
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
File: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft (raw, json)
Hash identifier: Z03oOyXLNRq5hnC+5AqaKiF/vGM+SWfw8grPkn9aAW4=
Subject key identifier: 4A:17:C0:10:83:97:66:6B:B9:25:F7:FF:12:BE:92:31:AC:B3:22:E3
Authority key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Certificate issuer: /CN=983750f247069679b83eedfd7bd565ea46789a60
Certificate serial: 019F916CA437590AA987F6ED31167FA11F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:43 +0000
Manifest this update: Fri 24 Jul 2026 00:00:43 +0000
Manifest next update: Sat 25 Jul 2026 00:00:43 +0000
Files and hashes: 1: P9PKZAt5djm7FdGsrSvgtxYkacg.roa (hash: ugWkvKLaNhrHSnXEVwNyBj9pWu4yB48C3daCoDS8DQk=)
2: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl (hash: LaAXldb442ZxGv/mt62qxvEhLvmPvPKcVdLyajpkLG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:a4:37:59:0a:a9:87:f6:ed:31:16:7f:a1:1f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983750f247069679b83eedfd7bd565ea46789a60
Validity
Not Before: Jul 24 00:00:43 2026 GMT
Not After : Jul 25 00:00:43 2026 GMT
Subject: CN=4a17c0108397666bb925f7ff12be9231acb322e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:be:0e:a6:44:f6:b1:88:7d:60:a0:72:37:
0b:ea:f7:c3:ac:00:f6:c5:af:17:86:6b:0b:e9:54:
8e:40:59:90:bf:40:f8:fa:28:eb:12:c9:99:f7:41:
df:ee:a2:cd:5d:fe:ca:27:d2:e7:58:87:a2:02:ce:
7b:b4:bd:39:7d:01:3c:c0:14:65:fc:64:19:f3:58:
e7:75:61:f3:36:67:45:4f:38:65:e4:39:bf:63:98:
3d:85:9b:5f:11:71:2e:8e:8f:86:83:d5:05:b5:0d:
a4:26:39:ab:2f:c9:03:32:fb:f9:18:bb:d8:cc:6d:
a6:e0:a9:b3:b0:a8:a3:d5:8b:8b:be:4f:4e:9c:3f:
f1:23:c4:7f:60:c9:1a:d2:5e:ee:8d:38:8a:e0:56:
e5:d8:bb:dc:84:3a:b1:a0:f9:46:01:de:9a:e2:01:
90:1c:7f:f6:69:ea:a1:42:9e:78:5e:fb:3f:9d:ed:
7b:6e:cd:d7:73:82:19:e8:35:d3:5a:55:a7:ca:52:
f1:6c:ce:78:97:dc:a6:06:2e:bb:97:3c:33:b9:32:
88:24:b1:70:75:1c:0a:00:a0:0a:22:e7:5b:2b:52:
74:64:db:17:64:56:77:d0:d3:f5:4c:1f:b2:62:1e:
d7:c3:e3:91:4c:61:f6:74:9b:87:7b:e2:57:50:13:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:C0:10:83:97:66:6B:B9:25:F7:FF:12:BE:92:31:AC:B3:22:E3
X509v3 Authority Key Identifier:
keyid:98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3c:2a:51:97:de:50:0d:0a:1f:a1:10:03:ee:dd:be:9b:86:
34:cd:6f:47:65:74:b2:3a:cc:94:ab:a7:10:53:93:9f:2a:08:
74:b5:c8:4b:38:3b:ff:cf:ff:7c:71:31:1f:b0:87:2d:c4:92:
7e:5b:bf:fd:1f:45:8d:5c:e5:b1:c7:10:01:17:5b:d6:17:71:
63:52:83:8a:f1:13:2a:45:e5:ab:87:14:83:02:b7:91:ea:42:
df:a4:93:63:25:d3:a4:4e:6e:fc:10:24:cf:e9:19:f2:b6:67:
09:7e:bc:6c:14:d8:55:95:18:de:39:ea:4f:70:f6:86:6b:de:
5a:f0:c5:fc:89:25:dd:b4:93:9e:33:1b:b0:56:c3:5c:f9:d7:
2e:1f:ff:c9:72:49:90:9e:55:07:53:e5:5d:f8:27:b8:40:79:
a9:a5:82:cb:54:6a:83:0d:c0:50:8c:d7:b8:cf:62:3f:f2:db:
ef:21:bc:c4:75:f9:cb:17:04:2c:74:14:71:63:14:37:60:17:
19:95:68:63:97:55:34:52:72:19:98:90:72:04:d0:32:b0:48:
76:83:c2:e4:e3:ce:33:0a:b4:b2:03:0a:f6:44:7c:61:91:72:
73:64:dc:7b:37:83:f6:81:49:b0:2f:12:77:4a:31:5f:da:f0:
95:c7:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:44 2026 by rpki-client