Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: 3ADK0eWDnXFJ4uMxt/Q3JdC+Y7/looR8hJrFKhIaiFA=
Subject key identifier: D1:1D:0B:E2:BD:6B:7C:C4:DF:A9:D7:B1:84:8A:FE:28:99:5D:DF:D9
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019F1867E3F607009DB5D058CD1004CEAFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 12:01:29 +0000
Manifest this update: Tue 30 Jun 2026 12:01:29 +0000
Manifest next update: Wed 01 Jul 2026 12:01:29 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: HsP3rJZRmxz4A5mVHOO/5qgPacUFoMm1XxIW5eBHGHI=)
2: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (hash: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:e3:f6:07:00:9d:b5:d0:58:cd:10:04:ce:af:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Jun 30 12:01:29 2026 GMT
Not After : Jul 1 12:01:29 2026 GMT
Subject: CN=d11d0be2bd6b7cc4dfa9d7b1848afe28995ddfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:d7:64:86:b9:81:e2:5f:ee:bf:5a:36:a6:
ea:a9:ea:71:14:eb:90:cc:70:5e:2c:11:71:9a:39:
54:67:5d:97:9e:d3:1a:18:14:18:94:33:3e:52:2d:
0b:42:ba:3d:56:a4:55:69:d5:5c:4f:a1:8b:d2:b3:
1a:ff:50:e1:f2:d0:4a:49:3d:f8:e5:47:58:63:83:
93:8d:d5:4b:a3:49:03:30:22:34:b4:22:2d:37:f0:
ba:96:4d:66:a6:e6:dd:f9:7e:7a:82:a8:c6:7f:a7:
90:b4:8e:bc:76:bc:0c:b6:0f:a9:e7:82:2b:34:84:
75:8d:9c:a6:11:12:04:73:ec:87:7f:fd:e2:34:15:
9a:2f:65:73:19:85:14:16:17:ca:9e:1f:4d:a2:0c:
8e:27:f6:8c:49:f9:b8:b2:d9:60:dd:dc:41:2d:b2:
3b:8f:bc:c1:31:58:80:ca:33:1e:2e:b0:a2:6b:fb:
c2:62:6c:3b:34:92:56:f5:a6:d8:9d:54:7e:b2:d6:
0e:f9:26:cf:c1:3a:4e:8a:9a:05:d9:4c:e6:5f:a8:
1d:e1:53:ea:20:7b:0b:b8:a1:bf:cf:b7:91:d8:22:
78:78:d8:b8:f0:60:f4:cc:f6:57:35:5c:75:cf:ba:
1f:5e:6d:dc:b6:a1:98:84:90:3c:a7:d4:ec:ad:ca:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:0B:E2:BD:6B:7C:C4:DF:A9:D7:B1:84:8A:FE:28:99:5D:DF:D9
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:48:76:2f:60:7d:c0:de:8f:fd:90:13:2a:9c:36:60:89:eb:
0c:06:bb:b5:54:e5:5b:80:c1:6d:92:ea:c5:69:85:39:1f:61:
0e:ea:d0:29:2e:4f:0c:8e:21:c4:a6:8f:ac:c5:72:be:de:45:
c5:94:d1:8f:3a:ef:eb:87:1d:e3:20:89:ae:44:b1:c3:b4:ad:
a7:2e:da:db:e2:70:73:70:dc:19:59:25:74:94:9e:c9:9b:ad:
cb:85:f0:46:22:8a:13:1f:86:db:d7:57:99:52:fe:a6:74:3f:
70:b2:ac:0a:3b:b1:ff:e7:ce:9a:06:46:8f:91:e3:ab:5d:6a:
74:2a:66:40:d6:a7:de:29:7b:c3:9d:56:77:82:ef:39:a0:cd:
0b:ca:b2:54:9a:a5:bd:e9:a3:2d:8a:81:fe:db:30:c1:fa:ed:
d3:9d:8f:ff:c8:b4:8f:74:33:aa:74:57:58:a4:18:e0:ba:e5:
1e:b5:f8:49:a7:42:79:28:db:2c:fe:f5:e3:dc:fb:41:a9:90:
ce:a4:c0:1c:66:f8:ad:72:e8:e3:a1:f4:18:5a:0f:92:26:20:
8f:f7:43:21:ec:45:f9:79:de:aa:50:94:93:b4:1e:84:66:4a:
f0:93:39:3e:8a:41:95:ee:72:ea:ce:73:fb:d3:e2:62:1d:65:
18:fa:db:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:43 2026 by rpki-client