Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: ApuXf4NYfgHr8JEo5CecpnhBQaP05NUqn38Ge0Rvp+o=
Subject key identifier: 2E:F0:49:38:CA:DC:8B:BA:31:67:63:D6:8F:B3:6E:A3:5B:DB:D9:AF
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019E1F4779E92A3F09D9EAC420685895CE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 190E
Signing time: Wed 13 May 2026 03:00:38 +0000
Manifest this update: Wed 13 May 2026 03:00:38 +0000
Manifest next update: Thu 14 May 2026 03:00:38 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: PiRbGm/n/afhC+zxWVVAnFom9qJQyLVNqNGs/qTUDCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:79:e9:2a:3f:09:d9:ea:c4:20:68:58:95:ce:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: May 13 03:00:38 2026 GMT
Not After : May 14 03:00:38 2026 GMT
Subject: CN=2ef04938cadc8bba316763d68fb36ea35bdbd9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:e8:34:75:a6:12:83:74:44:d1:3a:34:a0:
c8:04:07:cf:a6:c2:2d:12:5e:a2:6b:0a:e8:cf:83:
2e:c9:e2:4c:eb:3b:73:60:45:38:cc:94:bc:64:b3:
d3:12:58:25:bc:7a:fa:c8:1b:a6:a7:0d:b6:6f:19:
6e:5d:44:7c:d6:7f:77:ab:1e:e9:af:60:0e:ef:72:
6b:96:b5:3a:22:ab:fd:01:6a:a5:24:96:a3:c1:e5:
58:e8:dd:ca:44:f1:1c:3e:4c:d2:b1:e7:f6:5d:c2:
e8:f5:20:1d:be:33:4b:dd:b3:fe:9f:00:22:ac:d3:
5e:b5:1b:15:08:0b:00:e0:2b:8a:06:7d:8b:bc:d6:
2c:2f:96:9f:e0:75:59:f8:7c:2d:15:32:93:7d:b1:
43:45:8f:0d:64:1d:55:a5:82:d5:c3:0b:09:47:45:
6b:5d:6e:3b:97:87:5a:cf:07:9c:0a:ce:9d:6b:e6:
06:a6:ea:da:ac:fb:aa:79:a3:09:90:11:82:2d:9b:
ee:55:49:46:7f:68:0f:5f:45:53:db:4f:68:fe:f6:
17:70:16:55:1f:eb:f8:c1:2a:e7:9b:bb:a9:74:55:
4c:d7:71:e7:96:03:fc:d4:d9:f7:9d:b7:ce:da:2a:
8f:47:fd:5d:f5:a9:3b:49:94:c4:da:e9:8c:4d:47:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:49:38:CA:DC:8B:BA:31:67:63:D6:8F:B3:6E:A3:5B:DB:D9:AF
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:83:db:f9:c0:20:08:fd:a8:53:4d:33:1d:33:7e:23:ef:c3:
32:0e:82:98:aa:50:ef:9c:04:24:30:fe:0e:d3:b7:5a:ae:52:
5c:36:60:69:da:10:dd:a0:09:10:8a:42:0e:70:3e:15:b5:9a:
4a:33:15:c1:e2:2a:7d:9d:91:29:07:39:c9:ec:3d:26:20:af:
ab:d7:84:39:17:87:05:4c:64:83:5d:48:45:aa:82:72:e4:6c:
e8:c1:bc:cf:e3:9c:ce:bb:78:68:26:b6:8a:70:94:f1:18:66:
9f:55:5c:c8:ba:97:af:ec:33:33:d1:57:67:7c:f5:70:af:8b:
95:91:99:b6:b5:92:60:93:63:3f:62:2a:70:59:c1:4b:0d:43:
c7:7f:0d:56:71:0e:6a:56:ec:ab:59:ac:ea:67:60:c1:d3:39:
a4:47:96:73:58:47:fa:6f:88:74:91:40:33:13:65:d7:71:7c:
fd:ab:1a:21:33:7c:e2:56:5c:44:74:86:35:c5:48:ee:47:b2:
d9:7e:51:83:4b:93:c1:54:a0:ba:31:a7:21:c1:c8:23:6b:2a:
24:05:62:fd:8f:75:99:60:3c:93:d1:11:a6:40:d0:15:60:06:
da:83:9a:b1:73:94:c1:cb:b2:f1:27:b7:ea:eb:03:44:c5:10:
2f:70:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:45 2026 by rpki-client