Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: YI+VNJO6Xg5iJ00Mjlv7qCkADAAQE3lwHSoQ0SqBOZE=
Subject key identifier: 4B:CB:D9:57:4E:B5:0B:09:9D:E4:8A:FE:52:6A:D1:87:5C:49:A5:32
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019D26288770133ADCBEF50E317A708517DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: 0IOhH6GmOaj2lekqiG/YydUfWbh/2nkTLXj0wZ8gD7Q=)
2: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (hash: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:87:70:13:3a:dc:be:f5:0e:31:7a:70:85:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=4bcbd9574eb50b099de48afe526ad1875c49a532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:cd:f4:d7:d8:54:0d:be:99:90:a6:ed:44:
b9:51:f3:22:68:49:4a:d5:2b:bb:34:e3:7a:d7:27:
6f:5c:26:1d:3a:41:7b:0e:8e:b0:0e:c2:b2:3b:08:
b3:b8:26:06:77:e2:59:b7:2d:61:7d:66:7b:cd:f1:
7b:00:c5:d9:11:f0:4e:7a:13:d7:36:96:5b:a1:ac:
3b:3a:63:3c:e8:71:b8:9d:78:ba:5c:be:63:da:3c:
ac:bf:79:f9:7e:e7:7f:3e:f1:5b:83:9a:bd:41:aa:
b5:9c:5f:20:31:fe:54:6f:f3:60:4f:46:a4:6c:d6:
27:08:6c:a4:c8:01:d6:62:89:15:23:1e:7a:b5:03:
70:0c:f6:35:d4:fb:dc:f4:cd:5d:4d:60:1e:e8:b1:
a5:20:0a:bd:3e:16:98:51:ee:2c:97:c1:54:ee:d6:
5b:0e:36:72:4f:7d:1c:a3:22:6e:e1:8a:5a:cc:45:
77:cd:ef:03:04:56:1b:c0:ed:93:99:45:ee:d7:22:
80:50:b1:6e:b1:bf:85:16:0e:39:c8:ba:e5:62:90:
84:61:26:f0:ae:15:10:f6:22:05:75:2e:72:35:94:
53:aa:c6:f5:c1:78:41:d7:03:e2:75:72:79:36:7d:
80:e1:5d:18:c8:e0:a2:53:f5:68:6e:57:4b:aa:15:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:D9:57:4E:B5:0B:09:9D:E4:8A:FE:52:6A:D1:87:5C:49:A5:32
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:09:27:54:1c:5d:7a:a8:d0:07:75:73:8b:7b:2d:33:69:
c7:61:f0:ef:d7:7f:46:9a:09:65:75:5c:aa:da:1f:2a:19:a8:
a0:9a:1e:dc:1e:e1:66:74:84:2d:ae:94:b1:51:a4:4b:4d:23:
d1:a2:06:90:9f:1e:a3:23:db:bb:65:8f:fc:4e:d4:31:6e:8f:
d1:c3:30:50:53:4c:65:34:e2:43:29:f3:29:62:bd:b6:73:5e:
b9:bd:c7:51:bd:bc:08:d4:79:86:0a:33:44:52:d6:4c:0d:50:
b0:60:ef:af:81:f7:61:4b:8d:bb:18:81:4d:34:b6:c9:d0:03:
31:99:a2:18:1d:da:a4:dd:3a:15:55:66:0a:8f:db:8e:2a:d9:
d2:f2:91:a1:10:c0:c6:5f:4c:44:4c:02:ed:c9:2d:c2:a7:62:
4e:dc:69:4b:2d:bb:06:22:02:72:69:54:11:4f:c6:8e:05:95:
ca:eb:27:6e:f7:ae:97:45:a1:24:36:56:6e:18:f7:d3:6f:c8:
6d:6d:26:8a:42:ca:e1:4a:c4:f0:3d:26:1a:1a:c1:a3:28:47:
19:f0:cd:9c:c4:ec:f5:46:b7:8e:c9:9e:6d:ca:5a:ef:cf:d6:
3b:fb:c3:26:21:65:a1:93:7f:09:ea:c7:2a:95:37:67:45:21:
7b:c2:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:54 2026 by rpki-client