Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: RnStehzCTJLWNncrb3gz2T1WXrksVEP5nK74Dpw1mjc=
Subject key identifier: 76:3D:F8:F3:41:80:6A:37:E2:4B:B5:E2:E5:CA:30:90:B8:6A:FC:0C
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019D3977BC7F4B9AFA2459E7AF02915F9F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: 7rAx0jlNNf0zITeYU+OLaFGonVjuIbssomQEXA0NDBY=)
2: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (hash: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bc:7f:4b:9a:fa:24:59:e7:af:02:91:5f:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=763df8f341806a37e24bb5e2e5ca3090b86afc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:4e:4c:e0:2a:69:cd:d8:1b:49:3e:b0:bd:
87:56:e9:51:1e:a4:a4:f6:25:cd:ae:35:8c:8c:f7:
26:9e:ee:14:d7:7f:6f:1d:5c:a4:2a:f1:2b:1a:56:
95:5f:75:df:1b:b1:7b:9a:fd:2f:d7:8a:fc:36:4f:
e3:36:81:61:81:f0:9c:2c:ac:a0:ca:ea:00:37:c2:
b0:2a:3f:b3:69:2a:0b:4e:b2:d2:51:ab:00:99:e7:
5c:4b:8f:31:92:7f:cb:a8:65:0c:80:2a:1a:e4:b5:
e4:c6:49:23:b9:0f:7b:a0:11:2e:f2:7b:53:a1:32:
c0:ef:42:e6:2c:f4:77:15:42:47:53:01:48:4c:01:
13:5d:bd:ec:c0:5d:95:c0:f7:36:e6:cb:0c:db:be:
12:2c:0e:9f:f8:af:e5:56:b4:f1:62:97:90:bb:2d:
21:a8:9e:53:5b:d6:02:d4:6a:c6:80:bf:e0:83:4f:
db:3b:1b:49:4d:08:72:d4:46:50:73:b0:78:3f:8d:
9c:79:55:f0:e4:ce:27:90:70:f3:88:b1:b0:1a:af:
71:db:e8:46:30:7c:36:91:f8:90:89:3c:0e:eb:00:
a7:42:47:18:dc:46:65:de:1a:2a:c2:b3:f0:f3:02:
c9:e4:1d:4a:58:0b:12:76:a6:ef:18:fe:1f:ee:9e:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3D:F8:F3:41:80:6A:37:E2:4B:B5:E2:E5:CA:30:90:B8:6A:FC:0C
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c9:91:f8:49:8d:1f:87:95:da:68:10:a1:6f:5a:88:64:71:
de:e1:d4:4b:2c:6d:65:e4:07:23:c7:ba:f9:06:a7:fa:85:14:
cd:01:69:aa:90:4a:4b:3c:fa:0f:f9:cc:cb:a1:11:39:9d:9b:
be:65:06:01:8a:4e:c5:5c:12:94:b8:c9:6e:91:1e:96:6f:ee:
de:c4:a4:62:dc:d4:3a:75:d8:24:4f:7f:47:89:b3:51:fa:ec:
d2:28:9d:fe:25:13:3a:0b:c9:85:d0:45:79:13:e2:14:f4:c6:
54:96:a4:01:38:04:5e:88:82:ca:e0:9e:ec:34:3c:a4:d8:d6:
d1:62:c7:91:fc:49:eb:97:a4:66:c0:ae:d7:11:82:5c:12:02:
f5:f3:73:ae:95:e9:41:a6:cf:c3:ae:cb:ad:e5:e5:51:14:2c:
2f:f0:5b:df:96:ce:12:4b:bb:bd:e7:be:b6:00:a5:4e:da:1a:
65:8a:47:0b:9a:21:54:b8:d6:cd:d0:ac:0d:46:10:57:df:41:
57:2a:86:70:6e:60:a2:9c:68:51:47:97:50:d9:3f:a9:39:ca:
d2:54:f3:e7:40:59:e6:f8:f4:6c:78:a2:52:0e:29:6a:82:f1:
d0:50:7c:ad:6f:4d:20:d5:6f:18:7d:f5:81:f1:a3:a3:73:72:
80:9b:85:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d7x/S5r6JFnnrwKRX59xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDg0ZGRhYzUwYzU5YWVjYWYwNmIwOWI4NTczYTg2MmEw
ZWEzZGIwHhcNMjYwMzI5MTIwMDQxWhcNMjYwMzMwMTIwMDQxWjAzMTEwLwYDVQQD
Eyg3NjNkZjhmMzQxODA2YTM3ZTI0YmI1ZTJlNWNhMzA5MGI4NmFmYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BVOTOAqac3YG0k+sL2HVulRHqSk
9iXNrjWMjPcmnu4U139vHVykKvErGlaVX3XfG7F7mv0v14r8Nk/jNoFhgfCcLKyg
yuoAN8KwKj+zaSoLTrLSUasAmedcS48xkn/LqGUMgCoa5LXkxkkjuQ97oBEu8ntT
oTLA70LmLPR3FUJHUwFITAETXb3swF2VwPc25ssM274SLA6f+K/lVrTxYpeQuy0h
qJ5TW9YC1GrGgL/gg0/bOxtJTQhy1EZQc7B4P42ceVXw5M4nkHDziLGwGq9x2+hG
MHw2kfiQiTwO6wCnQkcY3EZl3hoqwrPw8wLJ5B1KWAsSdqbvGP4f7p58kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY9+PNBgGo34ku14uXKMJC4avwMMB8GA1UdIwQY
MBaAFA3YTdrFDFmuyvBrCbhXOoYqDqPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMt
Y2RlZTk5OTVlOWU3LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMtY2RlZTk5OTVlOWU3
LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsmR+EmN
H4eV2mgQoW9aiGRx3uHUSyxtZeQHI8e6+Qan+oUUzQFpqpBKSzz6D/nMy6EROZ2b
vmUGAYpOxVwSlLjJbpEelm/u3sSkYtzUOnXYJE9/R4mzUfrs0iid/iUTOgvJhdBF
eRPiFPTGVJakATgEXoiCyuCe7DQ8pNjW0WLHkfxJ65ekZsCu1xGCXBIC9fNzrpXp
QabPw67LreXlURQsL/Bb35bOEku7vee+tgClTtoaZYpHC5ohVLjWzdCsDUYQV99B
VyqGcG5gopxoUUeXUNk/qTnK0lTz50BZ5vj0bHiiUg4paoLx0FB8rW9NINVvGH31
gfGjo3NygJuFEg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:15 2026 by rpki-client