Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: MmniWMuO0x558eCzY0/TlZ4JshBiccSyY35S4KXUmts=
Subject key identifier: 72:99:7E:64:45:7C:BC:77:1E:EA:87:37:5F:A1:A1:F4:1D:D6:59:CA
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 019D37F73D0AC4597704052711F29B3E0DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 17FC
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: 4Bl/c8Q+gBZ8tWwt83yXGfkQsuxV7mGojg+28oUc7Ns=)
2: vlU7MThRMcM5l45F8U78i6lhKzc.roa (hash: ImIAss3fsNynMybP2S9MkVXm/vknMWnZDrA4b7/hzEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3d:0a:c4:59:77:04:05:27:11:f2:9b:3e:0d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=72997e64457cbc771eea87375fa1a1f41dd659ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:95:90:22:14:34:1e:86:f9:53:7d:03:a5:
55:4d:d8:a0:20:18:41:a8:fd:b3:ae:30:f1:eb:7c:
7b:60:3f:90:11:16:b3:e4:36:5b:d7:ae:3c:24:50:
5e:08:1e:7d:4d:cb:7c:71:49:94:4c:1f:f6:1c:b4:
9a:05:65:d5:3b:49:a1:33:40:94:b8:86:46:5e:c2:
f7:2e:9b:e0:f9:3a:87:45:4d:83:e0:2f:b5:94:f2:
a7:76:08:bd:5c:2a:da:2b:da:03:4e:17:b8:11:63:
c3:6e:57:7c:ad:0d:a3:d5:61:13:f1:1c:b9:7a:14:
4f:a0:ca:80:f3:4d:92:a7:62:f1:4e:a4:07:10:ef:
ba:1c:d8:49:d3:8c:b1:88:d1:35:83:49:e2:53:1e:
60:a5:8e:74:96:87:85:f3:2e:fe:c9:d1:4c:ae:af:
ca:df:74:bb:6f:4b:30:8b:dd:57:2d:c7:02:98:c4:
3f:fb:34:0d:c0:00:d1:d6:d6:36:76:ab:eb:d2:c6:
e1:f6:26:a7:45:6a:c4:e2:15:64:4e:12:70:fa:e6:
c5:84:bc:b8:5d:36:ba:68:2b:95:a3:61:8d:f4:b7:
8b:09:7f:cb:f4:b1:bd:0f:e2:ff:66:e8:36:80:2f:
56:90:d8:64:d9:22:f5:c7:95:95:c7:cd:4f:fa:4c:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:7E:64:45:7C:BC:77:1E:EA:87:37:5F:A1:A1:F4:1D:D6:59:CA
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6b:e9:85:56:40:55:f2:33:cb:28:f4:67:f8:a6:75:95:2b:
c8:2a:62:0f:3d:91:9b:84:16:28:9a:da:26:30:89:8e:5e:fd:
f0:3a:19:be:80:1e:12:87:33:3c:98:8e:5a:ea:4a:8d:0d:f7:
98:46:32:95:63:e4:1e:71:4e:32:04:16:77:ee:94:aa:b2:6a:
62:88:f8:ed:78:4b:5c:b0:55:15:c0:fc:48:45:6e:61:b3:1d:
63:22:c1:25:cd:76:6d:48:41:69:0f:a2:69:39:4f:62:d5:af:
54:b3:8c:92:57:da:44:58:f5:f6:ce:9a:4e:cd:c7:12:75:a4:
af:3a:f6:98:f4:8a:66:cf:b8:75:ef:ca:e7:39:71:26:07:71:
00:13:6a:cd:62:e2:bc:ac:74:b2:61:3c:be:c8:0a:c1:fb:32:
0c:e7:9b:ab:cb:ef:ed:dc:8a:6e:83:c0:eb:ad:4f:d8:92:46:
a1:3a:b6:df:60:41:1d:c8:83:d2:c3:c2:f1:9f:48:bf:6a:1c:
f6:0e:7f:6e:88:1b:df:8d:fa:04:e8:b2:40:92:09:c1:6a:e8:
58:9b:1e:23:64:ec:b6:9a:38:6a:83:28:f8:38:42:71:d3:e9:
9a:3b:78:12:d1:f8:e2:41:41:6f:00:5b:2c:96:34:1e:3d:38:
89:8c:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:43 2026 by rpki-client