Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
File: ddl3qipMEMe0evKt2WgESH4idKk.mft (raw, json)
Hash identifier: 7zNCZXfVkGxG7/SgM6fDhTwL1F44mHDTU8jvFQ6u/9w=
Subject key identifier: 79:02:96:44:F5:A6:66:F1:14:A2:A7:07:6D:84:25:80:21:AF:66:D7
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 019FA18498012DFBD91DADB04999AA0B74B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 03:00:49 +0000
Manifest this update: Mon 27 Jul 2026 03:00:49 +0000
Manifest next update: Tue 28 Jul 2026 03:00:49 +0000
Files and hashes: 1: ddl3qipMEMe0evKt2WgESH4idKk.crl (hash: 6qO8ws84rL6uMKFxiAkgbJPVmYNFHdGTgyhPzKqohrc=)
2: loApgUuhhUyY_cfPzGEHPAhUKDo.roa (hash: 0LTaxDqD8Hr++G5h4F+by4f48kCJnGS42cv5zu1L9RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:98:01:2d:fb:d9:1d:ad:b0:49:99:aa:0b:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Jul 27 03:00:49 2026 GMT
Not After : Jul 28 03:00:49 2026 GMT
Subject: CN=79029644f5a666f114a2a7076d84258021af66d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:d0:66:cb:a6:cd:1b:45:8a:05:5f:f7:22:
ba:38:ec:40:28:4a:7c:06:29:f8:47:57:a2:aa:a2:
9f:e2:f7:6f:13:5a:09:5a:6f:e9:81:1f:8f:9a:99:
09:0c:75:47:bf:91:35:fd:c4:38:08:fe:ec:53:bf:
e1:02:7e:4c:3a:7d:c3:bb:6e:e0:b6:ba:5a:3a:6e:
1f:21:d0:a7:1a:ff:d6:e1:fd:e5:16:83:52:0e:70:
0a:87:fe:3e:9d:1b:9a:69:74:0e:52:72:f0:bc:cc:
e8:9d:b8:a2:32:ac:dd:47:e7:64:35:84:b3:67:d4:
1a:fc:94:e8:f6:d8:3c:dc:0a:cc:d8:d9:f0:1c:95:
3f:e2:3b:3c:fc:b9:47:2e:1d:b6:b9:0a:c7:9a:80:
54:7c:ab:9c:7d:82:08:f7:fd:cf:34:8d:97:95:0c:
47:93:dd:85:a5:fa:1f:11:a9:08:4f:06:14:06:3b:
a0:5a:61:12:40:00:2d:c3:88:6c:e1:3f:9b:3c:7b:
38:b9:50:bd:4e:63:ba:3a:be:bf:18:cb:8d:49:a2:
c7:21:c9:33:e4:08:52:41:61:be:83:a4:e6:a8:5d:
be:7a:e5:3c:b7:98:c5:ec:63:d4:5b:07:a9:6a:3f:
5f:80:bc:b3:78:c8:c2:2a:e5:a9:8b:a7:c1:4f:ec:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:96:44:F5:A6:66:F1:14:A2:A7:07:6D:84:25:80:21:AF:66:D7
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:54:ed:c5:ab:34:ca:fd:99:fd:10:41:31:e3:68:64:b9:eb:
87:96:38:2a:0f:73:1f:0b:e1:de:de:4a:3d:78:5e:d5:39:99:
1a:44:ac:94:12:e0:52:c3:02:26:63:6e:9b:e7:81:b7:c4:ad:
be:d4:57:24:8a:da:9d:51:08:60:45:09:2b:ee:a4:5d:9f:8c:
45:b8:8a:3a:9b:14:96:3f:e2:32:15:8a:7c:20:b3:a9:0d:f1:
65:e4:9c:91:0d:68:8a:3c:2d:5a:0d:f9:13:1a:1d:18:b2:b4:
0b:a5:19:3e:51:2c:db:47:7a:1a:e8:6a:50:ef:cf:d8:20:2d:
ec:e5:1e:b0:81:32:cb:d1:93:f7:e6:ab:cd:cb:20:a2:f1:78:
7f:5d:79:0d:42:52:ff:33:ff:69:f2:a4:84:45:57:c9:57:82:
c9:c4:73:08:f5:60:2f:5b:cb:2b:11:41:7c:d4:6a:ad:aa:8e:
bb:9a:de:3a:94:74:f9:b2:6a:df:d2:4e:eb:84:b0:15:29:b9:
03:55:4c:9c:92:1a:62:05:3f:c4:b5:b5:6d:d1:9a:e8:04:08:
13:27:8b:77:53:96:62:02:82:46:61:1a:9d:aa:0b:f3:6d:65:
a2:34:f8:3c:ef:88:a1:4f:40:13:d0:20:e7:31:93:1a:6d:78:
1c:6e:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:26:17 2026 by rpki-client