Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: pOTiAl0qkRblV8SJN4AiXa+yJeiJ33S2f10zKPiycEI=
Subject key identifier: C0:A9:B7:79:91:CA:5C:5B:5D:FA:0E:46:1D:86:37:0B:C9:F5:77:CD
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 019E30E05B5A290AF5BC66386E66FD736C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 13:01:10 +0000
Manifest this update: Sat 16 May 2026 13:01:10 +0000
Manifest next update: Sun 17 May 2026 13:01:10 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: x4GBTpoU9+4yZMX7Ar8MVjQqwtdsRsHsl9/qqPpSSgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:5b:5a:29:0a:f5:bc:66:38:6e:66:fd:73:6c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: May 16 13:01:10 2026 GMT
Not After : May 17 13:01:10 2026 GMT
Subject: CN=c0a9b77991ca5c5b5dfa0e461d86370bc9f577cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:24:ea:e0:9a:d7:00:ec:ad:f4:39:22:fa:
e5:b0:74:e2:85:b2:07:c1:cc:b4:39:de:31:d4:b6:
1f:f0:f3:c1:bb:e6:4b:4b:cc:4c:c6:02:5a:30:5f:
aa:20:ee:45:cb:e4:dd:1d:3b:12:fd:fe:5c:09:7b:
61:e8:d2:60:bf:59:db:29:84:f7:4f:7d:41:0e:c2:
f8:4f:cd:80:6b:f4:24:6d:07:27:4e:9b:b2:83:e1:
51:ef:5a:9b:48:c7:21:51:58:8a:b3:24:12:1a:17:
7f:6b:24:8c:eb:0a:9a:61:94:9c:a8:4c:55:90:5f:
d0:9d:6f:2b:89:17:02:42:40:7a:6e:19:40:7e:86:
75:2e:e9:a2:54:48:e0:ae:71:c6:bb:ab:c3:01:86:
ed:4c:c1:88:f3:30:5a:b5:03:df:ed:a9:75:4e:c5:
36:f5:89:10:39:da:66:40:aa:f4:47:28:5c:28:0d:
59:fe:05:6c:7d:51:7e:22:9b:a1:3d:90:c6:81:b4:
41:75:2b:d7:87:c6:6e:b9:01:bb:94:24:05:dd:20:
35:f3:d6:ed:7e:f3:d7:79:df:64:89:3c:ed:19:c3:
06:ff:4c:da:c3:42:d2:1a:d6:4c:4b:07:a9:99:d5:
de:86:e4:33:6c:9e:c0:97:ae:8f:16:f5:03:8b:77:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:B7:79:91:CA:5C:5B:5D:FA:0E:46:1D:86:37:0B:C9:F5:77:CD
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:10:ca:29:b2:85:91:1e:b5:30:ea:e5:c0:2e:a5:f9:21:e4:
4e:c7:8d:47:b8:9d:a3:2c:28:91:26:9f:89:94:0d:bb:d7:bd:
5a:0c:f9:62:8d:39:00:dc:8f:8b:83:a6:fb:6b:26:62:75:64:
15:a2:f5:61:3e:71:64:32:03:50:ec:b5:df:0d:1e:02:16:a9:
74:d4:97:10:c7:55:76:cd:d8:51:b8:a3:8a:64:86:42:70:e6:
0d:e9:3e:aa:24:34:c5:42:5c:e7:af:ae:26:41:3a:d5:31:35:
fc:80:01:01:e7:aa:e1:e8:71:16:2a:06:39:b2:29:96:39:2e:
b0:9d:b3:db:9d:cb:e7:d5:ca:1c:f3:a6:cb:96:0d:81:c4:42:
0a:d1:6f:29:62:03:1d:04:2d:9e:22:98:5b:32:e8:11:5c:f8:
6c:9f:f2:f4:a2:27:20:6d:05:79:4f:ff:10:8d:a9:7c:37:27:
12:8b:1c:1b:ab:bd:0d:a5:76:23:23:cb:ee:90:8f:b0:74:71:
19:dc:7c:7e:62:ec:01:14:10:b0:09:78:cc:37:f2:6b:47:e3:
ab:08:21:e0:33:e1:2b:89:49:38:1c:b1:7a:d9:38:ac:6d:8d:
1e:d0:19:3e:69:84:15:f5:9e:5f:77:de:c3:5c:fe:18:bb:ac:
8e:aa:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:35 2026 by rpki-client