Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: TrybLSC4m/ZngOLIQDO8w2sayFl7tByiGW7walbwC4s=
Subject key identifier: 6F:EC:0D:A6:60:47:82:71:1F:27:83:3A:FD:CA:3B:84:55:60:65:9F
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019E4F8FE9F433D71526AF284DBB68C0BAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1927
Signing time: Fri 22 May 2026 12:01:31 +0000
Manifest this update: Fri 22 May 2026 12:01:31 +0000
Manifest next update: Sat 23 May 2026 12:01:31 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: OQ6+XUl0eqS0QoAXrOBHSlTofR0OsL947KkeWDHiFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:8f:e9:f4:33:d7:15:26:af:28:4d:bb:68:c0:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: May 22 12:01:31 2026 GMT
Not After : May 23 12:01:31 2026 GMT
Subject: CN=6fec0da6604782711f27833afdca3b845560659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:13:f5:8d:f6:ba:94:e4:bc:ba:f6:b7:27:
d0:2b:9f:d3:dc:cf:10:d6:a1:b1:c6:64:44:2b:67:
3d:dd:e6:f8:3e:00:1f:85:b8:d5:1b:86:f0:8b:81:
c2:cd:93:e8:a4:67:dd:12:be:36:3f:8e:21:55:4c:
47:5a:a2:b6:db:ca:bc:e2:fd:7d:3e:fb:cc:67:20:
f1:90:91:79:e6:83:ca:b5:97:71:19:1d:72:b3:0f:
47:cd:fb:f9:b2:7e:46:f1:3a:8b:8b:8d:23:e7:27:
f2:d0:20:37:a1:85:0f:f5:fb:a2:0a:67:ea:37:4e:
de:42:0d:15:be:b0:36:36:d1:9c:04:e3:c0:d8:ac:
7a:72:3b:a6:7b:86:e9:ea:35:64:2b:6e:04:2c:31:
26:2a:04:19:15:2d:2e:86:16:b2:27:6c:23:80:5d:
7e:38:0c:45:19:f2:05:d1:f3:9a:de:ee:81:99:f1:
c3:44:44:a6:43:e0:e3:51:68:27:14:e6:19:27:37:
cd:14:8b:14:54:40:e1:ac:09:da:e4:2a:2f:e6:fa:
7d:9b:c3:28:ff:47:fe:b8:49:33:d6:2d:8a:9e:6a:
bc:d0:fe:a5:fd:2b:ad:bd:ae:1d:15:0f:ab:08:ed:
fb:48:16:9b:3f:5e:f6:48:2d:c0:7f:3f:0a:6b:c4:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:0D:A6:60:47:82:71:1F:27:83:3A:FD:CA:3B:84:55:60:65:9F
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f7:1d:46:fd:f8:88:06:cc:e1:2c:07:be:5d:f2:04:d9:f3:
c7:03:47:78:3e:64:43:43:53:9a:f4:1e:b5:cc:12:f3:23:f2:
a2:40:68:8b:9d:2c:32:a9:ef:40:07:c1:7c:b2:26:e3:45:71:
95:ca:8b:f4:b0:3d:32:bd:bf:b1:f3:f1:ec:eb:5b:ef:39:78:
36:70:09:7a:1c:ed:76:64:07:48:d6:3e:c1:0a:73:0e:10:a9:
c9:ba:40:4c:ce:5a:f4:e6:f0:66:81:17:49:52:36:9d:6c:86:
fc:4b:bf:dc:80:1d:94:a7:b2:3b:57:66:80:14:7c:7b:b1:a9:
e3:7a:b7:de:bc:06:c8:63:1b:67:e4:ab:fb:a1:f7:75:7e:3f:
84:60:b2:45:ca:6a:cf:6f:94:32:98:d8:1d:e4:67:5f:a9:54:
bf:00:49:9c:80:ec:19:86:fc:2a:00:f7:0c:8f:a7:ab:b9:8b:
a1:3b:f4:b3:d5:da:ab:2f:91:df:3e:d9:c7:d1:c9:9f:e2:11:
fa:21:08:3f:31:0a:5f:40:ff:2b:81:44:36:c8:b9:bb:ff:57:
f8:90:48:8a:e0:46:28:3f:4d:86:5c:a8:e2:92:58:bc:60:b5:
e5:b0:3a:d6:59:59:40:0b:7e:41:6d:e2:6c:88:23:71:ad:6a:
8e:62:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:11 2026 by rpki-client