Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: vqEoK0zQmB+YRtns0AladQE2H82F+FaCDNzMO8N2zMY=
Subject key identifier: 97:D1:80:90:AF:54:28:F8:44:8D:2A:80:E7:6F:EB:55:67:4C:AE:48
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 01A00101F461EF006DC8D96FC8F5616DE577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0833
Signing time: Fri 14 Aug 2026 16:01:40 +0000
Manifest this update: Fri 14 Aug 2026 16:01:40 +0000
Manifest next update: Sat 15 Aug 2026 16:01:40 +0000
Files and hashes: 1: 5uTktA0SznDQPILo7HpGEhZs7Mw.roa (hash: AJB/+7KYGKN+W6lrGm16U2Le5ycdD5eQwXJ/GUey2Vg=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: TIF7MBDpmAPtdWulkY3l+lwdYaon1YDjURceMDDuLak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:f4:61:ef:00:6d:c8:d9:6f:c8:f5:61:6d:e5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Aug 14 16:01:40 2026 GMT
Not After : Aug 15 16:01:40 2026 GMT
Subject: CN=97d18090af5428f8448d2a80e76feb55674cae48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:c3:a0:3b:8b:e5:69:26:db:a9:62:a0:12:
fd:84:ce:ad:55:ee:0b:5c:58:75:0e:57:5b:f2:4c:
78:48:c9:ea:c4:12:cd:ae:2f:6a:5e:bb:72:e4:3d:
22:2f:f8:3d:87:c1:b0:34:4d:e3:00:9d:c2:d6:64:
2f:44:20:d0:6e:b9:ce:ad:ac:ef:59:7c:c2:5c:7d:
25:73:80:46:91:6e:ac:27:bb:b5:50:80:4e:3d:f3:
2a:50:c8:16:ab:94:c6:c4:84:07:b6:eb:02:92:01:
42:7d:be:51:19:a8:1c:98:f9:e3:fb:b6:22:cb:5e:
73:c0:73:ef:1a:c3:fe:cd:63:71:b5:81:67:f8:b0:
9d:46:1b:9d:80:cb:42:aa:32:02:cb:1a:8c:89:17:
40:82:2a:93:cc:ea:16:94:e4:2f:00:44:ad:7b:ac:
2d:1c:9b:f3:55:bf:e7:ec:9b:14:e2:d8:47:53:62:
b1:13:18:d4:ce:1b:de:13:0c:a4:8f:12:5a:9f:00:
e0:b7:21:cf:f4:af:bd:ac:f2:c1:47:b5:5e:71:98:
3a:d2:10:44:a4:b8:35:de:8d:59:da:07:5c:4f:bf:
0c:25:a0:8e:71:ec:a3:8a:30:55:4c:8f:86:37:44:
c1:a2:7b:d5:21:31:3f:db:73:85:91:b3:d7:b8:6c:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:80:90:AF:54:28:F8:44:8D:2A:80:E7:6F:EB:55:67:4C:AE:48
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1b:d5:d7:c3:db:60:20:7e:ec:19:01:d8:a5:ed:79:b6:56:
6e:64:06:3a:c3:02:ac:16:d4:f9:70:7a:0b:bb:ba:a2:67:c8:
d9:d5:4c:e3:84:89:0f:67:69:54:4c:29:5c:58:e5:df:42:10:
cd:71:44:ba:b2:1e:f4:db:a8:01:c8:d5:4d:58:2d:3d:f2:25:
ba:0d:62:8c:92:c3:57:e6:f6:49:a0:ad:8b:04:b2:66:0a:78:
32:e3:96:e5:b1:5f:f8:3f:70:e8:8c:62:e4:b2:2c:3f:94:e2:
98:2f:8a:fd:0a:5d:93:ac:54:1a:cc:02:7f:05:f8:a2:dc:2a:
75:7a:ff:f0:40:9c:f1:83:e5:4a:3d:cf:53:44:66:bd:9e:a5:
79:58:86:c6:7b:91:32:2f:7e:ee:38:f3:5b:45:88:0f:f9:45:
b7:97:95:10:65:f1:75:76:47:ac:c4:8e:0a:87:56:95:04:bc:
29:15:c9:20:c4:c7:75:7d:24:da:ae:f4:4c:7a:94:29:3d:7e:
ca:74:63:38:84:cb:84:88:46:b0:79:35:ba:5c:26:f3:75:55:
a2:32:2f:72:88:cf:8d:dd:bc:5b:a3:fa:9d:2d:e1:65:a7:73:
19:e3:f4:c7:62:4b:f9:c6:01:ac:3a:49:53:ed:db:7c:dd:c8:
96:85:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:41 2026 by rpki-client