Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: rQEgXyJwz/KD7CCgluak/KOn69fsJPUsCrplAOHEwvU=
Subject key identifier: D1:B8:C9:39:E9:D0:2F:FF:80:F4:D8:FB:A7:39:9D:9F:C3:99:35:94
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 019E21A3EC039F2203DC769CCF8119F6357F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 1875
Signing time: Wed 13 May 2026 14:00:51 +0000
Manifest this update: Wed 13 May 2026 14:00:51 +0000
Manifest next update: Thu 14 May 2026 14:00:51 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: inwszlYdrXO2mOcMUp7ZwBvaGRmd9pKXVyHNro9+X/c=)
2: vlU7MThRMcM5l45F8U78i6lhKzc.roa (hash: ImIAss3fsNynMybP2S9MkVXm/vknMWnZDrA4b7/hzEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a3:ec:03:9f:22:03:dc:76:9c:cf:81:19:f6:35:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: May 13 14:00:51 2026 GMT
Not After : May 14 14:00:51 2026 GMT
Subject: CN=d1b8c939e9d02fff80f4d8fba7399d9fc3993594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:61:56:bd:be:85:53:1c:d9:0f:f5:5c:53:
c3:42:65:d8:79:f5:21:86:3c:0e:8c:a5:95:ed:2c:
2c:fd:68:5a:25:74:34:93:f2:3e:a5:74:fd:bd:a4:
c1:a9:67:83:c0:ce:44:98:23:e6:5d:b3:37:7f:c5:
ff:8c:73:ec:7f:7b:99:42:90:35:55:5f:68:d1:e9:
3c:6a:82:15:e9:2b:55:0d:1d:1a:b4:cf:0a:61:5e:
ea:22:77:1a:3d:c7:2e:b1:95:67:15:58:61:60:8d:
cb:4e:aa:b5:3a:ef:57:21:04:0d:ce:a4:0d:d6:65:
5a:8c:12:18:0d:a7:72:f6:3e:21:a9:54:90:25:1b:
e9:c2:34:cf:a4:ce:31:3d:65:76:50:32:01:c2:18:
b9:cc:eb:a7:4b:41:42:11:b7:5f:b5:3c:d3:f6:65:
c1:17:8e:af:78:34:9e:6b:db:70:4e:64:a8:11:66:
02:c9:b8:c1:e6:29:1e:b4:de:58:e4:b7:b2:6a:56:
6f:ad:f5:07:95:a6:3f:83:f6:83:a2:19:ba:7d:97:
6a:2f:aa:e2:3a:da:27:87:0c:2c:c7:c1:c8:09:10:
3e:1b:23:b1:99:e5:b8:53:b8:66:c7:5d:85:4b:d2:
a1:02:3d:37:1e:89:9e:06:6a:24:19:86:1c:cc:25:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:C9:39:E9:D0:2F:FF:80:F4:D8:FB:A7:39:9D:9F:C3:99:35:94
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1c:c8:fb:e4:76:fb:b0:02:4b:73:1f:31:ad:53:e7:6d:c0:
22:9d:7f:d5:52:84:18:6e:e5:75:0b:ef:35:d5:e3:84:16:63:
ba:8b:d2:84:0a:ad:4c:de:5b:f7:9d:bc:e8:a9:d8:20:6d:f1:
ed:79:62:18:d7:0d:2a:6f:58:b3:27:5a:df:b4:5a:39:e9:e7:
19:09:2d:51:de:48:d9:52:de:b2:6d:0e:bf:11:6d:e0:7a:26:
ef:d1:ee:3e:79:62:b3:a0:39:02:31:ce:91:9d:fd:5f:5d:e5:
da:11:26:50:d4:9a:cc:6e:18:b9:b2:73:88:83:7d:f0:ed:32:
17:d7:6f:45:3e:b7:ea:d6:cc:58:9d:68:cc:62:3d:51:d2:b7:
e1:ae:f0:c1:38:95:cc:f3:e1:2a:bb:b5:d8:23:a9:9b:0b:47:
70:e6:a0:86:16:b0:68:db:31:71:76:0c:3a:40:54:78:54:58:
dc:17:1c:73:a4:47:07:ad:15:24:4a:ad:86:87:1c:fd:fa:c7:
7c:a5:56:23:cb:1e:75:40:8a:56:5f:ec:25:0b:64:25:5a:9c:
01:89:60:99:1a:0f:7f:cd:e5:2e:b0:65:cf:5f:48:71:7c:51:
07:d7:91:3c:f5:cf:e0:d0:f9:25:4d:30:5c:c0:6b:c0:a4:67:
56:6a:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:00:55 2026 by rpki-client