Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: Nzfynu0gj4hB12VbGsGkti5qRXWMR1empH7vgkb3m8M=
Subject key identifier: 99:4B:3C:C4:03:27:3E:A6:A0:E5:9B:DC:40:29:47:87:EE:84:8D:2B
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 019D3752F23B9EC370568B7BC7F5DC0CA0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: 03CC
Signing time: Sun 29 Mar 2026 02:01:15 +0000
Manifest this update: Sun 29 Mar 2026 02:01:15 +0000
Manifest next update: Mon 30 Mar 2026 02:01:15 +0000
Files and hashes: 1: LWo5SwQvtARyJWncO-TRzt7E95c.roa (hash: 9wNniYqROde6rynnX9MuzaL+IyWSUXFFKAJlRzpQMXA=)
2: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: SRF25zFq5zWZjqnSnLsZaU0XKKjPgg+t3q8vs9812+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f2:3b:9e:c3:70:56:8b:7b:c7:f5:dc:0c:a0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Mar 29 02:01:15 2026 GMT
Not After : Mar 30 02:01:15 2026 GMT
Subject: CN=994b3cc403273ea6a0e59bdc40294787ee848d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:4f:2d:80:29:2c:cb:4a:47:e9:19:6e:7a:
34:38:6c:e4:7b:af:6f:db:fd:aa:e8:53:7c:82:c9:
54:75:60:44:d5:32:f6:e0:3f:8b:cb:a5:63:5b:4c:
20:f2:e9:62:82:79:be:e3:66:65:29:20:50:76:b1:
d2:8d:28:8f:e2:0e:54:5d:78:6e:82:28:82:eb:e3:
75:c4:3c:de:cc:6d:c9:d4:62:f3:80:b1:6a:91:9a:
44:1c:d3:79:9a:17:e6:83:0f:e1:6a:e4:04:a6:a6:
17:9f:85:45:93:9a:ad:c6:ab:43:d4:c5:70:25:57:
b9:d7:f0:19:02:bf:9e:39:17:91:ca:24:09:99:bd:
3a:c9:b8:a2:00:75:93:c1:7c:b7:14:38:6b:ec:d5:
14:29:a1:5c:9b:17:cf:6b:9d:1f:68:0e:ca:0a:46:
dc:3c:3d:89:ef:6c:56:c5:d0:4e:df:6c:a7:fe:4e:
4d:73:a8:2d:42:b2:40:c7:a9:a8:4f:08:f5:3f:f6:
00:59:ed:58:98:9b:23:99:80:ac:c9:71:93:d5:4b:
58:16:32:99:b1:21:75:dc:71:ad:02:f1:e2:30:ea:
7c:51:5c:c2:63:13:af:43:2b:a4:05:8b:c2:18:66:
8a:34:c4:ad:0e:54:98:88:26:05:f0:94:ec:7d:c2:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4B:3C:C4:03:27:3E:A6:A0:E5:9B:DC:40:29:47:87:EE:84:8D:2B
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:ca:6e:65:fe:9a:96:46:ca:85:2f:ca:b1:3a:35:d4:a9:
95:d1:1d:2b:2d:47:2b:01:3b:40:1d:09:5e:b9:92:5d:2d:f4:
13:91:7d:60:ca:75:dd:fe:f5:41:a3:34:e6:48:43:00:a2:ef:
52:cd:eb:ac:8f:0a:e1:92:69:20:45:ae:f4:a0:ec:17:1c:8b:
ab:31:f8:c5:40:76:ad:d5:63:2d:a7:84:a1:11:62:a8:81:93:
ff:23:ec:28:33:c3:43:b7:ff:53:ea:9c:0d:71:49:7f:ed:5d:
93:f3:2e:05:c7:6c:5a:51:10:e1:c7:98:8b:bb:a9:d7:19:6d:
48:b1:af:c5:18:db:cd:3f:6c:7e:69:93:b7:76:b0:d4:bd:58:
83:84:c5:9b:f3:60:a8:bc:38:ed:10:fd:c1:fa:be:2d:0b:c8:
9f:e1:a7:96:48:33:7a:a0:7c:a4:59:0a:73:55:3f:b1:e1:d1:
92:2d:79:95:ce:bb:99:87:c1:48:92:1d:c5:f5:72:d3:e2:36:
0f:14:5e:14:66:96:7f:cc:bb:dd:55:11:78:b8:42:c4:f7:dc:
d0:98:15:80:38:60:ed:c4:4a:5e:de:d1:aa:a3:94:c7:8a:d8:
b6:f5:9e:ea:45:e5:8a:b0:b9:6b:75:ae:a0:8f:41:f9:3c:28:
47:d3:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client