Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: PxqOmY+dSfxcUDCOlCm61Dbn9uDHjS/TMN1iUm6jrQE=
Subject key identifier: 25:EA:3B:9F:A8:28:AE:45:BD:D4:3D:56:66:DE:F2:A0:52:8B:9C:02
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 019D38D2F22F64CFE59117A50036870FD8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: FVJvxWTCGcAMNcDd6NtM5deR1wdAd7Xq+pn705UXHsM=)
2: b85PS3H30eMs5XV1Zj_5kBi4YS8.roa (hash: ADteCFtgyfMf5jEQhYpSnrBciRI5sXi17xBqTjm3R+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f2:2f:64:cf:e5:91:17:a5:00:36:87:0f:d8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=25ea3b9fa828ae45bdd43d5666def2a0528b9c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:b1:60:a3:8b:00:79:14:cb:82:11:a8:6e:
0e:1a:44:61:95:3b:7c:8a:52:9e:0d:da:c1:b4:5c:
e5:ca:d8:56:0d:65:ad:34:8f:8a:d4:3c:9e:41:40:
92:d7:8a:45:64:27:6a:07:43:03:0e:8a:fa:9d:70:
37:6e:a2:d3:dc:b2:b3:71:4b:a9:ae:4a:12:e2:24:
f2:51:1f:a8:1e:b6:67:00:fc:e7:d9:93:32:a6:14:
dd:66:53:c6:3b:d4:2e:ed:d3:75:53:7b:12:ab:60:
6c:c6:1c:2d:8e:6a:2e:38:8e:37:93:ca:46:1e:c5:
64:e1:85:7b:77:03:8e:aa:79:4e:63:e9:36:8f:c0:
80:1c:2d:fe:c2:39:b0:9e:ea:d8:80:11:15:eb:bf:
e1:89:41:67:45:0a:8f:3a:08:c9:9d:9e:e4:12:da:
15:c6:da:cf:3c:0b:1c:c3:41:64:c6:80:3b:80:27:
1f:b0:2f:ac:68:a7:0e:fa:a1:5d:dd:9e:93:21:20:
05:8b:37:9a:29:d4:4d:8c:69:46:c9:b3:72:5f:f7:
4e:92:6e:02:99:16:8e:1e:9b:d7:e8:bc:90:c6:24:
ff:ee:c1:78:bb:2b:aa:78:78:4b:ce:db:94:eb:05:
4d:01:e6:b5:ab:42:cf:23:26:e8:7b:12:ea:fb:10:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:3B:9F:A8:28:AE:45:BD:D4:3D:56:66:DE:F2:A0:52:8B:9C:02
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:98:8e:bf:42:8d:85:5e:c0:2e:08:44:86:c2:be:36:b0:a6:
ce:4e:23:11:ff:1a:ae:6b:45:b4:5e:1c:c2:7e:1f:d2:87:a1:
41:3d:23:e8:02:98:ac:94:98:e1:ab:f4:d7:38:92:1b:66:69:
aa:a8:80:28:b2:ae:95:09:4a:c4:7d:37:82:42:01:6b:21:de:
8b:20:66:72:ae:27:7a:76:14:78:0d:89:55:b6:7b:a6:de:be:
76:77:70:8e:3f:6e:25:a2:0c:5e:1d:18:ed:fd:cf:ac:d3:15:
3c:b2:46:02:da:f5:8d:32:4a:1d:0f:af:49:45:53:44:52:65:
26:b0:e5:60:b8:36:02:91:26:04:5a:71:fa:4c:73:6e:bd:f5:
f8:2d:df:37:6a:67:b0:49:08:7e:85:a2:b0:84:c1:3a:d9:09:
8a:74:55:97:29:95:d4:a3:6a:fa:62:54:b4:f7:7e:bc:87:8c:
cf:5a:8a:00:26:48:5a:ef:bd:73:52:3b:5e:75:dd:dc:4c:f2:
1f:f3:66:68:f4:db:35:2f:28:2c:94:83:f3:2c:40:45:72:ea:
75:1e:bf:2b:2a:a5:bc:67:c2:00:5a:b0:98:6a:83:85:13:0b:
72:61:21:e3:17:20:70:3f:11:4f:38:7b:2e:3c:1c:3d:97:a3:
95:a2:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:34 2026 by rpki-client