Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: jWuj3+GXcYtAdz+rLqpmQenq1VOIqe6C99V8D6jsId4=
Subject key identifier: 60:91:FA:3B:36:2F:A4:47:4F:56:A8:5B:D7:67:2A:D5:88:C0:2B:70
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019F36E0F5231A9E0541F5E7370F680A921C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 199F
Signing time: Mon 06 Jul 2026 10:02:20 +0000
Manifest this update: Mon 06 Jul 2026 10:02:20 +0000
Manifest next update: Tue 07 Jul 2026 10:02:20 +0000
Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: JKWHQL502L8ZVLBY0qUCUc0sS7uWmv2lXmHRgkJYGSg=)
4: xKcBipuMvKp84RN5Ey0HBKtsVPo.roa (hash: /eh2S8GsbWcqnju6ljXJ0HQ5aHuof6/dHBl/9C9TCw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:e0:f5:23:1a:9e:05:41:f5:e7:37:0f:68:0a:92:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jul 6 10:02:20 2026 GMT
Not After : Jul 7 10:02:20 2026 GMT
Subject: CN=6091fa3b362fa4474f56a85bd7672ad588c02b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:44:56:72:76:40:fe:16:b0:6a:f1:a3:93:
e9:ca:6f:6b:48:1d:b5:01:30:cb:cc:f5:c0:0b:2b:
72:a7:25:09:06:ad:1e:4f:22:0e:b0:52:72:e8:46:
a1:04:90:8e:92:02:09:38:68:78:4d:90:6b:20:2c:
36:3b:9e:28:8a:7e:64:c2:a4:4a:56:53:30:35:12:
2a:52:eb:f9:36:2a:6a:e7:93:53:2a:65:8f:8b:c7:
ac:ac:47:cb:3b:a9:51:12:ee:92:d2:ac:44:14:24:
53:e2:fe:fb:19:3c:0f:3b:ee:6c:c7:63:d5:3f:2c:
eb:fc:21:9c:3f:8b:15:ef:96:e0:e1:ed:05:5d:3f:
ca:23:81:a5:47:12:12:de:26:40:c2:d3:32:be:59:
df:4c:f2:e6:63:2f:e6:2e:5d:9a:62:5f:fb:fc:af:
fd:7e:5c:b7:ed:6d:56:1b:b1:e7:dd:6a:b6:fd:52:
66:4f:2d:0f:a3:d7:95:0c:6c:61:61:99:ec:58:82:
00:98:48:61:cc:6d:e0:af:c6:8b:5e:c7:3b:be:bd:
ea:52:c3:1e:b8:51:5f:0a:4f:85:26:03:30:83:66:
6f:ce:22:8f:56:34:61:51:ac:79:3d:60:16:c8:b6:
7c:d3:f9:7d:7a:09:d4:04:8b:69:fa:ee:aa:e8:c8:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:FA:3B:36:2F:A4:47:4F:56:A8:5B:D7:67:2A:D5:88:C0:2B:70
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:73:cf:c4:47:a0:dc:86:f3:54:53:bf:18:68:e2:35:e1:e5:
9d:20:00:51:1b:87:9e:50:77:22:3d:e7:6a:a7:c2:cd:36:a3:
85:2e:93:89:45:3b:91:49:c4:8b:e4:e4:81:c0:18:0f:1a:f8:
3a:44:90:81:3d:25:80:f5:4d:db:9f:30:96:41:7c:f8:13:0b:
07:6e:8f:a8:b6:0c:33:f2:49:bb:b6:47:92:c1:3a:ca:40:84:
5d:70:3b:d2:af:66:a1:fa:6e:17:29:c5:d7:79:e7:a1:d5:96:
e9:9a:11:9f:60:bf:39:f2:09:70:1e:44:92:11:ed:4f:74:e1:
31:d8:c9:1e:67:48:43:39:2a:41:51:cc:ec:d4:33:6a:f0:a3:
6f:24:41:1a:f3:c2:59:f0:5b:09:79:66:b2:86:00:07:36:fb:
20:57:f8:7b:e3:db:be:91:0a:6e:ec:da:1a:47:ab:19:fa:b2:
5b:8c:39:af:ce:ae:8b:ed:33:28:04:87:d4:f4:79:9c:df:9a:
a7:62:86:64:ce:42:99:1d:b7:6b:53:bf:98:10:93:f8:bc:6b:
2b:de:61:e5:e9:6e:22:c0:41:9d:9f:5d:5e:30:a8:26:05:3f:
3e:04:27:ea:24:63:75:17:07:43:37:3f:c8:88:97:c6:e6:fc:
4c:4a:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:46 2026 by rpki-client