Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: I/b+HtDnz57z0X6Q8S1B7aXbwQdyj1ahKhGwhWFDipI=
Subject key identifier: 61:15:F5:FD:4F:CD:CF:04:C7:F2:2B:33:68:48:51:5F:5A:15:C2:B9
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019E1D2272E9BA96BB6FC6BB455A1A2A6B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 17:00:57 +0000
Manifest this update: Tue 12 May 2026 17:00:57 +0000
Manifest next update: Wed 13 May 2026 17:00:57 +0000
Files and hashes: 1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: g+J+qbmaURD1UJfPaTAgHltH9jPGy4vBZajTHwqkvrM=)
2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:72:e9:ba:96:bb:6f:c6:bb:45:5a:1a:2a:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: May 12 17:00:57 2026 GMT
Not After : May 13 17:00:57 2026 GMT
Subject: CN=6115f5fd4fcdcf04c7f22b336848515f5a15c2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:cb:1d:b6:5c:a4:93:57:23:56:75:44:63:
00:54:01:0b:61:aa:df:e9:16:d0:2d:95:02:7c:e7:
cb:8e:37:f8:8f:ab:9f:7c:77:e5:89:ea:de:6a:d1:
da:30:ed:f4:b3:7f:06:ab:e4:e5:af:8c:e0:9b:6f:
90:08:49:94:c7:5f:a5:87:82:ca:40:94:d8:9b:53:
df:da:89:ee:0c:0e:40:2b:dd:c8:9d:21:70:f1:e4:
57:0d:e0:2c:b7:01:12:53:7d:83:4e:56:47:43:af:
a3:8c:6c:5c:10:74:df:36:9a:70:c9:20:f5:92:76:
24:5e:e8:32:31:d9:34:58:25:99:16:ca:70:3e:5d:
77:ec:a3:32:47:9e:c3:b9:54:c6:2b:ce:f3:81:a4:
40:c2:c0:f5:5d:27:30:d9:a7:64:8c:66:83:4d:15:
88:cd:41:17:cd:7e:22:1d:2b:c4:61:20:c6:05:9a:
f4:5a:78:4d:30:d9:54:9f:a5:ce:09:bd:f7:ca:7a:
a7:ce:be:a3:4f:b2:aa:53:df:f3:bd:50:6d:a6:b6:
00:50:00:73:a9:8d:a5:df:1c:63:61:d6:cd:c6:40:
f5:d9:3a:b2:cc:76:b3:35:c7:ee:c2:01:0a:1f:97:
7d:dd:7d:f3:34:9f:fc:a4:93:dd:17:1b:f0:b2:64:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:F5:FD:4F:CD:CF:04:C7:F2:2B:33:68:48:51:5F:5A:15:C2:B9
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:71:a7:8f:59:b3:49:2e:5d:a9:60:14:de:ae:66:31:9a:c1:
b0:ef:9b:07:cd:14:20:44:7f:b0:9d:eb:48:ab:36:49:7f:f7:
c2:96:4c:bd:f4:cc:3c:69:89:70:0f:d0:dd:ae:d7:d9:ed:f1:
22:d2:49:65:0a:21:70:a3:16:c2:48:85:f2:ea:21:fc:e5:51:
1d:ae:7b:59:f7:56:dc:f7:de:89:43:e2:74:a9:a3:85:a3:e9:
99:f4:c7:36:b6:36:0d:3b:9a:57:4d:48:1d:d7:45:24:bd:00:
e6:c4:08:db:7e:42:82:eb:3e:48:b2:f3:bd:15:5a:36:60:fc:
7c:d5:23:a7:06:42:b9:4d:6f:f1:27:56:84:36:29:51:46:c1:
57:f7:8c:df:0e:ba:67:17:6a:e9:df:44:0c:63:83:81:8d:2f:
c3:4d:a3:a1:df:7a:b1:a9:18:3f:7a:41:cf:50:b0:82:81:e6:
65:45:12:c9:eb:c0:59:9b:ec:f3:ab:fb:f8:22:0f:48:7c:37:
17:07:30:cb:c6:ba:b9:3d:ce:23:6e:2a:ce:1c:72:60:72:71:
72:da:4b:6f:c4:16:ed:ad:96:8d:eb:53:46:57:05:07:8f:64:
06:4e:2e:0a:f2:b9:31:d5:90:4f:b8:8c:5f:14:7b:57:84:c3:
44:3b:0d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dInLpupa7b8a7RVoaKmtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj
ODZkNGUwHhcNMjYwNTEyMTcwMDU3WhcNMjYwNTEzMTcwMDU3WjAzMTEwLwYDVQQD
Eyg2MTE1ZjVmZDRmY2RjZjA0YzdmMjJiMzM2ODQ4NTE1ZjVhMTVjMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncPLHbZcpJNXI1Z1RGMAVAELYarf
6RbQLZUCfOfLjjf4j6uffHfliereatHaMO30s38Gq+Tlr4zgm2+QCEmUx1+lh4LK
QJTYm1Pf2onuDA5AK93InSFw8eRXDeAstwESU32DTlZHQ6+jjGxcEHTfNppwySD1
knYkXugyMdk0WCWZFspwPl137KMyR57DuVTGK87zgaRAwsD1XScw2adkjGaDTRWI
zUEXzX4iHSvEYSDGBZr0WnhNMNlUn6XOCb33ynqnzr6jT7KqU9/zvVBtprYAUABz
qY2l3xxjYdbNxkD12TqyzHazNcfuwgEKH5d93X3zNJ/8pJPdFxvwsmRHSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEV9f1Pzc8Ex/IrM2hIUV9aFcK5MB8GA1UdIwQY
MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt
YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0
LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXGnj1mz
SS5dqWAU3q5mMZrBsO+bB80UIER/sJ3rSKs2SX/3wpZMvfTMPGmJcA/Q3a7X2e3x
ItJJZQohcKMWwkiF8uoh/OVRHa57WfdW3PfeiUPidKmjhaPpmfTHNrY2DTuaV01I
HddFJL0A5sQI235Cgus+SLLzvRVaNmD8fNUjpwZCuU1v8SdWhDYpUUbBV/eM3w66
Zxdq6d9EDGODgY0vw02jod96sakYP3pBz1CwgoHmZUUSyevAWZvs86v7+CIPSHw3
Fwcwy8a6uT3OI24qzhxyYHJxctpLb8QW7a2WjetTRlcFB49kBk4uCvK5MdWQT7iM
XxR7V4TDRDsNeQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:38 2026 by rpki-client