Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
File: ddl3qipMEMe0evKt2WgESH4idKk.mft (raw, json)
Hash identifier: 6Zu64XvMC/RY1j04hK64Zk8vEGXSTnawEQvlvIORWl4=
Subject key identifier: 64:2E:EA:E9:5E:26:56:8A:61:3E:6D:E1:A0:EE:67:20:FA:1D:86:A5
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 01A177708A62D3C8200C9646F7D2BC8E9581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
Manifest number: 1ACD
Signing time: Mon 26 Oct 2026 09:00:26 +0000
Manifest this update: Mon 26 Oct 2026 09:00:26 +0000
Manifest next update: Tue 27 Oct 2026 09:00:26 +0000
Files and hashes: 1: 4m7QSckp2ci_fSXpKAEm28535y4.roa (hash: 4475h5maUOx4jCwnFFSO/+38leG2b35wFaPNErJ0ZnE=)
2: V22iJ2-oA6jD1qqMjUeVqFMY1Vw.asa (hash: lFlAhM06Q6fq6BEoaskenJStzfDlyp6oy1M91InEqDM=)
3: ddl3qipMEMe0evKt2WgESH4idKk.crl (hash: MXxGHIzz3Lav7Kq+4PoQixygsMtjY8M6FhjEJQQeSOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:8a:62:d3:c8:20:0c:96:46:f7:d2:bc:8e:95:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Oct 26 09:00:26 2026 GMT
Not After : Oct 27 09:00:26 2026 GMT
Subject: CN=642eeae95e26568a613e6de1a0ee6720fa1d86a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:00:b2:90:96:ac:56:9e:67:9b:87:1f:9c:
3f:5b:98:4e:56:8b:db:b6:b2:55:d6:a9:92:75:aa:
a7:72:3e:ee:fe:0b:77:3d:71:25:f5:27:04:31:fe:
5e:39:f0:5c:23:89:f2:a9:03:55:f5:0f:9d:37:e6:
28:f4:4f:49:b4:90:9a:c6:f1:3a:2f:fb:39:71:d2:
b0:ee:90:17:65:0c:b9:57:6f:b3:98:54:67:c5:1b:
a1:4f:14:51:65:cd:1d:0b:ac:48:7e:86:7a:4a:ae:
cc:4a:df:ee:75:02:5f:69:c9:c7:3b:74:7b:27:01:
7a:12:7f:f1:6f:42:7a:42:32:89:dd:52:20:72:21:
72:5a:fd:9f:cd:7e:f8:c4:be:99:49:19:a0:47:e0:
23:b3:8b:3a:15:3a:bd:b0:f1:07:d4:73:3a:4d:40:
49:b9:ab:51:19:b0:5c:b7:81:e5:c9:0d:49:ac:f6:
26:80:3d:44:ca:29:07:5b:f1:d2:dc:ad:87:24:e8:
ed:c6:69:db:ff:dd:f4:bf:ce:e6:18:1a:38:f9:9c:
2b:8e:78:ce:c8:a7:bf:64:cf:a2:99:39:7b:b8:94:
23:b8:0a:b8:10:91:60:a3:06:af:91:62:9e:b5:31:
ec:00:09:1e:51:f2:e1:bb:9b:ce:6b:8a:bb:b3:98:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:EA:E9:5E:26:56:8A:61:3E:6D:E1:A0:EE:67:20:FA:1D:86:A5
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dc:ed:4f:af:72:64:a3:f3:64:c9:a7:51:28:71:61:52:67:
28:61:9a:0f:28:f9:09:98:6e:e0:e1:8f:2a:69:dc:03:23:03:
85:59:f8:bc:f3:57:b4:eb:64:09:87:f3:d3:df:86:ad:e6:27:
f6:f1:c6:8b:fd:b2:d2:c7:6c:92:d2:fa:2f:4b:cf:3b:39:d7:
92:50:6a:e9:14:ed:f2:a8:37:2d:7b:a3:c0:1c:14:63:f1:09:
52:79:3e:ab:03:9d:71:b8:35:42:f6:7d:46:51:52:bb:ab:e7:
5e:34:ec:bb:14:05:0f:bb:af:4e:53:9a:a9:e7:14:ed:c3:fc:
50:5c:52:30:47:bc:41:1b:ac:c6:ea:31:bb:73:65:ea:01:c7:
fa:84:6a:41:f3:8a:00:f0:a7:5e:14:df:41:1d:33:9f:7d:e4:
92:19:28:5f:dd:5e:08:9a:82:45:f2:a5:d5:6f:4a:83:b3:61:
6a:74:0c:17:a5:c6:70:c1:9e:b9:6f:9c:84:58:7a:5c:b1:c2:
cd:cb:aa:81:4f:29:2a:f9:b5:1b:c5:2e:81:7e:45:a7:f5:0a:
d2:0c:ba:b9:85:fd:13:3d:77:f4:55:ca:f4:5a:43:1c:e9:77:
d9:08:4c:39:b7:46:b7:53:5b:eb:e6:03:e7:81:5d:8b:ba:65:
32:8f:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:34:57 2026 by rpki-client