Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: SfyYOEBpHykJJuxrufzYL3D4RvjsP3lHugfCNjgdLVE=
Subject key identifier: AD:0D:90:9B:37:56:B7:23:88:ED:CE:35:F2:D1:0E:11:48:F0:63:AD
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 019D386590BC6DADD4F72ABC7C71241143F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 15C7
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: F4zm+cjvuwhIEAVQh+CI9dk5ccFtNMlPoRvakVRjIAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:90:bc:6d:ad:d4:f7:2a:bc:7c:71:24:11:43:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=ad0d909b3756b72388edce35f2d10e1148f063ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:9a:af:de:ab:10:67:d1:2f:31:6e:73:a9:
ac:c4:22:fd:1c:e2:e2:64:64:db:95:4c:93:56:ae:
04:88:da:f1:b9:69:b1:31:d5:7f:68:c8:05:57:94:
67:9e:07:d8:fb:c7:69:32:6c:c2:87:d8:59:bb:22:
47:ae:87:a9:d9:43:fc:5f:e4:47:fb:d6:c4:29:72:
ee:4c:79:bc:92:f6:7d:97:9b:b6:3c:d4:39:18:9f:
7b:db:20:7a:2c:19:5f:37:58:be:63:a3:c3:c9:c1:
b9:50:dc:4f:00:1f:a1:2e:dc:18:6c:20:5b:05:49:
9c:f0:58:f4:1c:16:8f:28:5f:cc:2a:42:34:0e:19:
1d:1e:1b:a2:ce:81:7a:2c:5d:1f:82:08:9d:39:81:
70:4d:0b:f0:f9:6f:e5:c7:04:a1:9b:88:ba:85:d9:
f4:5c:38:16:6c:fd:c3:f7:c6:d0:06:10:2b:11:84:
b9:ff:88:73:cc:1d:f3:e2:dd:07:e1:fc:58:17:c0:
5d:43:25:2e:38:1f:72:99:c9:0a:34:79:5e:e1:02:
a2:4b:87:9c:65:8a:0e:51:c8:f8:6e:53:a3:c2:8b:
83:08:4d:b3:15:11:ee:18:57:c8:8d:2c:05:2d:98:
1a:34:19:fc:c1:00:62:94:cb:5d:48:b7:87:fa:be:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:90:9B:37:56:B7:23:88:ED:CE:35:F2:D1:0E:11:48:F0:63:AD
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:20:a6:4e:ae:db:26:25:2f:e9:af:ef:95:66:44:7e:69:b2:
bf:61:6d:4d:c4:46:cd:d7:03:3c:97:94:f1:5e:01:71:b2:ce:
8c:46:be:3f:95:cd:a9:e4:6c:2c:3e:39:bd:59:a0:ff:2b:77:
6d:09:ed:74:cd:e8:ae:10:f6:a8:03:a5:c3:9f:42:76:17:63:
b0:ca:e1:b1:d3:49:1a:dd:70:74:49:d8:2c:5a:03:3c:c5:aa:
20:f2:79:39:02:4b:f0:05:2a:3d:ee:2f:ee:60:e3:7c:8c:db:
07:53:1a:0e:2a:95:f8:1a:9d:42:68:80:f8:97:30:d3:db:dc:
f9:1f:97:59:5a:36:eb:7d:9d:2e:14:e9:d9:65:36:64:d8:4a:
b3:00:05:03:70:a0:8e:df:92:43:c9:0d:d9:fd:d5:64:d1:8c:
95:93:b3:1d:25:c6:c3:63:5a:e9:90:e1:5a:e1:40:4d:b2:63:
ef:df:33:ef:40:f2:13:4c:bb:89:3c:c0:e0:18:d5:e8:0c:03:
88:88:6a:23:24:52:35:56:4d:46:e7:1f:d0:9e:cf:46:05:0d:
34:32:40:0b:1b:9d:17:51:88:2e:f0:51:b4:d0:89:61:ae:21:
3b:4c:04:f9:67:2c:bc:b6:55:bf:b5:e2:bd:d1:5c:c0:4b:30:
ad:e6:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:04 2026 by rpki-client