Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: syHcjVgIqh5/JECtk69YZuSlfzZ9fR2c0wOdCEVuAVo=
Subject key identifier: 07:76:C7:CA:D5:C6:5C:B7:3C:A8:D9:C9:B7:08:C0:22:32:E8:4A:D8
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019E1DFE527DE7CBBA8EA91571F1670A3423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 102F
Signing time: Tue 12 May 2026 21:01:06 +0000
Manifest this update: Tue 12 May 2026 21:01:06 +0000
Manifest next update: Wed 13 May 2026 21:01:06 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: wNJagXVicB10Wgo0gAg8zjEWgi+rIMZE/5tMzHeB8h8=)
2: oRIsfmte-X2jgFEWjQtLvblexNM.roa (hash: MABvxM4XCQeB057f0MMoN4gprPL+JKjwKeyBUI1E5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:52:7d:e7:cb:ba:8e:a9:15:71:f1:67:0a:34:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: May 12 21:01:06 2026 GMT
Not After : May 13 21:01:06 2026 GMT
Subject: CN=0776c7cad5c65cb73ca8d9c9b708c02232e84ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:20:67:8e:2f:f7:00:22:f2:01:a8:26:0c:
60:54:1e:ca:d7:90:b1:74:76:73:7b:f5:2e:82:2b:
a3:d5:ae:f2:fe:8d:27:cf:41:c3:b9:c6:a0:40:c0:
34:75:a6:c2:8d:2f:33:f9:94:99:f4:01:ba:3c:ec:
73:f0:59:63:f6:2f:e9:07:3f:97:2e:3a:95:aa:00:
fb:e4:3f:84:19:25:6f:da:72:0f:52:72:68:d0:61:
0d:7a:f8:38:b2:79:d1:67:79:50:de:8d:19:cb:de:
72:f8:7b:f8:23:dd:a7:87:3d:c9:56:a7:f9:c1:b8:
0f:0e:90:fe:ca:ec:ba:30:73:0a:fb:43:4c:8a:d6:
f3:27:58:57:d3:d0:2d:01:1d:9d:d5:70:36:d8:1a:
62:24:12:cb:5d:a4:25:54:73:59:45:9f:45:c2:fa:
a7:86:ae:9e:00:24:88:d2:ab:4a:58:16:ff:6c:ab:
f2:7e:28:75:61:b9:1d:b6:2a:0f:f8:3e:7e:89:3f:
1d:e7:fa:ba:03:5b:57:73:c4:a2:33:ec:27:52:38:
00:3a:03:e3:99:9b:f5:e0:ab:92:7f:aa:a4:4e:1d:
03:5f:08:79:ad:d6:e9:7d:3a:15:05:72:8d:97:54:
45:8a:b5:65:44:34:1c:8e:7e:b9:dc:35:96:44:3d:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:C7:CA:D5:C6:5C:B7:3C:A8:D9:C9:B7:08:C0:22:32:E8:4A:D8
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:00:a8:fd:ad:95:af:1f:1c:f9:b6:e7:84:eb:05:c2:c8:bb:
c5:ab:cf:f4:08:63:e6:96:16:f9:1c:43:07:a1:2a:b9:9d:ba:
cb:d7:0c:a3:3e:c1:a8:d6:50:df:ed:c5:52:c6:36:83:7b:e3:
c2:1d:fe:ee:db:2b:ca:74:83:33:1e:8c:73:db:5d:ed:af:e1:
0c:8a:66:4e:e8:52:7f:2c:62:f4:0b:e2:89:8c:75:bc:cc:5b:
40:df:be:81:98:41:0a:70:90:2e:ce:c4:c9:07:94:b4:21:1d:
2b:dc:28:37:cb:09:4e:f9:60:65:25:2b:32:7b:b3:a4:80:7c:
e2:5f:dd:82:63:42:11:1d:e9:ad:59:31:ae:f5:4b:7d:9e:02:
b6:14:dc:ec:d1:dd:e3:8b:3a:7a:70:df:a5:d1:cf:05:19:87:
77:24:8d:70:a3:77:5f:9a:1c:9f:f5:54:bc:b3:16:de:fe:80:
f9:39:2a:82:25:45:c6:e2:2c:92:05:ec:67:e4:19:fb:c1:2b:
32:01:ab:89:b1:ad:53:21:0f:e6:40:48:f3:77:47:e7:c8:9b:
c7:9a:e7:20:d0:ea:a9:50:10:1b:e3:9e:1f:c7:eb:93:41:d0:
92:24:11:5c:fb:56:a1:0e:fd:b5:d8:53:68:3b:14:0b:bc:ea:
e2:33:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:58 2026 by rpki-client