Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
File: ddl3qipMEMe0evKt2WgESH4idKk.mft (raw, json)
Hash identifier: ZkTVDSsjXoSd9wb6S+3Bpk3Ot3OCEMOmLXbDLALtbo0=
Subject key identifier: 67:4F:E8:D5:73:C5:FB:DF:92:10:9E:E8:F6:BA:52:01:91:B0:7E:B9
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 01A0CD7EA4723CD26C413ED35DFF62F798D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
Manifest number: 1A75
Signing time: Wed 23 Sep 2026 09:00:23 +0000
Manifest this update: Wed 23 Sep 2026 09:00:23 +0000
Manifest next update: Thu 24 Sep 2026 09:00:23 +0000
Files and hashes: 1: 4m7QSckp2ci_fSXpKAEm28535y4.roa (hash: 4475h5maUOx4jCwnFFSO/+38leG2b35wFaPNErJ0ZnE=)
2: V22iJ2-oA6jD1qqMjUeVqFMY1Vw.asa (hash: lFlAhM06Q6fq6BEoaskenJStzfDlyp6oy1M91InEqDM=)
3: ddl3qipMEMe0evKt2WgESH4idKk.crl (hash: 1DpVL85XK3vfPJjlkrx5KRiu84G/XaIhb1+abIKxnTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:a4:72:3c:d2:6c:41:3e:d3:5d:ff:62:f7:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Sep 23 09:00:23 2026 GMT
Not After : Sep 24 09:00:23 2026 GMT
Subject: CN=674fe8d573c5fbdf92109ee8f6ba520191b07eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:ee:4f:9c:38:95:b7:9e:b8:c0:d0:6f:c5:
44:10:80:ae:24:72:73:8c:31:3f:1a:5e:ae:a5:9d:
5e:dd:cd:bc:be:61:d1:6a:3d:e9:85:87:84:4c:f2:
e4:00:b1:e0:28:79:7e:39:7e:ea:4a:68:87:47:01:
d2:a1:a1:bd:2c:e3:cf:83:66:2c:ce:eb:7f:96:c6:
e9:14:c1:8d:6d:4f:1e:01:8a:99:2c:40:7d:e9:02:
c9:86:95:69:b5:cb:3f:a4:ba:b7:77:c6:4f:be:cf:
81:80:9c:27:b2:c8:0c:78:29:7e:41:aa:3c:76:ff:
c1:f1:63:eb:26:d1:9b:f5:ef:3c:d1:9b:c5:6c:b2:
09:15:8d:c5:37:ac:2f:7d:74:84:63:2b:06:6d:56:
6c:6b:fb:ce:ef:57:28:de:2a:4c:29:70:83:6e:45:
b0:9c:14:20:60:df:16:50:1e:fb:85:cf:95:bb:01:
0d:08:42:96:b1:4b:86:ee:a3:ca:5a:34:92:92:5a:
be:16:e4:6e:16:92:7e:66:93:55:a6:2d:3b:30:02:
52:98:5f:c0:e5:01:f9:ee:b2:aa:95:4e:6d:60:48:
88:0e:36:11:bb:7d:23:43:c1:d8:9b:1c:21:09:d9:
f7:22:46:9e:69:95:32:0a:a6:c5:2a:49:e1:7e:e2:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:E8:D5:73:C5:FB:DF:92:10:9E:E8:F6:BA:52:01:91:B0:7E:B9
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d6:1d:77:e4:ed:79:db:49:b5:48:67:78:d7:07:0a:72:05:
18:58:1e:42:5c:61:d3:10:76:31:87:83:89:8d:52:93:1b:1c:
ce:a9:c5:12:46:91:7e:31:ca:e5:1d:41:0f:d0:58:40:12:a3:
a6:89:d7:78:a2:38:a2:0a:64:7f:3a:6e:31:2e:90:97:1c:69:
11:53:0e:94:41:7e:ee:e1:66:4f:6c:8e:dc:71:05:9c:84:f7:
4d:10:90:e0:f9:45:12:b2:a8:2a:a8:17:78:37:1d:cd:c1:21:
10:a9:64:6f:e1:48:31:c8:14:9f:dd:ea:70:37:06:e8:91:11:
cb:54:f9:fc:34:d8:29:a8:72:0f:34:39:16:a7:c0:50:22:07:
bc:07:7e:60:8b:64:75:7b:67:53:b9:aa:96:06:e9:9a:8a:3f:
10:82:ca:e4:1b:27:96:f2:8a:d2:39:54:ec:d1:0e:41:1b:4d:
6a:72:da:73:79:34:51:1e:aa:c4:4c:6b:b8:c1:36:88:11:8f:
28:57:1f:66:fe:1a:1f:0f:5f:4b:8f:4d:08:a4:8f:b0:70:32:
dd:b2:06:b1:e8:cc:b8:52:33:f8:1c:a2:4f:b4:23:c0:ba:15:
3d:87:a1:13:b3:dd:f3:59:18:a7:2d:17:d4:68:ee:e1:51:6a:
29:ef:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:02 2026 by rpki-client