Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: Yyag3Bc5DIf3FG5b/u6bvqdM4uMlNKTc5K3PkRT+cHE=
Subject key identifier: 55:BB:DF:6F:D6:C2:55:C4:4E:62:00:EC:CB:FB:CE:F6:D2:6F:1B:75
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 019D27DFA9AB7AE33F8C8131137B6909C315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 133F
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa (hash: fdkV0rGstUR1Pzncs3bfmTmh9JkFZ1wdI7Ez0Xn02hM=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: 4270XZN7HWFlrqXv0bVzBGeixPqpCkRbYWm1hBV98JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a9:ab:7a:e3:3f:8c:81:31:13:7b:69:09:c3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=55bbdf6fd6c255c44e6200eccbfbcef6d26f1b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:60:1b:e4:ba:fd:2b:a0:39:04:1e:7a:39:
81:04:75:e0:76:d5:b1:ff:90:12:44:60:7f:97:a2:
4e:fd:f5:52:c2:6a:17:b6:23:5f:25:52:d0:af:fe:
8c:f4:6c:87:b5:e4:1c:e4:47:32:01:7e:6c:56:cb:
37:69:8c:93:54:a8:fe:13:29:c0:dc:c7:b1:2f:07:
4c:35:7d:fd:92:d8:af:46:04:e3:31:86:a3:0a:cb:
3a:f3:f5:17:ee:e0:b6:b0:7e:e6:6f:43:cd:93:1d:
ca:0e:86:2e:97:f6:08:86:f8:1f:46:5d:20:f5:26:
00:a0:4e:f3:d2:0e:ee:ab:2e:88:00:ea:39:98:d1:
27:2f:05:04:09:3e:f2:55:d0:a9:c9:e7:4a:b5:a8:
2b:a8:2f:30:a9:33:5d:3f:11:0f:d4:aa:95:00:d7:
bc:03:f4:a3:80:77:69:62:b9:45:8f:24:af:ab:dd:
6b:0b:19:b1:b3:cf:26:48:ac:17:1e:12:d9:63:70:
49:8d:2e:d1:e6:a5:77:68:d7:2c:09:55:02:37:ca:
85:11:52:77:bc:29:fa:66:a2:90:03:3c:c4:6a:f6:
4a:f3:aa:74:9b:51:a8:f5:a7:e3:26:40:88:0d:a9:
3e:3f:66:50:7e:50:2a:74:03:32:70:63:8e:40:c0:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:DF:6F:D6:C2:55:C4:4E:62:00:EC:CB:FB:CE:F6:D2:6F:1B:75
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:93:f7:46:7f:a9:e7:b1:b4:13:67:ee:28:61:f0:48:00:a2:
82:7e:c9:f7:b1:32:8e:ad:e0:b6:50:a6:a5:36:ae:68:a6:3e:
0b:c3:b1:34:c2:64:dc:df:1b:d0:9f:63:f9:dd:8c:17:35:29:
87:20:83:c9:dc:28:16:84:ff:cc:32:5a:9d:d6:e9:8e:ce:87:
0e:d2:b7:f8:c3:9b:ed:b1:6b:ae:66:3b:fe:e1:88:51:37:6d:
f4:2b:a4:5f:f8:34:8c:92:17:67:6d:bc:5a:f1:e6:be:57:02:
c0:62:5c:37:fd:09:d6:61:a0:0f:7e:58:e3:c1:92:f6:74:82:
56:bc:62:59:f0:b3:29:9e:ec:38:ec:4d:d0:72:46:77:73:05:
59:23:60:ee:78:97:1b:89:bc:34:d0:94:0a:5b:65:c7:9e:d8:
8a:19:ab:5e:78:ca:54:7e:14:ec:25:ec:b8:3e:39:e7:0d:6c:
02:99:52:d0:d8:e4:24:94:72:d2:94:d3:6b:1c:84:d6:7a:5c:
74:e2:7e:ec:6a:84:7b:de:56:02:a3:bd:47:98:20:d8:ae:56:
12:8e:3d:da:9a:c0:6e:f5:10:b5:36:84:1c:5a:5d:9f:6d:d9:
d5:c7:53:43:27:d1:20:e1:fa:b8:fc:03:f9:05:88:fc:0d:0b:
0f:a4:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:16 2026 by rpki-client