Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: hsh0XtR0n/76dKHXaCHNJaY1HDs70KfuZo1uyXDf4ek=
Subject key identifier: 96:76:B9:64:D9:B6:B4:4A:81:45:99:E4:7E:6A:CE:03:D9:28:0E:48
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019D378923913EC36290305404A7C8CA4BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 03:00:27 +0000
Manifest this update: Sun 29 Mar 2026 03:00:27 +0000
Manifest next update: Mon 30 Mar 2026 03:00:27 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: kR050ChlnszRi91oF5ROdceBX3g6tkTK5ZyqNwWPQ4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:23:91:3e:c3:62:90:30:54:04:a7:c8:ca:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Mar 29 03:00:27 2026 GMT
Not After : Mar 30 03:00:27 2026 GMT
Subject: CN=9676b964d9b6b44a814599e47e6ace03d9280e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:88:e8:5b:4d:d2:2b:0e:1f:81:4e:a3:30:
57:17:f4:96:30:bf:56:bb:2c:99:56:ad:a1:04:0d:
13:2d:87:97:f0:29:c6:ae:af:4e:0b:98:50:ca:22:
f5:26:ca:8d:d1:a2:ec:a7:dc:e4:83:75:3b:15:e1:
d4:64:01:06:a0:eb:68:12:59:8d:a3:36:3b:06:80:
9d:53:3b:7b:04:dd:d1:42:62:43:e4:87:68:57:27:
1e:41:c2:af:9f:e0:08:a9:f8:83:18:0c:fa:68:ec:
57:6b:51:d1:17:fc:57:ee:e3:ba:e1:fb:fd:26:d3:
57:bd:83:6f:64:04:ce:ff:fa:23:ca:6b:c9:4d:ab:
9c:fb:4e:cb:61:57:52:0c:48:46:f0:f6:7b:1b:12:
fd:d7:f1:bb:8e:db:66:83:8f:f0:63:6e:6d:1d:40:
6c:70:ed:08:ca:11:ae:a3:e0:cc:98:6a:de:de:0f:
c7:da:bb:b5:fb:9d:20:de:30:a9:cd:90:a2:2c:6a:
75:ac:22:4c:36:c4:54:95:dc:b0:c1:76:75:f3:bd:
8b:4f:9d:d6:58:66:96:1a:41:e7:c0:3b:c8:8d:a4:
9d:e5:d3:2d:a8:d7:eb:ef:a3:06:79:48:44:3f:86:
b5:58:95:15:41:87:b9:0c:9d:70:92:31:9f:91:9a:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:76:B9:64:D9:B6:B4:4A:81:45:99:E4:7E:6A:CE:03:D9:28:0E:48
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ee:db:e4:fc:0a:4b:31:5f:9d:57:1a:f3:46:37:16:d6:ad:
fc:ca:7b:6e:cd:4d:07:a2:81:50:27:28:dd:1f:3a:7b:dc:13:
9e:33:29:d3:e6:0f:9e:84:d9:50:b0:d0:81:2b:21:f2:dd:94:
6b:5a:62:55:e7:fe:76:4c:d1:db:4c:40:a4:5c:d3:38:44:9b:
7d:11:6b:7f:61:fd:50:7a:b9:d8:2d:0c:aa:b2:b5:46:30:63:
79:7d:f9:cb:67:25:74:6b:75:45:61:35:1d:72:ec:bc:7d:74:
ca:4e:d3:78:54:93:01:3b:79:cc:4e:0d:c8:08:42:29:ef:1b:
ae:c7:f8:31:f2:21:7e:fe:d0:54:b6:61:a5:8d:9f:a5:9f:e6:
79:43:3c:10:55:ef:a2:76:6c:96:2d:10:42:12:e3:cb:5d:2a:
88:d2:40:62:44:28:61:4a:0f:a7:82:b2:3c:bc:a2:5d:e3:7a:
aa:10:a3:03:c4:a1:56:fe:54:22:cd:3c:85:8a:95:34:42:eb:
36:49:ea:d0:71:2d:53:77:59:57:23:05:78:2b:0c:a1:4d:4c:
be:b3:95:c9:a6:1a:1b:62:7f:78:04:c0:32:66:69:42:48:3c:
da:19:70:ef:cd:a1:4c:9c:65:e1:7a:3b:f3:6b:40:64:8b:7b:
4f:b5:aa:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iSORPsNikDBUBKfIykuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjYwMzI5MDMwMDI3WhcNMjYwMzMwMDMwMDI3WjAzMTEwLwYDVQQD
Eyg5Njc2Yjk2NGQ5YjZiNDRhODE0NTk5ZTQ3ZTZhY2UwM2Q5MjgwZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7KI6FtN0isOH4FOozBXF/SWML9W
uyyZVq2hBA0TLYeX8CnGrq9OC5hQyiL1JsqN0aLsp9zkg3U7FeHUZAEGoOtoElmN
ozY7BoCdUzt7BN3RQmJD5IdoVyceQcKvn+AIqfiDGAz6aOxXa1HRF/xX7uO64fv9
JtNXvYNvZATO//ojymvJTauc+07LYVdSDEhG8PZ7GxL91/G7jttmg4/wY25tHUBs
cO0IyhGuo+DMmGre3g/H2ru1+50g3jCpzZCiLGp1rCJMNsRUldywwXZ1872LT53W
WGaWGkHnwDvIjaSd5dMtqNfr76MGeUhEP4a1WJUVQYe5DJ1wkjGfkZq7KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ2uWTZtrRKgUWZ5H5qzgPZKA5IMB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+7b5PwK
SzFfnVca80Y3Ftat/Mp7bs1NB6KBUCco3R86e9wTnjMp0+YPnoTZULDQgSsh8t2U
a1piVef+dkzR20xApFzTOESbfRFrf2H9UHq52C0MqrK1RjBjeX35y2cldGt1RWE1
HXLsvH10yk7TeFSTATt5zE4NyAhCKe8brsf4MfIhfv7QVLZhpY2fpZ/meUM8EFXv
onZsli0QQhLjy10qiNJAYkQoYUoPp4KyPLyiXeN6qhCjA8ShVv5UIs08hYqVNELr
Nknq0HEtU3dZVyMFeCsMoU1MvrOVyaYaG2J/eATAMmZpQkg82hlw782hTJxl4Xo7
82tAZIt7T7WqBA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:54 2026 by rpki-client