Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: XKA6wBurcU1WClmgVZR+gamYrKoHwUgSmWQO2KnsYZw=
Subject key identifier: C2:29:6F:60:02:F5:E2:27:55:C4:22:35:D1:34:F7:A8:B7:FB:10:04
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 01A001DD33A6C9964AEE65815494EE1D4C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 14B9
Signing time: Fri 14 Aug 2026 20:01:08 +0000
Manifest this update: Fri 14 Aug 2026 20:01:08 +0000
Manifest next update: Sat 15 Aug 2026 20:01:08 +0000
Files and hashes: 1: AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa (hash: fdkV0rGstUR1Pzncs3bfmTmh9JkFZ1wdI7Ez0Xn02hM=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: kNV1dS1FdCH7Q7grFl8J5mZ0dziPxjbw/LBS04dFQPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:33:a6:c9:96:4a:ee:65:81:54:94:ee:1d:4c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Aug 14 20:01:08 2026 GMT
Not After : Aug 15 20:01:08 2026 GMT
Subject: CN=c2296f6002f5e22755c42235d134f7a8b7fb1004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:66:7f:3a:80:ca:1b:8d:7f:e0:fc:13:36:
80:56:98:10:92:d5:b7:b5:1d:37:1d:f7:42:7e:20:
78:3c:7c:83:b0:cd:bf:25:88:f9:34:91:3c:d7:ee:
dc:76:c1:7b:b5:50:d6:7a:8c:ae:d1:51:e8:88:af:
ab:0e:df:f2:db:1b:31:c4:00:56:a8:81:c0:85:5f:
4e:4a:5a:79:c2:2f:9e:d6:9a:ea:ae:32:26:3b:02:
99:37:ee:35:5a:25:6d:fb:7e:7e:c7:c3:39:80:77:
0f:96:84:ec:43:39:96:74:19:c6:30:cf:99:f2:ed:
9d:ce:ac:51:54:d3:18:a8:64:7f:fb:c8:dc:d7:48:
66:9e:ea:e4:5b:90:f6:4c:fd:b2:c2:76:78:75:c9:
c4:dd:c1:67:a9:c2:e8:62:25:f0:b1:44:ae:ad:36:
fc:14:8b:bd:71:bc:bc:e8:91:5b:5b:b8:9e:6d:c2:
ff:06:0a:ff:76:f0:03:78:2e:80:85:99:97:eb:6c:
b9:2e:c7:11:6f:93:e9:3d:10:a7:87:be:04:b5:af:
d2:e6:75:a7:d1:7f:28:eb:6f:43:81:1d:e8:61:c0:
e7:d4:79:4f:94:28:65:96:73:a1:ad:40:46:09:af:
77:cc:06:ca:92:16:05:26:53:62:f1:b3:a6:1d:17:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:6F:60:02:F5:E2:27:55:C4:22:35:D1:34:F7:A8:B7:FB:10:04
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:20:ed:30:df:f2:b0:18:f7:f6:77:c8:89:ed:40:f8:9f:d2:
68:ff:f4:c0:6a:80:58:a9:2e:8b:96:98:2b:cb:30:dd:66:34:
02:0e:2e:6b:fc:2a:d9:f9:0c:42:65:da:39:ba:27:6d:e0:09:
f9:02:39:83:2a:5f:e0:72:ea:8c:ba:1f:f5:26:17:59:05:7d:
44:f8:91:87:5e:48:e1:77:7b:bf:99:04:3d:76:01:39:57:0c:
61:38:83:f8:dc:0c:b5:15:1e:ff:2f:f3:b0:44:6c:0c:63:bc:
bc:a3:81:be:12:59:03:1a:aa:00:c9:9d:77:cd:af:28:c4:33:
bc:1b:76:c3:e0:4c:9a:33:39:d9:fc:93:da:de:a6:02:66:fa:
93:5a:32:8f:24:f2:b6:bf:76:ad:5c:eb:83:27:4a:42:15:c9:
31:c1:32:47:b9:98:01:66:13:3c:8b:ff:56:75:ff:98:40:7a:
ec:10:c3:e4:ca:ea:f6:07:c2:aa:ec:41:44:f7:d2:65:d2:ff:
14:2a:c3:40:d5:11:40:6a:dd:ca:db:b4:c9:44:24:20:cc:e4:
91:18:15:d5:00:19:65:8b:1f:cc:86:30:29:b8:c1:08:03:74:
dc:83:81:5e:39:66:4a:53:fc:7d:a6:d1:75:85:19:1e:58:c3:
9c:64:c7:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3TOmyZZK7mWBVJTuHUw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDJmOGUwZGVhMTM4N2RhZjkwMzVkMmNkZjRlYjhjOTNh
ZDg5Y2MwHhcNMjYwODE0MjAwMTA4WhcNMjYwODE1MjAwMTA4WjAzMTEwLwYDVQQD
EyhjMjI5NmY2MDAyZjVlMjI3NTVjNDIyMzVkMTM0ZjdhOGI3ZmIxMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HZmfzqAyhuNf+D8EzaAVpgQktW3
tR03HfdCfiB4PHyDsM2/JYj5NJE81+7cdsF7tVDWeoyu0VHoiK+rDt/y2xsxxABW
qIHAhV9OSlp5wi+e1prqrjImOwKZN+41WiVt+35+x8M5gHcPloTsQzmWdBnGMM+Z
8u2dzqxRVNMYqGR/+8jc10hmnurkW5D2TP2ywnZ4dcnE3cFnqcLoYiXwsUSurTb8
FIu9cby86JFbW7iebcL/Bgr/dvADeC6AhZmX62y5LscRb5PpPRCnh74Eta/S5nWn
0X8o629DgR3oYcDn1HlPlChllnOhrUBGCa93zAbKkhYFJlNi8bOmHRdeyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIpb2AC9eInVcQiNdE096i3+xAEMB8GA1UdIwQY
MBaAFA3S+ODeoTh9r5A10s3064yTrYnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAt
YWE4NDg1Y2YzMDY4LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAtYWE4NDg1Y2YzMDY4
LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCDtMN/y
sBj39nfIie1A+J/SaP/0wGqAWKkui5aYK8sw3WY0Ag4ua/wq2fkMQmXaObonbeAJ
+QI5gypf4HLqjLof9SYXWQV9RPiRh15I4Xd7v5kEPXYBOVcMYTiD+NwMtRUe/y/z
sERsDGO8vKOBvhJZAxqqAMmdd82vKMQzvBt2w+BMmjM52fyT2t6mAmb6k1oyjyTy
tr92rVzrgydKQhXJMcEyR7mYAWYTPIv/VnX/mEB67BDD5Mrq9gfCquxBRPfSZdL/
FCrDQNURQGrdytu0yUQkIMzkkRgV1QAZZYsfzIYwKbjBCAN03IOBXjlmSlP8fabR
dYUZHljDnGTHxg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:39 2026 by rpki-client