Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: 7nY3sI2G+PxI6e1RQE2ry/ggVVO14PHgYDpDLlqICH8=
Subject key identifier: EE:9B:73:AD:88:F5:00:A2:FC:CE:D2:6B:9B:41:BA:8C:AB:97:86:76
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019D3752214BF58F645207FB5DFDE5462FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:22 +0000
Manifest this update: Sun 29 Mar 2026 02:00:22 +0000
Manifest next update: Mon 30 Mar 2026 02:00:22 +0000
Files and hashes: 1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: ZR1A7fG8GJ+7gpm9tVj3YhdvGXFkzFo8VoUWLAqhL6I=)
2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:21:4b:f5:8f:64:52:07:fb:5d:fd:e5:46:2f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Mar 29 02:00:22 2026 GMT
Not After : Mar 30 02:00:22 2026 GMT
Subject: CN=ee9b73ad88f500a2fcced26b9b41ba8cab978676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:66:1f:ee:db:4a:46:5f:46:9f:51:ad:cc:
59:e2:b5:a2:99:94:f3:f5:68:72:29:87:65:62:d4:
62:23:9a:df:d5:51:bb:06:a7:53:93:24:7e:81:dc:
d2:cd:9f:63:52:f5:0f:31:22:73:c6:84:77:05:d3:
be:f1:23:5e:97:5f:2c:01:06:4f:34:6c:8f:57:09:
b1:30:77:2e:4f:85:03:8b:d2:b1:ef:00:b4:7e:ff:
6e:76:a6:77:ad:b2:e9:11:67:7e:03:97:28:b6:fa:
f7:75:cb:6e:ff:5a:bd:14:35:b1:03:55:c1:53:64:
10:67:e0:7b:53:cd:c9:05:81:9d:09:b9:d0:36:02:
88:22:89:e4:f6:58:5c:85:18:2d:cb:1c:ac:7c:84:
fc:19:cc:09:3a:21:ad:81:b3:f5:9d:58:43:d1:53:
9e:5c:5c:8c:1c:b5:c7:5a:7e:54:18:c8:07:d6:c5:
69:20:1c:54:34:9a:e0:70:ae:81:8d:cd:33:79:fd:
cd:41:13:0e:87:eb:08:cc:3c:34:59:90:02:57:71:
30:49:92:59:db:f5:f5:15:f9:68:78:f0:f6:7d:40:
23:fe:34:9a:86:9c:a4:06:a4:4e:c9:e2:cc:3c:b0:
0c:81:21:af:0d:c1:fa:87:36:97:6d:63:fb:5c:71:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:73:AD:88:F5:00:A2:FC:CE:D2:6B:9B:41:BA:8C:AB:97:86:76
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2a:36:35:61:96:22:79:ed:8e:10:76:d0:bd:6e:9f:0e:58:
c5:ba:1c:89:73:f5:f6:8c:3a:04:4e:64:08:a3:e5:e9:71:31:
01:dc:d5:32:2b:68:b9:7a:d4:f0:4c:14:99:97:00:46:bd:9c:
58:94:5f:be:84:fc:e2:be:d2:7a:f7:a6:5f:0f:a1:91:f1:47:
16:12:09:10:a5:1a:64:f6:be:7b:e8:b5:22:05:8c:f2:f2:2a:
98:6d:a8:8d:be:7e:b8:88:b4:8c:4c:1b:49:9c:c2:04:19:2b:
58:a5:fa:5d:3e:b2:96:b7:43:08:1c:30:72:5d:52:eb:27:59:
78:1a:7d:f3:f5:f3:c1:92:91:d7:2f:22:ad:3b:d9:b6:b6:77:
aa:e3:a0:a7:99:6e:49:e6:84:41:ea:98:a0:78:74:c1:9a:92:
11:5a:96:c2:c9:64:b7:90:78:a0:d4:4b:b8:eb:67:16:71:f1:
17:95:5e:ac:fe:08:93:38:0f:28:5a:2d:5d:ab:2c:47:20:ef:
b4:9a:2c:b4:49:4e:40:52:0e:60:30:70:d8:70:47:cb:ff:5a:
bd:d7:5f:2b:16:6a:34:cb:cd:96:29:bc:fb:31:8f:df:d4:ff:
8f:3b:f8:48:12:34:fe:6a:1d:e4:51:af:a3:f5:c9:8e:37:ca:
02:b5:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client