
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: qG+HDiyLp8r9EuDUc21wNNYnPGlaRj1x1vJtxja0P9Y=
Subject key identifier: C6:94:41:61:0A:56:AB:B1:C0:01:08:E0:95:0A:BB:BF:C4:BC:0B:46
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 01A13FA7338035AD30DAD3D84D73C864CC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 17DD
Signing time: Thu 15 Oct 2026 13:01:24 +0000
Manifest this update: Thu 15 Oct 2026 13:01:24 +0000
Manifest next update: Fri 16 Oct 2026 13:01:24 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: a/QGgF4f3F3g++wH9cSW5rtr0X0O2BNidi4AxBcHPlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:33:80:35:ad:30:da:d3:d8:4d:73:c8:64:cc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Oct 15 13:01:24 2026 GMT
Not After : Oct 16 13:01:24 2026 GMT
Subject: CN=c69441610a56abb1c00108e0950abbbfc4bc0b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:08:90:6b:3e:69:87:7c:31:c2:89:d3:8d:
0e:34:7b:d4:4c:cc:07:11:c2:72:da:73:19:02:20:
5d:7e:72:da:4d:a8:89:db:bd:44:9e:5a:1c:e5:d9:
cc:39:0c:e5:4e:54:9b:fd:6e:0a:02:db:4c:0a:88:
54:2b:91:90:30:00:6c:82:72:23:df:61:58:56:08:
05:ca:80:63:40:1d:85:00:6c:98:32:62:00:a7:b3:
90:d5:cc:37:48:d1:23:f7:40:27:b3:c0:61:40:aa:
59:54:9d:4f:20:ab:26:de:49:d1:32:74:8a:78:07:
d6:ce:e2:03:d3:24:08:7d:3a:20:f4:b9:d0:1d:01:
6a:aa:85:65:da:60:83:59:db:d7:07:a9:25:4d:3e:
a0:bb:ed:a9:c3:07:08:e1:91:10:e1:d6:13:51:9b:
45:00:f1:4f:5c:84:c3:55:c6:cd:5d:69:df:f3:54:
e6:13:2f:ac:fc:fd:94:d6:84:e8:c0:fa:92:a4:51:
f0:d4:a2:21:83:33:d2:54:0f:7d:39:14:42:c5:7f:
92:3b:41:7a:39:6f:41:d5:bb:ac:f3:50:53:37:ba:
a7:38:24:64:67:92:f6:97:5e:d9:fe:97:62:a4:b7:
71:7c:8e:cc:e2:39:70:5b:50:94:16:1c:3d:90:4a:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:41:61:0A:56:AB:B1:C0:01:08:E0:95:0A:BB:BF:C4:BC:0B:46
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c4:74:41:0a:e3:9f:a6:e7:55:86:f8:52:04:72:b7:60:3a:
2d:4f:99:44:76:2d:43:af:d0:bd:0a:c0:9d:d9:1d:5f:b6:32:
d1:11:3b:d9:01:f0:17:4b:7c:20:57:5c:07:8f:86:a5:2e:5a:
55:f3:0b:b3:f7:80:43:0e:41:e8:57:00:ea:6c:70:15:f0:03:
ed:80:b5:d4:e6:87:eb:14:44:f0:41:ab:e0:97:09:11:44:68:
e8:7e:1c:0f:b3:d5:03:89:4c:89:36:11:1f:c8:e3:5e:5e:e8:
e7:d9:a5:81:46:0b:5e:41:a6:b0:1a:31:bc:ce:84:61:2c:9a:
15:e1:01:58:e9:69:97:e0:af:ce:d8:47:87:05:1f:e3:9b:6e:
f6:6d:8a:b9:67:e8:ad:09:65:ba:57:90:c4:ad:bb:63:8e:28:
0f:01:f2:f9:bb:e5:53:d7:29:c0:e3:df:ed:e5:f2:7c:33:94:
84:b8:6d:a3:78:23:6e:1d:d6:d9:37:28:60:9d:16:e8:c9:ca:
ad:27:d9:8e:27:a5:4c:c0:b0:97:f6:f3:04:11:90:e7:fb:7b:
d1:7f:a3:a5:4b:66:59:37:0c:a8:4c:1f:cc:2b:88:4f:05:e9:
29:b9:aa:9d:fb:bd:17:41:07:c0:36:18:b9:35:c3:77:67:26:
32:92:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:10:43 2026 by rpki-client