Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: y/+5NsD5y3lpYyHX2FtHFT/6zLhSywD3JQ+KQyMme88=
Subject key identifier: 88:26:DC:B4:10:2C:11:E4:14:E5:85:8E:62:EE:87:EB:AA:89:28:FA
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 01A0FCEB16DFBCE4D0DDF98D762544BB3CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 1987
Signing time: Fri 02 Oct 2026 14:01:00 +0000
Manifest this update: Fri 02 Oct 2026 14:01:00 +0000
Manifest next update: Sat 03 Oct 2026 14:01:00 +0000
Files and hashes: 1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: 3eBpmJKhFxfwG35bM/5p0bbD0UJHiF+/gnIcrPY52d0=)
2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:eb:16:df:bc:e4:d0:dd:f9:8d:76:25:44:bb:3c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Oct 2 14:01:00 2026 GMT
Not After : Oct 3 14:01:00 2026 GMT
Subject: CN=8826dcb4102c11e414e5858e62ee87ebaa8928fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:b3:4e:05:27:b3:32:6a:ad:db:54:48:27:
b5:ef:27:1a:5a:8c:c0:bc:25:7e:99:1a:ca:91:32:
ad:d2:2c:ab:da:a6:fe:19:54:e7:51:02:28:c8:3a:
5d:e3:62:18:87:d9:b1:29:a8:2b:27:e8:77:7c:09:
00:18:ff:fd:5b:8a:83:dd:42:7b:cf:06:35:c1:8a:
1d:17:30:1a:69:f7:f4:2e:d8:e4:77:79:8c:f4:6d:
37:9c:5a:5e:b6:ad:4c:26:b2:26:c8:6e:a3:70:05:
e5:d0:a1:5f:3f:aa:1f:63:38:a4:aa:c7:69:25:a9:
1b:e8:91:29:e0:ea:0e:dd:aa:4d:62:e8:51:94:44:
f4:fe:15:d1:c5:1b:47:ad:7b:59:fd:df:0e:a3:e8:
5e:f2:30:52:cc:e7:90:79:ea:6d:7b:4a:c1:20:fd:
8a:2b:ae:16:be:65:25:2d:df:41:24:37:58:f6:af:
0f:ac:98:f5:2a:44:d8:22:46:49:b7:9f:a1:ee:e4:
07:fd:95:9d:80:1f:26:e3:a7:05:17:91:d8:cc:27:
31:93:a2:ad:9b:ba:46:d8:d5:44:ca:2f:0c:9a:a9:
8c:4f:dc:35:c0:66:36:a9:85:49:32:8a:57:6d:87:
74:05:16:9d:39:ed:21:b2:76:2f:1f:8c:60:f2:e4:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:26:DC:B4:10:2C:11:E4:14:E5:85:8E:62:EE:87:EB:AA:89:28:FA
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:ea:ec:fc:02:cd:04:0a:ea:a3:d0:78:42:ce:00:8b:08:
d3:90:e6:a7:7b:6c:9c:4a:5a:09:13:b2:81:cb:c4:e5:58:c7:
d0:bc:7d:01:d6:c2:b6:2b:91:f7:a5:b7:c1:85:b4:89:6f:bb:
a1:4e:e6:77:72:22:5f:20:f1:3a:0f:de:5e:b3:59:df:8a:df:
c8:10:9f:47:d6:04:b1:e6:20:19:ca:08:6c:4b:0e:07:8d:c6:
ab:1b:64:99:b9:da:ca:e2:37:df:b0:69:42:c5:99:a9:05:5f:
56:44:d6:07:9c:d4:53:8d:80:74:05:ff:97:b6:89:7d:4d:36:
b8:02:5c:63:1d:2d:17:5f:b5:5d:33:be:5f:db:ad:7c:c1:92:
30:6a:a1:8b:29:58:3b:c1:b0:59:8e:72:7a:d3:a3:7c:e9:32:
f9:4a:64:9b:d5:5e:ed:a3:cf:10:f4:75:92:c0:0f:ac:37:c4:
f8:e5:07:65:eb:7f:c7:4c:62:1d:95:d3:8e:ce:5b:df:38:e7:
6c:f3:f5:e7:36:a6:3f:5f:b3:74:d7:1a:2d:e5:95:4d:c3:ac:
89:46:1a:df:42:ff:c2:8a:da:55:81:0d:e9:0a:cf:2b:c5:b1:
e4:a4:18:d3:35:ca:04:d0:ae:0f:44:da:7c:75:c4:f4:58:b0:
51:8f:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:29:45 2026 by rpki-client