Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: vlAKLcanzxAYr6nWD1BbXRR3AP8QRwRpcOeAHCUv6Vo=
Subject key identifier: F8:FB:CD:5E:27:05:62:33:7D:98:01:82:45:0B:CC:56:6E:3C:5B:E2
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 01A001013BCEDD1566E37C12F1B21ED0787E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 1738
Signing time: Fri 14 Aug 2026 16:00:52 +0000
Manifest this update: Fri 14 Aug 2026 16:00:52 +0000
Manifest next update: Sat 15 Aug 2026 16:00:52 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: Fuwkc+IQqbTh7+c6oM9vYOtUBLcB0UGgN5rupZi+jEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:3b:ce:dd:15:66:e3:7c:12:f1:b2:1e:d0:78:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Aug 14 16:00:52 2026 GMT
Not After : Aug 15 16:00:52 2026 GMT
Subject: CN=f8fbcd5e270562337d980182450bcc566e3c5be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:e1:60:d9:5a:c1:3f:2b:af:65:81:cc:bc:
0b:0a:f1:f1:fd:26:a0:3d:44:53:fa:58:5f:83:65:
f9:b2:90:26:d5:92:4e:0a:3b:76:22:9b:7c:4a:ab:
6d:9e:9d:0a:72:c0:21:9c:4a:0a:69:0d:00:fb:16:
7a:6f:d9:9c:27:da:4c:1b:b3:29:82:25:53:11:dc:
2c:e5:4d:c4:00:1d:8b:e8:d5:b6:bc:52:9e:69:39:
2c:33:5b:7a:d8:1d:c0:2e:71:c2:92:3b:74:76:69:
c7:0d:1c:d8:3b:62:be:81:6c:b9:7a:a7:ff:7c:89:
bb:aa:b5:50:b3:33:cb:95:0f:d6:6a:d6:ad:ac:be:
e6:b9:64:bc:c4:bc:23:da:46:22:6a:e4:84:b2:c7:
9d:ac:06:27:c5:74:ee:9a:d9:c3:be:86:e8:99:18:
9f:a9:5f:54:c8:a9:90:ce:d8:d6:2a:b5:29:c3:a4:
12:67:7d:db:15:08:0b:7f:01:58:6f:a3:55:42:66:
90:6d:17:3e:55:aa:83:73:cf:a3:79:00:01:56:40:
ee:3d:9b:5f:b7:c3:8f:7a:53:28:87:a1:77:03:d7:
cd:4a:b5:25:c1:e8:2f:e9:96:fa:4b:3b:e8:1f:e2:
42:0e:93:44:db:53:8d:47:cf:af:d6:57:a9:9e:b1:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:CD:5E:27:05:62:33:7D:98:01:82:45:0B:CC:56:6E:3C:5B:E2
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8b:21:f8:a3:0a:a7:8f:71:d5:9c:d3:0d:0a:97:48:59:84:
23:65:17:01:83:aa:ef:39:06:86:25:85:1f:91:ef:96:fb:41:
da:d5:2c:c2:5a:72:3c:ba:78:2c:3b:b4:5f:51:c1:d2:df:8b:
6e:12:1b:f1:7d:6e:dd:6a:f0:cd:23:39:fe:80:17:08:6c:c5:
d2:99:1b:fc:2c:7e:c6:18:fd:49:a7:38:cf:1c:40:88:54:25:
58:f6:b9:8f:c8:f5:9d:56:2b:04:49:e7:a3:30:be:ef:11:7f:
cd:a0:74:9c:f9:4c:84:d9:7a:89:7b:e2:3b:47:f5:b7:ac:be:
81:90:0b:49:b8:9a:de:02:bf:d6:9d:f4:df:37:fe:26:68:61:
23:86:86:68:39:5d:00:da:26:41:c3:da:1a:a0:4b:5b:96:ac:
48:52:3a:73:76:ab:f6:22:a6:87:33:56:bd:67:ca:9c:be:a1:
bb:24:f7:7d:42:f6:56:83:9c:7c:1d:8e:24:82:46:28:9d:70:
db:3b:19:c8:db:44:88:86:3a:13:39:b9:4f:2d:1e:17:19:e5:
71:9f:02:e4:45:8f:ae:50:9a:63:39:4a:13:35:01:ba:fb:54:
7d:9c:45:1b:53:b9:f1:81:a1:b2:1c:1e:d1:46:6b:66:6e:82:
0a:98:2a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABATvO3RVm43wS8bIe0Hh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZGM1MDliNGRiMzUyMDNhYjYxNmY0NzgxZjg1ZGQ1ODYw
NDQzZDgwHhcNMjYwODE0MTYwMDUyWhcNMjYwODE1MTYwMDUyWjAzMTEwLwYDVQQD
EyhmOGZiY2Q1ZTI3MDU2MjMzN2Q5ODAxODI0NTBiY2M1NjZlM2M1YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYfhYNlawT8rr2WBzLwLCvHx/Sag
PURT+lhfg2X5spAm1ZJOCjt2Ipt8Sqttnp0KcsAhnEoKaQ0A+xZ6b9mcJ9pMG7Mp
giVTEdws5U3EAB2L6NW2vFKeaTksM1t62B3ALnHCkjt0dmnHDRzYO2K+gWy5eqf/
fIm7qrVQszPLlQ/WatatrL7muWS8xLwj2kYiauSEssedrAYnxXTumtnDvobomRif
qV9UyKmQztjWKrUpw6QSZ33bFQgLfwFYb6NVQmaQbRc+VaqDc8+jeQABVkDuPZtf
t8OPelMoh6F3A9fNSrUlwegv6Zb6SzvoH+JCDpNE21ONR8+v1lepnrFOLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj7zV4nBWIzfZgBgkULzFZuPFviMB8GA1UdIwQY
MBaAFA3cUJtNs1IDq2FvR4H4XdWGBEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xOTE0ODEtZGJiNy00MDMyLTljNGYt
ODdlNTc1N2I5N2UzLzEvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xOTE0ODEtZGJiNy00MDMyLTljNGYtODdlNTc1N2I5N2Uz
LzEvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIsh+KMK
p49x1ZzTDQqXSFmEI2UXAYOq7zkGhiWFH5HvlvtB2tUswlpyPLp4LDu0X1HB0t+L
bhIb8X1u3WrwzSM5/oAXCGzF0pkb/Cx+xhj9Sac4zxxAiFQlWPa5j8j1nVYrBEnn
ozC+7xF/zaB0nPlMhNl6iXviO0f1t6y+gZALSbia3gK/1p303zf+JmhhI4aGaDld
ANomQcPaGqBLW5asSFI6c3ar9iKmhzNWvWfKnL6huyT3fUL2VoOcfB2OJIJGKJ1w
2zsZyNtEiIY6Ezm5Ty0eFxnlcZ8C5EWPrlCaYzlKEzUBuvtUfZxFG1O58YGhshwe
0UZrZm6CCpgqOw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:03 2026 by rpki-client