Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: 7p2bkr0NPZCNXflRZrIRjw0yhw0MnPu63acKKKhEicM=
Subject key identifier: 9F:F1:3D:B2:41:D8:8E:9A:CA:A2:9B:3D:BD:57:CC:7D:B0:19:C5:1D
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019D3865D1FED78848993BCFC26707557991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 06C2
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: hGjbG1JyK/a+KBgY2Ex9/iF7DOZN/boDprC12vJASeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d1:fe:d7:88:48:99:3b:cf:c2:67:07:55:79:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=9ff13db241d88e9acaa29b3dbd57cc7db019c51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b8:30:82:9a:e7:7a:6d:f3:55:ed:a6:da:b0:
9e:51:b7:b7:a6:1f:e0:72:91:b9:58:e0:f6:38:46:
b5:2f:62:a2:bc:36:1b:9c:71:f1:cb:98:d7:b5:d0:
76:be:d0:20:89:58:d7:65:72:6b:f0:8a:57:4b:b8:
d6:73:62:40:a6:8f:cd:e5:e3:6c:d6:27:62:34:c7:
21:5a:c8:a1:bd:ba:8c:ac:3d:ea:89:54:02:a1:8f:
32:54:e1:f2:13:57:fd:dc:67:6c:61:98:58:d4:96:
fd:18:3c:79:10:18:6a:3f:4c:23:d9:8f:1d:5c:be:
b2:79:6a:0a:b3:9c:ab:43:78:ca:8f:2d:09:6f:20:
40:2f:b1:7d:19:81:2a:68:58:73:af:68:e2:bc:c6:
b4:b6:ca:a9:88:9a:fc:9e:ab:25:63:01:97:b6:ae:
e8:23:c6:b9:28:fe:13:e8:62:ad:20:50:d0:91:04:
95:77:50:6a:9b:42:f0:ab:9d:55:6e:cf:8e:09:41:
0f:71:de:ca:41:85:fb:ce:37:2c:75:7b:37:6b:e3:
4f:b2:c8:03:a6:b2:c4:13:5e:2e:81:b5:48:4d:62:
57:fd:3a:1f:41:14:ab:3a:29:d6:67:3d:5f:65:12:
fa:16:9d:d4:37:81:be:08:23:77:1a:56:b1:a7:ac:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:3D:B2:41:D8:8E:9A:CA:A2:9B:3D:BD:57:CC:7D:B0:19:C5:1D
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4c:17:76:eb:85:35:d1:2f:c2:e4:45:9f:08:c7:5a:60:c3:
08:cb:6f:2e:6b:3b:dd:1d:c3:73:c5:a5:6a:c8:72:71:ad:4c:
c7:e9:99:7d:51:ae:bb:65:96:37:84:ae:9f:17:1f:90:58:b5:
25:5a:f8:83:fd:4a:cf:6c:25:f1:89:d1:1e:3a:fa:f7:e3:a3:
2a:02:e2:ec:02:3e:ae:eb:3e:ff:30:1a:ac:42:bc:f7:dc:7d:
f0:d7:49:f3:c3:30:e1:3c:c4:6a:ab:cd:03:3f:5c:39:24:d9:
07:29:b7:52:16:20:d9:59:eb:85:13:d3:0f:80:52:fb:29:70:
54:28:27:f7:b8:34:f1:d2:dc:ed:39:30:86:0b:1a:58:11:31:
50:55:dc:d6:9b:fb:90:2a:52:98:8b:61:4c:a4:50:07:4d:b4:
37:33:02:25:cf:bf:d3:8a:4d:ab:d3:17:78:dd:28:40:69:0c:
99:37:38:e8:1c:e6:45:b8:55:a0:7c:12:d8:85:70:b9:1d:30:
45:14:4c:ad:23:36:db:33:41:19:36:8f:42:f0:75:30:a2:ec:
95:9b:2f:80:6c:3d:36:a8:56:30:0a:61:52:4e:8c:d6:46:c0:
1a:a8:72:dc:66:70:bc:19:2c:90:1a:4a:01:ae:84:49:8b:4b:
fe:fc:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:27 2026 by rpki-client