Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
File: ddoOY-skfZoLE7TLNt1nJJkgu8o.mft (raw, json)
Hash identifier: kgh9hosp/vD9edmIzEpKY7DV2E8pbRKrEohXVI+AQDM=
Subject key identifier: EB:D3:58:34:0D:BE:85:AD:85:29:E1:E8:5D:64:75:6B:5D:92:AC:9A
Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Certificate serial: 019D25BAD074C4C1D089D6FD98AA57A4F0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: 7FjxNVLmNTsgp9nb0ppt16rSW84.roa (hash: AfsskACtTFQG8noHnyBaCKgJpWmzNL8/P7OkiLoJhQ4=)
2: ddoOY-skfZoLE7TLNt1nJJkgu8o.crl (hash: u9OWhRV3cVbwOFghH3MosNdD5tpc42VFAa33ZCtwyWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d0:74:c4:c1:d0:89:d6:fd:98:aa:57:a4:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=ebd358340dbe85ad8529e1e85d64756b5d92ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:62:88:7f:8d:f1:5b:ea:71:69:53:f5:72:
f2:a7:56:21:9e:3c:8e:81:43:a1:c6:33:5c:4f:94:
64:da:c1:bb:15:cd:a3:25:4d:1c:da:75:a7:91:a4:
0b:92:4d:1e:2e:42:c6:4b:d5:9c:20:57:ee:a3:ea:
0b:f5:88:1c:61:71:3f:a8:08:f1:75:37:69:ca:b6:
d5:96:29:be:5e:4c:70:c6:30:77:42:d4:d5:06:7c:
7c:cf:7c:3e:97:1b:60:6d:79:b9:36:4e:61:73:0e:
ce:78:a3:e0:4f:36:4c:96:75:63:84:a3:d4:3c:32:
85:90:9f:45:c9:67:6a:47:31:ec:26:47:3c:a3:c4:
58:cf:30:1c:b5:6a:18:76:5c:ad:4b:37:34:a8:8a:
63:2c:cb:6f:4b:33:81:92:ba:37:0c:3f:cd:09:84:
ed:6c:65:d0:11:f2:90:aa:03:c9:02:84:f9:9a:ed:
6c:a0:3f:a8:5b:7b:6d:46:69:41:af:a3:31:22:73:
f5:f0:02:ab:da:ab:bb:b9:e3:be:0b:b5:89:fb:47:
b1:97:0e:b0:87:15:b2:cf:22:93:59:1e:ec:d4:49:
13:b6:64:74:dd:36:8b:95:4f:9c:4b:42:ba:28:c7:
ab:91:cc:b0:83:af:bc:11:45:bb:bb:d2:9f:d9:4f:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:58:34:0D:BE:85:AD:85:29:E1:E8:5D:64:75:6B:5D:92:AC:9A
X509v3 Authority Key Identifier:
keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:f4:55:45:35:ee:f0:f3:b0:90:91:bf:3c:95:6b:95:d6:3e:
57:4e:53:6a:54:49:9b:ff:6b:99:7b:9f:6c:e4:de:bf:88:fd:
05:88:b0:0a:01:91:20:5f:48:68:a0:d5:0a:d0:06:8d:3a:67:
48:7a:a9:16:3d:47:99:22:4a:bf:63:42:ed:5f:d9:76:c1:8c:
9b:a2:aa:42:59:fc:82:40:dc:2c:ce:8a:07:ee:88:75:fa:7e:
70:3b:60:24:1d:cc:fc:eb:5a:d6:1c:c4:37:3c:75:d2:fa:82:
4b:60:2b:e3:4c:ef:c8:17:14:ba:78:12:c9:8d:ee:bb:bf:6d:
1e:53:a9:ca:23:ec:54:bd:2a:de:18:0e:90:41:fc:2b:4c:43:
15:b7:90:d9:0b:08:51:9a:90:d3:8b:5e:d6:b6:27:17:28:34:
09:02:ab:f2:9a:92:e8:31:20:a0:bb:c6:7d:37:be:9b:1a:07:
e6:69:9d:77:45:e2:db:58:1c:49:c7:20:6b:35:86:fa:ea:e1:
69:e0:fb:8a:41:1e:9c:7b:a3:63:a3:af:71:05:1c:fd:ed:00:
33:98:7c:23:fa:bd:c3:79:57:f4:5b:47:13:dc:8f:f2:f0:34:
d9:82:64:f6:96:7d:85:89:36:95:82:f9:78:ca:6a:f1:d2:93:
5a:df:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:42 2026 by rpki-client