Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: D0G6nFS02wzJWLFdZo+56pjZMltjKX3XkcSoC3TyMPk=
Subject key identifier: F2:5B:FB:D4:8E:7D:D3:DE:DA:AA:00:BB:A4:84:5C:E2:0E:85:6F:FE
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 01A0005CFE0C7B8EA0850C7240B4490E26D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 13:01:29 +0000
Manifest this update: Fri 14 Aug 2026 13:01:29 +0000
Manifest next update: Sat 15 Aug 2026 13:01:29 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: lCj4XO8xo5yOHK5JsMngnXPQSRYYXc6Qziz6po49cn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:fe:0c:7b:8e:a0:85:0c:72:40:b4:49:0e:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Aug 14 13:01:29 2026 GMT
Not After : Aug 15 13:01:29 2026 GMT
Subject: CN=f25bfbd48e7dd3dedaaa00bba4845ce20e856ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:02:59:69:51:91:bd:aa:51:9c:15:05:d5:
60:9c:ee:51:be:52:86:05:6c:13:90:93:ce:47:7a:
35:2b:01:7e:fa:f5:a0:d7:57:e5:31:7c:9e:7f:26:
1d:88:61:ce:a3:f4:7a:2c:40:6c:ed:94:7b:8b:87:
2c:07:2f:cb:d3:7b:a3:fa:20:1f:86:8c:39:8d:39:
e6:dc:62:e5:b5:96:68:95:97:d4:cd:1a:a2:92:b9:
df:b3:69:ca:28:02:41:be:b6:a6:03:9f:e5:ae:b9:
55:bc:fd:d8:4c:c1:d3:e1:78:fe:8b:9f:9b:5d:1d:
33:13:fe:47:66:ff:bd:a2:64:85:fe:04:67:4c:94:
c1:86:a9:10:9b:ba:bf:b6:a9:32:e3:97:6a:ae:30:
59:0f:e3:8b:0f:d9:89:48:26:4a:ce:90:0b:1a:46:
8c:f3:36:06:a1:69:01:9c:22:c5:b6:d6:1d:0e:23:
af:b0:aa:9c:63:9a:76:e7:32:ab:d4:30:c9:6f:56:
2d:0b:fd:78:73:bd:83:d0:0f:61:40:17:a3:78:5f:
99:ed:2f:a4:9a:98:8b:d2:b3:ee:51:aa:e0:c5:7f:
86:f5:cc:65:25:fe:9b:b2:f5:e7:d6:da:ba:e5:48:
b9:93:24:63:e1:4d:df:c3:bf:39:a1:b4:a0:03:93:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:FB:D4:8E:7D:D3:DE:DA:AA:00:BB:A4:84:5C:E2:0E:85:6F:FE
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2c:00:86:d9:13:45:e4:f0:78:9a:28:aa:1f:9f:1a:7e:f2:
fd:90:f1:f4:4c:72:49:ca:ed:8f:df:bc:b9:9b:df:53:ac:d9:
e4:79:40:0b:1e:e2:5c:96:91:73:c4:96:d0:ec:98:3f:0f:1e:
a1:04:a0:88:31:47:a9:df:23:5f:a1:69:d4:4e:a6:d3:c6:b7:
f6:0a:db:0d:c5:25:8b:64:ca:13:2c:aa:8c:e8:de:b4:d3:d2:
56:38:54:ef:5f:f3:4b:ff:6d:c9:5f:74:c5:21:33:37:b0:07:
17:4c:c5:b7:d8:e8:21:88:c8:bd:e8:65:57:83:be:28:59:36:
05:ab:83:ab:99:05:a8:4c:a2:f5:33:66:14:a4:ef:a6:bc:57:
f5:90:b3:79:4a:3a:99:1c:98:05:4f:b0:9c:1d:d6:8b:8a:8a:
5c:28:21:b4:45:3c:ae:b2:3d:48:36:ba:c7:59:59:48:ee:0f:
d2:aa:49:7b:01:4c:3e:4c:3f:ae:5a:30:3d:3b:a0:ea:ce:19:
2c:33:2b:32:1c:66:51:87:6e:1b:25:1c:b2:e9:68:91:1d:63:
af:8a:b5:c6:95:b5:c8:e1:7a:d8:3a:be:c1:5e:c2:72:38:e9:
5a:2f:ee:fd:74:22:9d:81:48:55:11:cf:9c:52:53:4e:73:7e:
2a:c5:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:30 2026 by rpki-client