Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: utnEXcUFzfDp3PhYsieHNOQducNNvClZWM4hvzUW/YY=
Subject key identifier: 9A:72:9C:5B:26:C8:41:E1:F7:B3:52:A0:4B:CB:46:75:92:A6:8B:73
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 01A13DB89FE54A61C87032B4D38B8DDB4AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 08D7
Signing time: Thu 15 Oct 2026 04:01:12 +0000
Manifest this update: Thu 15 Oct 2026 04:01:12 +0000
Manifest next update: Fri 16 Oct 2026 04:01:12 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: TLcuGDDg4begnvwTEYhV3pxTzPQcHkGY+3UsJepTtRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:9f:e5:4a:61:c8:70:32:b4:d3:8b:8d:db:4a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Oct 15 04:01:12 2026 GMT
Not After : Oct 16 04:01:12 2026 GMT
Subject: CN=9a729c5b26c841e1f7b352a04bcb467592a68b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:c8:37:61:72:a1:b1:dd:5e:ac:09:b0:d0:
1e:d3:60:52:74:a3:e6:94:74:d5:80:d8:5d:19:a1:
5d:5e:20:8c:53:12:05:78:f0:26:11:23:9b:e6:ea:
b2:9a:c2:1c:65:5f:1c:6d:88:69:a1:98:19:8a:c3:
28:0f:00:5d:b8:3d:31:12:94:b5:00:6b:9a:33:d4:
2d:02:bb:7d:d9:35:52:05:3d:e3:d9:da:19:6f:1f:
ed:65:63:1f:be:e1:3b:29:39:5d:ca:64:44:bf:78:
f6:fa:af:ee:9e:28:cd:5e:b4:67:a0:5a:ef:46:ca:
24:25:75:aa:fa:e9:f6:2f:07:4d:b6:7a:fa:8f:1e:
a2:07:e4:76:f0:33:8f:b0:1e:ce:a9:0d:c5:3e:89:
72:83:d1:d3:57:7f:71:3f:96:04:4d:20:5e:3e:97:
f7:75:4a:60:0b:ac:3c:83:b9:c3:42:36:52:d3:0c:
0e:35:57:7d:f0:d1:61:d9:6a:66:ff:28:4c:49:1a:
25:85:b0:71:a3:73:fd:3b:a4:9a:6d:43:92:e8:0b:
5c:0f:55:f2:42:bc:c0:1c:ff:21:a7:06:dc:f2:47:
b3:2a:0f:3f:38:0c:07:79:b9:b1:94:22:af:60:46:
ce:2b:00:7a:85:82:a6:7c:9a:8f:a5:a2:2e:17:d1:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:72:9C:5B:26:C8:41:E1:F7:B3:52:A0:4B:CB:46:75:92:A6:8B:73
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:60:68:46:be:86:2a:06:4d:b3:a8:4c:4b:20:eb:c9:e3:f3:
26:1d:e3:dc:0e:d2:d1:69:e9:42:72:4b:a3:1b:96:5f:1d:4b:
1b:fb:0c:5a:27:bd:b9:df:db:4f:f4:0d:28:f8:70:44:73:af:
55:b1:ca:f2:32:bf:f7:94:57:31:7c:10:b7:09:fd:31:b3:1e:
7d:8e:6b:4e:af:03:ba:9c:a5:ca:e1:2c:6d:1e:e4:50:f8:b6:
d5:90:e6:f1:bb:b5:25:22:ff:e1:84:40:bb:8b:cb:8d:7f:1a:
e9:bc:41:6c:5e:6b:b9:25:b6:a5:72:6b:8e:63:ac:67:d5:d4:
b0:53:eb:55:a3:0c:6b:01:30:93:c8:2c:8c:d2:9b:af:fb:59:
ff:73:f1:f4:ca:f2:55:f3:87:a7:11:32:da:31:f8:8b:87:75:
cf:1b:10:da:21:bf:5b:50:ca:59:3d:66:a8:0e:36:ca:d1:c0:
1c:00:52:0c:17:9e:74:ad:37:12:c3:22:11:8a:70:69:21:8b:
41:c2:8f:0f:e7:02:db:f1:dc:e4:d1:a2:74:14:bf:6b:67:30:
ec:be:9b:fc:78:2f:4f:75:28:a2:22:53:38:42:8b:f0:8c:fd:
7c:9f:c4:00:d3:a7:ee:05:cb:f3:d5:41:a0:9d:98:5f:8d:93:
f3:e1:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:00 2026 by rpki-client