Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: lzNhEEojXE1qfmE0lbtUye07bJ3HzgS7ddlbXdQNXZo=
Subject key identifier: A4:52:60:05:B7:CD:5D:16:16:4E:41:A1:1E:F5:D7:82:1F:0E:02:C6
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 019D25F147A6775590397FEB674569EB55AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: 03C3
Signing time: Wed 25 Mar 2026 17:01:02 +0000
Manifest this update: Wed 25 Mar 2026 17:01:02 +0000
Manifest next update: Thu 26 Mar 2026 17:01:02 +0000
Files and hashes: 1: LWo5SwQvtARyJWncO-TRzt7E95c.roa (hash: 9wNniYqROde6rynnX9MuzaL+IyWSUXFFKAJlRzpQMXA=)
2: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: cOwax5gdevhp2midJ16QeN3blBCs3Cw2AYya0c5P680=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:47:a6:77:55:90:39:7f:eb:67:45:69:eb:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Mar 25 17:01:02 2026 GMT
Not After : Mar 26 17:01:02 2026 GMT
Subject: CN=a4526005b7cd5d16164e41a11ef5d7821f0e02c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:2c:85:65:95:9b:d5:40:35:eb:65:91:a7:
40:fd:bb:54:fb:65:f0:33:ff:57:e6:df:b5:c8:8c:
75:de:71:2f:b3:aa:b1:36:27:5d:08:da:15:64:19:
b9:e1:ff:d8:80:64:51:b0:e2:7d:d5:24:2f:0e:c7:
fb:8b:69:35:12:09:47:df:a6:7e:4b:97:2d:89:37:
43:22:ac:1c:54:a8:01:b3:4a:1f:ef:5c:07:8e:bf:
59:bb:4d:ef:0c:30:10:e7:f3:84:f3:1a:04:b0:fa:
4c:8d:c4:7c:d0:e4:6e:d9:71:64:02:d9:da:a8:cd:
1d:c8:5d:bb:17:f5:2d:75:e2:ae:cc:e9:8b:51:f7:
90:83:ce:13:e3:92:af:09:57:95:35:09:e2:18:b8:
b6:b8:73:dc:36:c3:73:b7:ef:90:af:81:9d:8b:94:
84:7d:08:4b:8b:e4:89:3b:c2:a9:20:2e:54:e0:8d:
89:d0:65:a2:d6:b2:b8:b3:0e:5b:87:a4:3f:ad:bf:
97:27:f7:3e:cb:c9:40:af:7b:e0:7e:32:5a:19:7e:
f6:0e:bd:6c:48:9c:34:e3:45:b4:5f:1e:8b:bf:9c:
38:d6:a0:c5:38:f2:b7:a0:3c:9b:ff:41:f0:05:ee:
6f:f5:c3:6d:f8:6e:2c:7b:13:1e:20:71:9f:0b:a8:
25:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:52:60:05:B7:CD:5D:16:16:4E:41:A1:1E:F5:D7:82:1F:0E:02:C6
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0e:be:05:d8:4a:1b:9d:e0:62:57:fd:ce:36:3f:b5:1e:7e:
39:09:58:d8:22:5f:61:7c:24:fd:9d:98:d6:86:e9:18:bb:36:
49:1d:3e:1a:5a:9c:ef:a3:cc:64:01:13:bf:a9:23:71:01:97:
76:ec:89:b9:c3:87:1e:3f:46:17:ed:5e:6b:49:87:bd:d3:57:
84:c4:42:cc:1f:1d:95:03:22:96:7a:0d:2f:90:b1:48:cb:be:
e5:5b:85:41:1e:19:e8:5d:59:27:e5:f8:c2:2b:0a:8c:04:a4:
16:d7:b4:df:6b:ae:e0:e1:96:8a:73:65:b2:6b:fd:dc:34:7b:
35:35:dd:05:82:fc:44:b9:69:48:36:10:67:48:2a:9a:d9:f9:
f8:dd:7b:86:21:44:dd:ee:c8:15:3f:b4:8d:f0:ce:29:f2:65:
0d:bf:8b:73:f6:7f:73:6d:43:57:ef:7e:46:59:fd:b0:02:02:
c1:6c:b9:ed:b8:98:75:33:f4:57:2e:96:65:a2:c4:d5:d5:20:
35:ef:7a:0b:e6:93:82:4f:61:8f:4c:c9:82:db:e6:8a:78:89:
66:69:24:7c:6d:c0:a3:87:c3:bc:09:82:f2:2d:0c:15:6a:b3:
84:7a:c2:fe:62:3b:b0:d9:f7:eb:f1:2e:d1:9c:fb:25:70:8b:
da:a9:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:21 2026 by rpki-client