9:60:e2:ef:d3:c7:16:ac:b2:47:18:cf:
d0:e6:d2:99:5c:f4:be:99:fe:e9:ed:81:65:23:f6:8d:9d:e0:
4b:20:be:74:82:44:aa:57:17:bb:2a:6a:18:6c:c3:f8:65:77:
d8:8b:4b:7b:b1:c8:f5:0a:d9:78:ea:33:90:f7:4c:3c:5f:81:
33:33:8d:cf:2a:28:c1:03:a4:f6:8c:5f:29:a0:6a:95:43:1d:
2f:4a:db:30:36:dc:1a:24:1f:93:80:20:5e:ee:0f:e9:9c:ad:
90:54:c2:a7:30:06:89:ca:e1:c9:8f:ce:4b:ad:34:9b:3d:8f:
86:7d:0c:58:bf:f5:71:da:80:5c:2f:c7:20:47:78:d9:2a:8d:
51:ef:b8:57:7f:19:f2:a7:da:18:6c:ab:ab:8e:b2:d4:d7:24:
96:05:ce:98:ae:1f:04:f0:78:ae:f5:87:0e:9f:4a:c9:b1:6c:
49:76:00:1a:ae:6e:47:1c:72:fe:03:fd:50:84:a5:a0:73:d6:
3f:0b:bf:33:f3:93:82:ab:1c:00:bd:90:bb:bf:49:9c:68:77:
cf:ba:3f:0b:f2:2c:a9:44:07:56:32:07:00:57:26:80:b9:24:
23:e5:87:77:c2:1d:de:2f:c8:ef:e7:30:af:fb:f0:f4:5a:2c:
10:68:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:46:13 2026 by rpki-client