Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: dwFF+JZ3XWMuQpg+remneJxR6POc7ixKa0vnX2lvup8=
Subject key identifier: E4:DD:3C:96:BC:77:5A:71:66:D3:1D:1A:43:CF:EA:EF:58:B9:D0:FE
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 019F189E5497C7B5533DBFA9DB618BCFF449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 13:00:57 +0000
Manifest this update: Tue 30 Jun 2026 13:00:57 +0000
Manifest next update: Wed 01 Jul 2026 13:00:57 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: 19HzCoxymhRmq6VXy0PesvG/pm06QneJPHRFjbftk78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:54:97:c7:b5:53:3d:bf:a9:db:61:8b:cf:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Jun 30 13:00:57 2026 GMT
Not After : Jul 1 13:00:57 2026 GMT
Subject: CN=e4dd3c96bc775a7166d31d1a43cfeaef58b9d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:ab:f8:19:95:ff:57:94:f1:5d:ad:73:77:
79:e8:ae:af:e9:93:e4:31:0c:d6:df:07:a9:12:e9:
1e:99:da:24:07:d4:72:06:d5:8e:e4:48:59:f8:59:
e0:99:af:48:8d:56:a8:98:39:9c:1e:8c:2f:b4:2c:
a5:2a:70:3f:e7:e4:1f:0a:35:eb:e9:41:14:56:fe:
b1:71:7d:3e:08:64:49:15:41:35:33:26:76:15:88:
d0:aa:ee:3d:37:dd:58:29:97:20:9a:09:30:ed:2c:
88:c3:c8:5b:2b:29:4e:6a:7d:0b:94:92:28:cf:81:
41:eb:f5:5f:58:b6:56:cf:a8:0f:1b:e2:54:7d:78:
e7:4d:b8:a9:13:c2:9e:f1:85:b7:6f:fc:e8:aa:72:
29:5b:5e:e1:e6:ae:c7:a9:0d:71:ca:6d:f0:5f:10:
ca:5b:4a:6c:a5:58:7c:7d:ef:8d:e8:44:a7:6e:6c:
3b:fe:0e:81:7f:74:2a:67:b9:7e:76:f5:0e:19:74:
75:39:c1:6d:92:07:2c:a2:f2:45:47:45:1b:f2:c3:
08:78:45:5b:16:3e:a0:ab:ce:53:eb:f3:9d:fc:0d:
98:10:1f:a1:25:73:68:c6:d8:e9:d4:09:81:a8:33:
99:d0:cc:b6:0c:12:22:02:78:89:10:d6:96:cb:6d:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DD:3C:96:BC:77:5A:71:66:D3:1D:1A:43:CF:EA:EF:58:B9:D0:FE
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:27:38:7f:80:bc:9d:9f:72:0b:d8:10:c6:1f:97:0a:4b:58:
c5:50:d8:4f:6e:11:30:9a:4e:25:10:41:05:53:45:01:f7:4f:
02:3e:26:8a:39:0e:9b:4f:b7:ca:54:df:d4:77:e1:9f:fc:af:
d0:6a:76:b5:4a:87:63:70:aa:d2:b5:8d:9f:52:94:7a:e8:a1:
96:50:b2:cb:73:24:23:8d:66:ae:da:12:ce:dd:9c:c0:fe:6f:
fe:be:c5:1d:04:ca:22:7d:32:2f:c5:d8:08:7b:cf:7e:37:83:
87:6f:e2:9b:1a:3c:e2:75:25:67:81:df:eb:ce:48:4d:33:24:
bb:87:b1:e6:44:58:e8:9b:6d:7c:04:71:48:12:d3:67:6f:94:
58:ba:c7:5c:43:da:d8:b5:ef:a0:eb:b4:3a:05:5c:5d:31:a5:
7c:db:ed:57:59:9e:40:fc:a3:8e:b9:82:8d:b5:1f:62:d4:57:
7a:c2:60:ff:99:60:0a:a5:21:0d:a3:10:f0:44:40:80:62:40:
a5:10:67:14:86:35:6b:d6:73:ba:a0:8b:cf:75:90:08:e0:09:
2c:8d:c0:b0:4e:65:62:68:cf:2d:a1:45:d5:8f:66:c9:3e:6f:
f8:91:ec:e5:b8:24:8f:6f:3b:cb:cb:64:db:37:a5:a2:07:26:
35:ae:8f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnlSXx7VTPb+p22GLz/RJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDgxZDM1ODhjN2UxMGE4OTliMGQwNDgxNTY2ZTZkOTQ4
ZGFkZDAwHhcNMjYwNjMwMTMwMDU3WhcNMjYwNzAxMTMwMDU3WjAzMTEwLwYDVQQD
EyhlNGRkM2M5NmJjNzc1YTcxNjZkMzFkMWE0M2NmZWFlZjU4YjlkMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Or+BmV/1eU8V2tc3d56K6v6ZPk
MQzW3wepEukemdokB9RyBtWO5EhZ+Fngma9IjVaomDmcHowvtCylKnA/5+QfCjXr
6UEUVv6xcX0+CGRJFUE1MyZ2FYjQqu49N91YKZcgmgkw7SyIw8hbKylOan0LlJIo
z4FB6/VfWLZWz6gPG+JUfXjnTbipE8Ke8YW3b/zoqnIpW17h5q7HqQ1xym3wXxDK
W0pspVh8fe+N6ESnbmw7/g6Bf3QqZ7l+dvUOGXR1OcFtkgcsovJFR0Ub8sMIeEVb
Fj6gq85T6/Od/A2YEB+hJXNoxtjp1AmBqDOZ0My2DBIiAniJENaWy21XiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTdPJa8d1pxZtMdGkPP6u9YudD+MB8GA1UdIwQY
MBaAFA3YHTWIx+EKiZsNBIFWbm2Uja3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzkt
Yzc2YjhkYjVhZDE0LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzktYzc2YjhkYjVhZDE0
LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSc4f4C8
nZ9yC9gQxh+XCktYxVDYT24RMJpOJRBBBVNFAfdPAj4mijkOm0+3ylTf1Hfhn/yv
0Gp2tUqHY3Cq0rWNn1KUeuihllCyy3MkI41mrtoSzt2cwP5v/r7FHQTKIn0yL8XY
CHvPfjeDh2/imxo84nUlZ4Hf685ITTMku4ex5kRY6JttfARxSBLTZ2+UWLrHXEPa
2LXvoOu0OgVcXTGlfNvtV1meQPyjjrmCjbUfYtRXesJg/5lgCqUhDaMQ8ERAgGJA
pRBnFIY1a9ZzuqCLz3WQCOAJLI3AsE5lYmjPLaFF1Y9myT5v+JHs5bgkj287y8tk
2zelogcmNa6PoA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:21 2026 by rpki-client