
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json)
Hash identifier: 1ikrNV5lfPwtussfzgcknv+sme8LtklOUcWE0Tih+Gc=
Subject key identifier: 5B:DA:3B:B9:11:A5:9B:F6:1D:05:2A:75:F5:0A:0B:80:82:2F:5F:CA
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 019DCFE3C9B855077794BC1A054FAC34E060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
Manifest number: 114B
Signing time: Mon 27 Apr 2026 17:01:45 +0000
Manifest this update: Mon 27 Apr 2026 17:01:45 +0000
Manifest next update: Tue 28 Apr 2026 17:01:45 +0000
Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=)
2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=)
3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=)
4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: i6zzK/Xb0LRTK+E139Qn+HzNQ0i4KQTsHocoh6QXwPE=)
5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=)
6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=)
7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=)
8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=)
9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=)
10: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=)
11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:c9:b8:55:07:77:94:bc:1a:05:4f:ac:34:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Apr 27 17:01:45 2026 GMT
Not After : Apr 28 17:01:45 2026 GMT
Subject: CN=5bda3bb911a59bf61d052a75f50a0b80822f5fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:06:af:5b:f0:b2:b4:3e:fe:c5:3a:be:f9:
73:b0:f3:d8:28:36:5a:1e:64:4c:c4:a0:09:bd:54:
8e:22:14:41:95:27:6e:8d:60:4f:10:fa:bb:4c:84:
f4:1d:83:2e:08:24:44:b5:55:24:c5:d1:de:69:1a:
69:33:ea:a4:41:8f:73:da:9d:6d:21:8e:55:22:a5:
87:de:4d:17:ac:68:1f:a1:cb:fd:d9:f3:3b:be:a0:
cb:9d:d5:4c:0d:49:92:11:7e:a0:80:e3:ff:62:e4:
19:44:df:a2:d7:10:a7:3f:22:c4:c6:78:f2:6b:68:
e7:35:ac:c0:b2:aa:0f:d5:c0:ab:46:f1:50:26:17:
34:af:db:3f:17:13:77:80:c6:a3:80:51:2a:9f:f6:
14:2e:14:f6:42:8c:8d:04:32:bf:c6:96:37:58:88:
f9:73:77:bd:74:d7:e1:f3:60:40:7a:7b:99:20:f4:
37:77:bf:c8:20:4e:fc:ca:ea:d2:3f:18:8f:3e:c6:
bc:e7:8e:67:06:b4:70:ff:94:3a:5a:ae:94:0b:79:
ab:fd:75:92:8a:b1:0d:70:24:ee:5a:4d:e2:88:7d:
9e:0e:dc:c5:6d:dc:76:55:c9:bc:f0:11:3e:f4:6d:
fc:44:d3:ce:fd:47:45:9c:59:6a:00:37:47:25:90:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:3B:B9:11:A5:9B:F6:1D:05:2A:75:F5:0A:0B:80:82:2F:5F:CA
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:56:80:c2:c7:b8:b9:bd:ba:f2:aa:d5:00:f9:02:8c:ba:a9:
b2:28:55:1f:35:1a:49:fa:6c:b7:a2:e4:63:b1:66:f9:66:32:
da:31:b9:b5:1a:3e:69:dc:c6:11:93:8e:0f:05:d3:d5:b7:8b:
71:8c:30:47:12:a2:3e:f3:b9:ca:69:41:cb:13:68:8e:65:1a:
82:e2:69:75:b6:fb:11:27:bb:c8:4e:a4:f2:c2:5e:51:ff:bf:
f1:06:77:e6:87:06:bd:23:a5:c0:7a:ac:3d:8b:91:26:23:ec:
a4:ea:03:9c:a6:63:c3:21:e8:77:64:0b:d5:90:48:ff:bf:c0:
f8:00:ab:d0:25:c2:e8:0d:ef:df:96:1b:b0:8f:48:25:8d:86:
ef:3c:b5:99:75:86:65:fd:43:a8:b6:dd:6c:7a:da:25:30:c6:
29:ce:fe:1b:b5:df:e0:98:c6:fb:e7:ad:97:80:29:4d:86:e7:
59:f4:33:8e:6d:20:e4:42:82:98:10:c7:ee:fe:60:f3:d3:64:
01:8a:1d:8f:ae:93:98:10:22:e4:47:ff:79:7f:e8:bd:77:0f:
42:78:e6:c4:3b:73:38:9e:d9:24:19:0f:b8:c8:01:c0:db:27:
19:a9:ab:2d:ef:f7:50:48:4c:4c:a5:72:0c:de:c8:36:e9:48:
9d:e5:db:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P48m4VQd3lLwaBU+sNOBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm
NGQ5ZTAwHhcNMjYwNDI3MTcwMTQ1WhcNMjYwNDI4MTcwMTQ1WjAzMTEwLwYDVQQD
Eyg1YmRhM2JiOTExYTU5YmY2MWQwNTJhNzVmNTBhMGI4MDgyMmY1ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu94Gr1vwsrQ+/sU6vvlzsPPYKDZa
HmRMxKAJvVSOIhRBlSdujWBPEPq7TIT0HYMuCCREtVUkxdHeaRppM+qkQY9z2p1t
IY5VIqWH3k0XrGgfocv92fM7vqDLndVMDUmSEX6ggOP/YuQZRN+i1xCnPyLExnjy
a2jnNazAsqoP1cCrRvFQJhc0r9s/FxN3gMajgFEqn/YULhT2QoyNBDK/xpY3WIj5
c3e9dNfh82BAenuZIPQ3d7/IIE78yurSPxiPPsa8545nBrRw/5Q6Wq6UC3mr/XWS
irENcCTuWk3iiH2eDtzFbdx2Vcm88BE+9G38RNPO/UdFnFlqADdHJZADDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvaO7kRpZv2HQUqdfUKC4CCL1/KMB8GA1UdIwQY
MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt
ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm
LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFaAwse4
ub268qrVAPkCjLqpsihVHzUaSfpst6LkY7Fm+WYy2jG5tRo+adzGEZOODwXT1beL
cYwwRxKiPvO5ymlByxNojmUaguJpdbb7ESe7yE6k8sJeUf+/8QZ35ocGvSOlwHqs
PYuRJiPspOoDnKZjwyHod2QL1ZBI/7/A+ACr0CXC6A3v35YbsI9IJY2G7zy1mXWG
Zf1DqLbdbHraJTDGKc7+G7Xf4JjG++etl4ApTYbnWfQzjm0g5EKCmBDH7v5g89Nk
AYodj66TmBAi5Ef/eX/ovXcPQnjmxDtzOJ7ZJBkPuMgBwNsnGamrLe/3UEhMTKVy
DN7INulIneXbIw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:16 2026 by rpki-client