Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: L9Wm95zx4QFEEqoNCwA9s1HXIWMxCgU+jBmkAmBdtyw=
Subject key identifier: D9:F6:F9:E2:F5:A4:BB:DC:21:92:AD:57:5C:46:98:9B:4D:A0:D4:F8
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019E2F96EA553CF507AE51B2FB075AB7D364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0742
Signing time: Sat 16 May 2026 07:01:19 +0000
Manifest this update: Sat 16 May 2026 07:01:19 +0000
Manifest next update: Sun 17 May 2026 07:01:19 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: Kzue2xMR26W/1xxJEvNCTJVeASfX/xI2yqhu1ovxApM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:ea:55:3c:f5:07:ae:51:b2:fb:07:5a:b7:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: May 16 07:01:19 2026 GMT
Not After : May 17 07:01:19 2026 GMT
Subject: CN=d9f6f9e2f5a4bbdc2192ad575c46989b4da0d4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:e7:41:b7:6f:2e:f4:a2:36:9a:e7:f0:57:
90:55:82:d9:69:b7:98:52:b9:cd:9a:02:6e:45:c4:
04:b3:90:ed:2a:eb:60:87:db:54:9f:3e:a9:94:57:
ca:d2:16:cf:20:c3:fa:ff:ac:50:25:0a:51:f7:fb:
4c:cb:9b:87:4f:87:18:5a:94:b5:11:54:90:e7:dd:
0f:56:99:4b:78:64:83:bb:65:5d:7d:c8:00:fd:e6:
fd:6d:b3:eb:65:02:b4:49:9e:ff:fa:de:f1:57:4e:
50:bc:df:18:d9:3d:58:7c:39:5e:77:e4:93:2f:7a:
64:89:19:e0:06:94:c0:f9:fa:a5:25:3b:47:cb:61:
2f:e0:30:88:d9:62:d3:cd:82:c7:40:d5:72:41:9b:
0e:eb:40:16:d5:c6:57:be:de:f9:e7:c4:88:10:5e:
c8:a3:10:bc:e3:49:ed:89:92:40:73:fb:2d:aa:94:
ac:d2:e1:dd:c7:a9:b2:d9:7e:70:15:0c:01:23:b6:
0a:18:f6:91:f2:d1:13:b3:6b:d4:ee:97:8a:b3:19:
fd:4d:cd:1c:ff:6c:b7:a7:b1:cf:4c:05:1c:ea:da:
e5:17:7a:ae:22:f6:fc:13:8c:2f:5b:2f:77:19:8a:
07:16:9f:27:09:be:3f:b0:92:f6:1b:d6:aa:c6:67:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:F9:E2:F5:A4:BB:DC:21:92:AD:57:5C:46:98:9B:4D:A0:D4:F8
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:af:42:13:f8:b3:33:3b:1c:ad:26:04:ff:a4:80:d0:2e:a2:
94:14:aa:a8:c9:c5:5c:2d:8c:12:9c:66:3f:c3:99:de:1e:18:
a1:76:87:2f:83:dc:9c:b5:fb:f8:90:81:9e:c8:91:24:55:ec:
fd:85:91:1d:5c:23:ed:d2:dc:fc:13:46:3c:db:28:ca:ee:8e:
6e:f4:f7:07:bd:7c:13:8c:0a:18:13:54:00:e2:43:f9:7c:59:
3a:cb:fa:c7:6b:2a:66:b3:ab:f4:32:3c:ff:89:cf:9e:71:00:
19:e8:4c:93:e9:06:6e:8e:8e:3d:76:2c:5f:30:11:c5:48:f6:
d6:2f:18:3d:26:39:85:ae:5a:bd:bd:6a:69:1f:a3:e4:32:22:
cf:53:82:c9:6c:26:f3:b5:03:40:35:95:e0:b4:ba:6d:db:74:
f8:a9:5a:9d:9a:a1:fc:5f:fc:60:f4:b9:c8:f9:41:24:66:52:
85:c8:17:8c:f1:23:6b:78:53:82:b4:d2:4e:d7:ae:1d:92:19:
36:40:e3:f8:f7:a5:f2:13:67:27:51:b7:30:0b:b4:d0:82:71:
51:df:a8:f3:bd:6c:05:0f:55:5b:55:8b:4c:c2:e4:a6:fc:73:
4c:85:24:5e:4a:50:e2:89:35:e4:9d:e4:14:33:f3:02:1b:b0:
16:0b:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:54 2026 by rpki-client