Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: FpejNumpou5MLhfIbLstfb0LPlpbzevlbxpWr3JbHAw=
Subject key identifier: 29:E7:CA:68:1F:FB:B4:56:CB:F2:C6:E2:AF:45:D3:E5:5C:72:B4:15
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 01A17C5FC730EEB6E88531B38DAEA86350DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 19C9
Signing time: Tue 27 Oct 2026 08:00:13 +0000
Manifest this update: Tue 27 Oct 2026 08:00:13 +0000
Manifest next update: Wed 28 Oct 2026 08:00:13 +0000
Files and hashes: 1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: wS5x6dzttN8eRSd/vBoRE+ul1kZ2LZ647RgSTwBJye0=)
2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:c7:30:ee:b6:e8:85:31:b3:8d:ae:a8:63:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Oct 27 08:00:13 2026 GMT
Not After : Oct 28 08:00:13 2026 GMT
Subject: CN=29e7ca681ffbb456cbf2c6e2af45d3e55c72b415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:d5:6f:78:4b:12:75:c6:1b:2b:57:16:bb:
47:f9:23:8b:23:3e:3b:8f:d9:15:e1:b1:4b:1c:0b:
6c:c4:6c:d0:fa:7e:0b:ba:5c:59:03:d5:f1:82:cd:
a8:51:b8:af:f3:c7:fa:e8:af:34:f0:53:1f:27:6e:
3f:87:11:e2:96:10:8f:a6:69:ae:f1:8e:e2:7e:4b:
f5:fd:27:ff:34:1a:58:0c:ca:de:34:84:48:70:a6:
63:50:b3:ce:41:db:25:eb:b9:6e:89:50:25:06:63:
7b:39:f4:08:e2:71:f1:e8:69:cd:56:0d:cf:5f:cb:
83:c0:d0:58:9c:6e:4a:fa:65:0e:46:7b:f2:af:cd:
75:74:d1:02:1d:77:f1:8c:cd:85:02:3b:10:fb:54:
15:b9:0b:a7:b7:66:61:14:7a:f8:b9:ba:5c:41:cc:
df:28:6a:59:29:4b:09:57:22:d2:d5:aa:6c:67:45:
f9:34:d4:06:cd:e1:30:6e:4e:0a:77:aa:cd:e1:c7:
0d:7a:33:ef:93:d7:04:29:78:e3:d9:fa:14:8e:4b:
fd:a7:61:6e:cf:03:7b:09:69:9a:27:4e:82:7f:cb:
63:0a:a5:0e:0e:6d:3f:f9:ba:ca:62:9d:cc:0d:8d:
17:62:29:b8:e5:37:e1:45:13:7c:15:80:13:2c:bb:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:CA:68:1F:FB:B4:56:CB:F2:C6:E2:AF:45:D3:E5:5C:72:B4:15
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f5:8e:75:ff:ba:a5:94:c1:95:17:bf:34:6e:f7:8e:e4:11:
47:aa:79:5b:ff:24:ae:6c:8a:73:aa:4a:c5:6d:f4:db:70:88:
71:87:26:96:1f:62:9b:f4:48:65:18:74:fe:bb:90:01:87:2f:
58:13:e1:72:54:2b:cc:6e:ea:f2:3b:c0:5f:08:d5:49:e0:df:
e2:da:cd:a4:6f:d3:cb:ce:18:64:79:c4:c8:f9:a3:88:33:48:
c9:06:d0:18:9c:48:e1:c9:02:8f:8f:c2:05:54:73:b8:3a:aa:
3b:b1:dd:ce:11:43:6a:d7:cc:a2:9a:8c:93:b4:a2:fe:e9:b3:
ee:aa:db:6c:dd:82:3b:35:aa:1e:8e:12:e4:0a:2a:db:42:2a:
62:d1:23:b8:77:ac:c9:c4:6f:d4:f5:bc:3c:6d:6f:d1:18:3a:
b3:d7:1d:66:a3:bb:89:b8:1c:da:5a:8d:6b:c6:ac:f9:6f:f3:
2f:04:76:ea:03:e7:b4:58:42:81:dd:4e:7a:2d:5b:f8:48:ad:
e5:63:b2:70:82:60:e6:fe:bf:4e:49:85:bd:df:87:8f:71:2d:
c1:06:bf:8d:37:56:e8:85:e6:35:0e:96:9f:d2:f8:c2:b4:60:
d9:95:0b:a7:d6:0c:b6:01:77:97:65:0d:c5:22:16:6d:c1:6f:
d9:38:2c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8X8cw7rbohTGzja6oY1DbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZDBlYmQ4ZjU2NmUzZmFiN2UyMzU0YjcxNDA2MGM2ZmE0
N2UyNTQwHhcNMjYxMDI3MDgwMDEzWhcNMjYxMDI4MDgwMDEzWjAzMTEwLwYDVQQD
EygyOWU3Y2E2ODFmZmJiNDU2Y2JmMmM2ZTJhZjQ1ZDNlNTVjNzJiNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RXVb3hLEnXGGytXFrtH+SOLIz47
j9kV4bFLHAtsxGzQ+n4LulxZA9Xxgs2oUbiv88f66K808FMfJ24/hxHilhCPpmmu
8Y7ifkv1/Sf/NBpYDMreNIRIcKZjULPOQdsl67luiVAlBmN7OfQI4nHx6GnNVg3P
X8uDwNBYnG5K+mUORnvyr811dNECHXfxjM2FAjsQ+1QVuQunt2ZhFHr4ubpcQczf
KGpZKUsJVyLS1apsZ0X5NNQGzeEwbk4Kd6rN4ccNejPvk9cEKXjj2foUjkv9p2Fu
zwN7CWmaJ06Cf8tjCqUODm0/+brKYp3MDY0XYim45TfhRRN8FYATLLsoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnnymgf+7RWy/LG4q9F0+VccrQVMB8GA1UdIwQY
MBaAFHXQ69j1ZuP6t+I1S3FAYMb6R+JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAt
Mzk3NjVhM2Y5ZGJjLzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAtMzk3NjVhM2Y5ZGJj
LzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/WOdf+6
pZTBlRe/NG73juQRR6p5W/8krmyKc6pKxW3023CIcYcmlh9im/RIZRh0/ruQAYcv
WBPhclQrzG7q8jvAXwjVSeDf4trNpG/Ty84YZHnEyPmjiDNIyQbQGJxI4ckCj4/C
BVRzuDqqO7HdzhFDatfMopqMk7Si/umz7qrbbN2COzWqHo4S5Aoq20IqYtEjuHes
ycRv1PW8PG1v0Rg6s9cdZqO7ibgc2lqNa8as+W/zLwR26gPntFhCgd1Oei1b+Eit
5WOycIJg5v6/TkmFvd+Hj3EtwQa/jTdW6IXmNQ6Wn9L4wrRg2ZULp9YMtgF3l2UN
xSIWbcFv2TgsPg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:44 2026 by rpki-client