Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: nzHyivdBpyr2UwQoTahO29sIuT93W4OpWCls/138Vk4=
Subject key identifier: A8:7D:C2:54:ED:0C:14:80:CE:94:86:E8:05:7B:CE:A7:03:60:82:AF
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019F194303B5F46E1D4D823A08A7839EA144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 07BB
Signing time: Tue 30 Jun 2026 16:00:49 +0000
Manifest this update: Tue 30 Jun 2026 16:00:49 +0000
Manifest next update: Wed 01 Jul 2026 16:00:49 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: IH9qDaNOuGZ6EztNZt38/IVbmq8eySetF3hTRjUOCpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:03:b5:f4:6e:1d:4d:82:3a:08:a7:83:9e:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Jun 30 16:00:49 2026 GMT
Not After : Jul 1 16:00:49 2026 GMT
Subject: CN=a87dc254ed0c1480ce9486e8057bcea7036082af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:0c:2d:0a:4a:bc:8a:2d:d0:7b:f0:34:61:
73:d8:df:b7:39:a3:fc:d4:f0:0c:8f:59:33:56:89:
ea:08:63:4b:d3:92:b0:47:35:3c:97:15:ef:a0:09:
84:5e:b3:01:c1:e8:f0:88:81:ea:a3:a1:2c:51:af:
64:eb:ab:cc:34:ec:e9:21:2a:98:d1:a8:3d:ef:19:
7a:06:df:7d:14:6b:3e:e4:92:c2:c3:db:46:e0:aa:
3c:61:38:30:69:c8:3f:3a:c7:0f:2a:2b:8e:fd:80:
3a:c8:51:e5:f1:32:48:52:8e:8c:46:21:13:e3:4e:
f8:ec:61:96:74:5e:fb:dc:f6:fc:f8:a8:4f:4a:17:
6c:38:f5:76:6a:15:f9:54:bf:3b:44:c1:40:47:0c:
99:2e:b7:7d:74:52:e5:11:f2:ca:c4:1e:09:bf:6f:
51:d1:55:80:37:f4:d6:d8:37:13:05:67:2e:e1:6a:
cb:97:57:7e:c9:73:82:f3:55:01:e8:fe:41:2b:3e:
34:af:47:98:60:a7:30:13:58:29:32:07:73:4e:e0:
72:11:6c:bb:af:5d:c3:e3:a8:b2:3f:d2:65:56:3e:
17:7c:aa:3d:dd:35:2f:40:d9:53:81:74:55:b4:c1:
35:88:1b:c1:81:09:a2:7d:e0:bf:cf:8d:85:79:c0:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:C2:54:ED:0C:14:80:CE:94:86:E8:05:7B:CE:A7:03:60:82:AF
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9e:bb:69:5c:3f:8a:a4:e6:8f:27:26:05:a9:29:5e:5f:8f:
9a:53:ca:13:ba:9a:aa:26:fc:e8:5d:52:06:ae:cd:09:ba:32:
ec:d6:99:1f:60:52:05:7a:a7:d5:cd:8c:47:1c:c1:b6:05:96:
e2:ec:2c:af:58:35:cc:38:2a:5f:30:67:67:48:6e:d3:1b:5d:
1c:6f:79:57:86:a8:7f:c2:19:81:fe:4a:57:32:cd:95:8a:9c:
18:6b:d8:72:f3:03:af:f6:83:00:12:04:0a:a8:a9:51:db:ae:
72:e9:99:1c:05:d7:e6:dc:bc:8b:df:3e:6e:a8:9b:4b:03:57:
80:5c:c9:c7:f7:f3:77:69:c8:a4:d5:48:67:8a:89:0a:5c:72:
d2:f6:13:e4:7f:6a:38:6c:eb:af:39:03:50:41:7a:0b:ba:b4:
a9:a9:e0:ef:df:e8:8e:bc:50:b0:6c:aa:44:ab:00:3e:e3:fc:
e7:2f:9b:b7:fc:c9:b6:89:d6:99:cd:2c:ae:e3:c5:41:00:35:
36:26:7d:88:2a:37:b3:10:8b:8c:c0:c6:98:8a:53:a9:f2:08:
4c:0a:dd:6d:f0:f6:48:a2:63:e4:b5:3f:49:bf:10:94:5f:bc:
c3:57:27:75:ca:f0:0a:e3:d0:8c:a3:94:17:7e:b9:73:f3:f6:
de:1d:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:47 2026 by rpki-client