Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: F7XANPR8ExMQDS6t742SFtQTchTAvxfzvO6lq+AjU5s=
Subject key identifier: 8B:37:57:F7:E6:43:17:13:AF:9D:DB:2A:7A:32:AF:07:01:04:3E:76
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 019D2695DAD6B6906EF789AE0D3D1C980783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 17F3
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: /7L2DsOuXwWJiu9e1uh8h9DYj33WH8rk6anHTBm14Tc=)
2: vlU7MThRMcM5l45F8U78i6lhKzc.roa (hash: ImIAss3fsNynMybP2S9MkVXm/vknMWnZDrA4b7/hzEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:da:d6:b6:90:6e:f7:89:ae:0d:3d:1c:98:07:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=8b3757f7e6431713af9ddb2a7a32af0701043e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:c4:ce:5c:10:ee:e8:06:b6:5c:9b:0c:d7:
93:77:da:f9:bc:e2:b9:8d:11:b1:6b:82:d8:0c:d9:
c8:69:f8:a4:52:d1:cf:1a:3e:a4:87:ed:35:72:9f:
a0:67:8d:15:03:16:c5:03:18:51:81:fc:ca:1f:d3:
6b:82:2d:1c:b9:e3:5d:4a:bb:f9:45:31:ab:dd:53:
c3:5f:88:07:b2:c3:e9:9c:83:f8:73:23:26:00:b5:
c3:90:76:8e:d4:ce:fa:09:59:ce:18:a2:ee:3d:a6:
a4:7e:d0:e9:b7:c4:26:3b:c0:57:c4:1d:e3:ba:b3:
66:bf:38:f4:61:70:bd:75:eb:f4:fb:2d:ae:fa:af:
98:25:fd:c1:11:f0:57:b8:4a:50:e4:27:54:15:35:
5c:cf:26:3c:ab:52:ba:73:32:a5:b4:3e:35:75:98:
3c:37:e1:f7:43:c0:a1:8c:4c:d1:3c:bb:c4:78:19:
2b:ab:52:88:80:5f:b7:2a:00:c3:ac:df:b7:eb:b7:
f1:b1:58:b5:27:31:a7:11:93:11:f5:66:66:09:fd:
e1:33:8c:43:0e:e5:42:06:a0:2d:44:82:40:c6:1a:
6a:b3:ba:1c:c8:04:b4:db:8d:17:9e:ff:45:f3:e3:
97:61:b6:8c:e7:dc:51:83:91:76:e1:a5:ef:4b:6e:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:37:57:F7:E6:43:17:13:AF:9D:DB:2A:7A:32:AF:07:01:04:3E:76
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:14:54:a4:03:b4:ba:d9:59:6b:47:00:92:ad:c4:f6:73:ed:
aa:b5:43:e9:ee:b7:77:31:cf:d2:40:8d:c1:ed:5c:1a:a7:58:
1b:72:2e:1c:eb:31:9b:82:79:3d:ca:3f:5e:8e:b1:a9:ef:08:
58:77:d1:00:cc:82:8d:9f:fe:21:77:88:52:27:96:3f:22:d0:
b2:1d:25:65:a9:f4:e2:8e:08:02:c6:42:76:c7:b9:42:12:b0:
d2:ab:e9:92:4a:4c:9b:fa:c6:aa:9a:91:03:82:78:0f:ab:87:
2a:50:b8:1e:c3:b1:07:d9:8d:bc:9e:9c:f4:12:b1:5d:3e:54:
b8:07:84:ae:99:f7:b6:46:32:7b:22:5b:09:b0:29:81:ad:9b:
7f:e4:79:7f:5a:47:b2:7d:6d:ec:70:6c:76:04:b5:ad:5e:50:
f9:24:81:3e:72:10:b1:99:5a:63:c9:9b:1e:5e:23:3c:44:44:
01:22:9d:61:38:b5:57:99:dc:3c:da:e4:e9:72:2e:84:cf:fc:
5e:86:d0:c7:d1:8b:55:f2:a1:04:50:0d:20:3b:6a:b6:db:d0:
c1:e2:70:89:9f:c9:62:d6:c6:e3:94:d7:fd:34:2e:e4:64:30:
d1:a3:3b:91:b3:31:0a:b9:c9:a1:66:0e:be:90:1f:8a:ea:ea:
c8:27:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:36 2026 by rpki-client