Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: GaTlRtglz/eCkR5IaU2PmVe1VQl4/muZWyb/FNPRQog=
Subject key identifier: AC:19:80:F3:69:6B:C8:59:84:B6:73:95:27:1C:DA:65:EE:82:01:25
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 019F1830BE478E739F7711B5A2F6DA55660F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 1440
Signing time: Tue 30 Jun 2026 11:01:15 +0000
Manifest this update: Tue 30 Jun 2026 11:01:15 +0000
Manifest next update: Wed 01 Jul 2026 11:01:15 +0000
Files and hashes: 1: AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa (hash: fdkV0rGstUR1Pzncs3bfmTmh9JkFZ1wdI7Ez0Xn02hM=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: mWAVJrgpM80IiEz7lzY0JjcW48Yreh/xZGhcm07LldA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:be:47:8e:73:9f:77:11:b5:a2:f6:da:55:66:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Jun 30 11:01:15 2026 GMT
Not After : Jul 1 11:01:15 2026 GMT
Subject: CN=ac1980f3696bc85984b67395271cda65ee820125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:65:99:50:49:df:39:16:de:51:28:31:71:
92:16:82:83:85:55:4e:fb:85:ae:84:ca:e2:ec:7a:
6c:ba:f0:44:50:8b:4f:3a:02:d2:61:99:d8:1e:02:
54:b8:f1:78:f7:b2:ef:96:04:9e:1a:65:41:fd:ca:
e7:26:2d:9d:c1:6c:cc:e0:fc:a6:c0:8e:b1:f0:1b:
3e:82:0e:27:9e:89:f6:0e:9a:81:ae:39:46:97:c6:
fd:e4:81:2a:10:3b:e2:93:be:8c:e1:9e:de:0e:53:
42:a9:8e:ab:fd:11:ec:63:95:3e:bf:1e:59:24:7b:
98:6b:da:fe:ba:8a:23:f4:01:89:1e:7b:70:84:84:
44:73:fd:90:09:4f:fc:32:41:9f:d3:86:70:84:42:
86:d1:a3:92:cd:a8:7d:c3:68:05:30:91:6e:6a:42:
ec:fc:56:5d:02:f5:3f:d6:ab:ce:a1:c8:81:9b:71:
40:43:9b:3b:5b:1f:0f:dc:c9:23:aa:65:0a:49:64:
93:de:c7:90:92:32:b0:42:2c:52:e4:17:da:55:3b:
ee:e3:61:ee:aa:f7:ed:2b:36:0c:88:56:d5:2e:00:
71:3b:67:fb:9c:b3:dd:83:cb:bb:11:ba:c7:7d:64:
b2:d2:6b:7b:c4:e9:a5:a0:42:06:a6:cf:c8:e9:51:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:80:F3:69:6B:C8:59:84:B6:73:95:27:1C:DA:65:EE:82:01:25
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:21:6f:6a:31:d8:ba:04:ed:81:2b:54:51:4e:f0:47:f4:97:
75:ed:04:fb:40:8b:42:0c:29:58:35:96:1d:26:69:03:fd:5b:
3f:3f:0d:60:ea:54:04:c6:28:5a:ad:92:13:5f:13:18:74:d7:
2d:22:55:cc:ca:fc:59:db:f9:8a:d8:95:93:3e:1e:b7:79:c0:
75:c2:4f:3a:a9:d7:d0:31:e5:4c:dd:00:4b:e9:a0:ed:af:24:
7c:5a:b4:2b:1c:cb:4c:ef:6f:93:2c:df:46:b4:f7:02:bd:57:
05:13:20:fc:49:04:a0:45:89:50:ed:d2:4d:af:44:e3:55:02:
ea:74:d7:a2:f6:1a:b7:f3:61:72:09:cd:4e:1a:1d:9a:31:ef:
93:b2:4e:92:20:d0:92:5f:58:d0:1a:57:df:8d:61:a7:97:3e:
25:7d:ef:b0:32:d2:ff:17:96:75:ce:b7:41:4b:75:ae:44:b4:
c8:7c:58:02:d7:3c:88:5c:bf:6b:ff:c7:01:49:dd:ae:df:ae:
67:57:37:ac:d4:33:a8:60:ab:f1:02:3a:0b:3b:c5:46:54:ed:
3c:1e:70:aa:1a:9c:20:36:a6:e5:07:d3:bf:a1:e8:56:e0:7f:
ed:8b:45:92:f9:40:05:f0:8c:57:47:91:fe:11:bf:8f:6a:98:
50:14:ef:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YML5HjnOfdxG1ovbaVWYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDJmOGUwZGVhMTM4N2RhZjkwMzVkMmNkZjRlYjhjOTNh
ZDg5Y2MwHhcNMjYwNjMwMTEwMTE1WhcNMjYwNzAxMTEwMTE1WjAzMTEwLwYDVQQD
EyhhYzE5ODBmMzY5NmJjODU5ODRiNjczOTUyNzFjZGE2NWVlODIwMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsxlmVBJ3zkW3lEoMXGSFoKDhVVO
+4WuhMri7HpsuvBEUItPOgLSYZnYHgJUuPF497LvlgSeGmVB/crnJi2dwWzM4Pym
wI6x8Bs+gg4nnon2DpqBrjlGl8b95IEqEDvik76M4Z7eDlNCqY6r/RHsY5U+vx5Z
JHuYa9r+uooj9AGJHntwhIREc/2QCU/8MkGf04ZwhEKG0aOSzah9w2gFMJFuakLs
/FZdAvU/1qvOociBm3FAQ5s7Wx8P3MkjqmUKSWST3seQkjKwQixS5BfaVTvu42Hu
qvftKzYMiFbVLgBxO2f7nLPdg8u7EbrHfWSy0mt7xOmloEIGps/I6VFwuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwZgPNpa8hZhLZzlScc2mXuggElMB8GA1UdIwQY
MBaAFA3S+ODeoTh9r5A10s3064yTrYnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAt
YWE4NDg1Y2YzMDY4LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kM2Q0NjYtZDk1MS00YzUyLWIzMzAtYWE4NDg1Y2YzMDY4
LzEvRGRMNDRONmhPSDJ2a0RYU3pmVHJqSk90aWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSFvajHY
ugTtgStUUU7wR/SXde0E+0CLQgwpWDWWHSZpA/1bPz8NYOpUBMYoWq2SE18TGHTX
LSJVzMr8Wdv5itiVkz4et3nAdcJPOqnX0DHlTN0AS+mg7a8kfFq0KxzLTO9vkyzf
RrT3Ar1XBRMg/EkEoEWJUO3STa9E41UC6nTXovYat/NhcgnNThodmjHvk7JOkiDQ
kl9Y0BpX341hp5c+JX3vsDLS/xeWdc63QUt1rkS0yHxYAtc8iFy/a//HAUndrt+u
Z1c3rNQzqGCr8QI6CzvFRlTtPB5wqhqcIDam5QfTv6HoVuB/7YtFkvlABfCMV0eR
/hG/j2qYUBTvwQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:33 2026 by rpki-client