Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: gbkEyQVTGrDuNT9T/5FWYRLSVMI5yGfSc7NAqBY8Gx8=
Subject key identifier: D9:97:A6:51:DB:41:5A:CB:D9:78:23:05:DA:71:5F:BF:03:AB:A9:82
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 01A113AA88911A481F726ABE1C505605AE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 1A8D
Signing time: Wed 07 Oct 2026 00:01:45 +0000
Manifest this update: Wed 07 Oct 2026 00:01:45 +0000
Manifest next update: Thu 08 Oct 2026 00:01:45 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: eLPutnyXfw7TusoFHPx+EQBGbOCp4nPeIQD02g8pc+A=)
2: b85PS3H30eMs5XV1Zj_5kBi4YS8.roa (hash: ADteCFtgyfMf5jEQhYpSnrBciRI5sXi17xBqTjm3R+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:88:91:1a:48:1f:72:6a:be:1c:50:56:05:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Oct 7 00:01:45 2026 GMT
Not After : Oct 8 00:01:45 2026 GMT
Subject: CN=d997a651db415acbd9782305da715fbf03aba982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:20:47:e0:cb:87:4b:0b:b0:15:9e:f1:a8:
80:93:d7:70:be:bb:d4:5a:8a:c7:6b:f8:5f:a6:90:
ec:f4:2f:66:1b:46:3d:f5:2e:0a:86:69:e6:4d:e7:
5d:2b:be:ff:55:04:1c:fa:c1:3d:ed:68:98:bd:de:
93:97:cb:b8:99:8b:2d:2e:38:50:b7:7e:25:ef:90:
d5:71:cc:87:23:47:8b:7f:d3:52:0c:83:57:f7:60:
ac:0c:47:51:25:42:38:20:bd:16:63:26:fc:ed:6e:
d6:c7:0d:a9:3e:7b:ee:d2:82:aa:63:25:c0:e2:e6:
16:7b:5f:d3:58:1c:00:1c:54:6b:5b:e2:ae:19:e0:
86:da:96:31:c9:38:22:07:4c:8c:72:03:16:34:90:
d1:8f:41:b3:c6:43:9f:f5:41:12:81:5d:b9:67:dc:
42:af:4c:99:8e:12:46:e9:31:9d:c4:35:50:88:65:
75:9a:df:74:7c:4a:cc:05:dc:3b:14:b7:83:4f:fb:
0b:66:e3:48:03:70:78:10:99:19:10:09:e9:d8:55:
cb:33:2f:9e:c5:7c:b2:47:e1:48:07:4f:1c:51:66:
4b:09:0d:a7:53:c6:5e:56:c9:10:92:f5:8e:2e:04:
ae:df:52:31:1f:cd:9a:43:2b:53:3b:ef:26:b0:a7:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:97:A6:51:DB:41:5A:CB:D9:78:23:05:DA:71:5F:BF:03:AB:A9:82
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2a:f3:19:39:d8:71:1e:a5:0a:31:05:fd:d2:45:45:dc:a3:
c5:1d:11:80:fd:d8:40:73:3d:43:59:6e:57:63:03:8b:2f:5d:
93:d9:c4:8a:6a:05:cc:38:dc:a5:66:f8:af:2a:dd:4a:1a:49:
8c:b7:bd:cf:77:20:08:56:25:d8:68:a4:a6:3c:64:fc:0f:e3:
f5:d9:34:a3:e3:44:c9:be:92:c0:2e:67:f2:60:53:6f:8b:60:
5b:93:d9:ee:f5:8a:19:bb:69:2e:61:82:46:f9:99:80:3b:54:
71:5d:d1:f0:0a:01:ab:dc:0b:ec:cf:9e:8c:bc:e6:ed:29:70:
33:06:cb:de:b4:e6:79:1d:5d:52:c4:b9:f2:cb:70:49:7d:d1:
c4:8d:16:da:b2:3f:30:a6:60:65:60:dc:0e:3e:47:62:eb:74:
63:88:ea:08:82:55:0f:af:09:86:79:58:e9:a7:27:e9:31:9b:
28:e3:fc:14:4d:6e:1e:66:45:30:70:05:4a:66:4d:ca:f9:66:
2a:81:2b:9f:9d:4d:f6:39:71:d5:e3:e0:33:1c:aa:a5:2c:ac:
96:77:f7:01:7f:b2:2c:55:37:81:f6:3f:90:26:ca:1c:bf:aa:
c1:3f:90:6c:0a:b0:91:10:9a:a7:55:1e:1f:e1:ff:a4:64:57:
e6:13:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:02:04 2026 by rpki-client