Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: 85WbD5VVkKwRWr37als9JR88B31X+yYELRpUjb8xlRM=
Subject key identifier: 6D:E5:37:BE:62:05:BB:CC:36:7C:A9:BE:B5:DE:67:1F:CB:9F:AB:F6
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 019D2A3C774E2AFCD19A2900850EB4E6D723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 13:01:38 +0000
Manifest this update: Thu 26 Mar 2026 13:01:38 +0000
Manifest next update: Fri 27 Mar 2026 13:01:38 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: DZQhN5p7Lfe8ru7fkQRmBllvEPgHWZQpjhyUirKUcyw=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:77:4e:2a:fc:d1:9a:29:00:85:0e:b4:e6:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Mar 26 13:01:38 2026 GMT
Not After : Mar 27 13:01:38 2026 GMT
Subject: CN=6de537be6205bbcc367ca9beb5de671fcb9fabf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:47:e6:cc:57:00:bf:8c:45:f5:75:e8:01:ed:
12:89:ff:fe:67:cd:f5:13:0a:8e:74:30:5b:ac:de:
31:7d:f6:07:a3:f3:e4:34:29:17:71:69:7e:60:5a:
d9:96:b1:7c:c4:87:8f:7f:06:f7:a5:b8:16:4a:ef:
48:db:89:2b:95:6a:f9:02:4b:2e:05:24:2c:92:f3:
e6:1d:cf:36:1a:4f:88:2e:f6:9f:3b:76:c6:c1:71:
e6:56:a1:82:1e:74:fc:c9:12:87:2d:e9:47:76:ae:
18:91:4b:dd:f4:e9:ef:44:9e:74:e9:e2:50:c1:03:
bd:7c:fe:23:6c:fa:05:64:ed:02:c8:ba:65:cf:50:
1c:ed:d7:fd:5d:c4:52:0c:ac:b1:75:a3:d1:3e:5b:
5e:05:22:2e:98:ed:0b:a7:bf:87:f5:f0:63:eb:19:
bd:d0:b2:0b:c1:d2:63:61:2e:9d:64:c6:8e:35:0a:
1c:46:ef:ef:b7:6e:21:4e:0a:af:fe:86:9e:91:fc:
e7:3c:8f:39:a6:15:02:af:a8:1b:92:2b:b5:34:9c:
03:21:33:f0:29:80:3a:0e:63:72:8d:01:ac:03:be:
e7:ad:08:3c:5a:0b:c8:0a:d3:4b:7e:a8:fd:99:43:
99:df:1f:24:35:88:67:5e:3c:f2:c9:a4:66:8f:da:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:37:BE:62:05:BB:CC:36:7C:A9:BE:B5:DE:67:1F:CB:9F:AB:F6
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0f:5d:e5:42:e4:df:11:85:36:86:22:58:b7:74:f9:9f:6d:
bb:30:5f:58:9b:3b:76:64:28:d7:4a:7c:60:ae:e5:45:8f:09:
e8:02:69:0d:5c:fd:40:35:59:21:16:66:5c:aa:75:06:77:91:
b9:b7:30:3f:2c:2b:99:44:dd:a9:8e:04:bd:55:4c:28:d3:6f:
62:0d:e8:81:41:ee:db:1e:b6:00:66:db:d2:7c:fc:06:ac:17:
b9:c2:3d:91:23:23:0b:ac:e3:ca:e1:e2:a6:f2:03:fb:84:9f:
3d:da:f8:41:65:75:7a:2d:05:21:26:16:9d:60:ef:4a:0b:7c:
04:84:df:0a:00:75:91:f1:a6:9f:c4:b7:b4:35:4e:26:39:75:
3f:e9:5e:a0:b4:33:97:e9:f8:17:0d:09:9b:45:7d:09:23:9a:
d1:31:55:7b:21:ed:7e:43:3a:ad:b7:d3:43:20:eb:c7:5d:db:
0d:6a:45:48:50:d9:31:28:30:0d:1f:06:93:c0:b1:e6:d7:21:
5b:51:72:f8:ba:28:bf:d7:5b:ea:e3:52:87:d6:75:b7:ed:cc:
07:87:86:29:ba:b0:66:ef:a9:41:25:9a:6b:ad:c0:42:86:2b:
95:5b:b8:9e:82:01:49:24:e9:5d:57:e9:e1:3f:18:50:fa:49:
54:5b:db:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPHdOKvzRmikAhQ605tcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3
MjM2ZTUwHhcNMjYwMzI2MTMwMTM4WhcNMjYwMzI3MTMwMTM4WjAzMTEwLwYDVQQD
Eyg2ZGU1MzdiZTYyMDViYmNjMzY3Y2E5YmViNWRlNjcxZmNiOWZhYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50fmzFcAv4xF9XXoAe0Sif/+Z831
EwqOdDBbrN4xffYHo/PkNCkXcWl+YFrZlrF8xIePfwb3pbgWSu9I24krlWr5Aksu
BSQskvPmHc82Gk+ILvafO3bGwXHmVqGCHnT8yRKHLelHdq4YkUvd9OnvRJ506eJQ
wQO9fP4jbPoFZO0CyLplz1Ac7df9XcRSDKyxdaPRPlteBSIumO0Lp7+H9fBj6xm9
0LILwdJjYS6dZMaONQocRu/vt24hTgqv/oaekfznPI85phUCr6gbkiu1NJwDITPw
KYA6DmNyjQGsA77nrQg8WgvICtNLfqj9mUOZ3x8kNYhnXjzyyaRmj9oYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3lN75iBbvMNnypvrXeZx/Ln6v2MB8GA1UdIwQY
MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt
NjU2NDBmMWMxNzlhLzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh
LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtA9d5ULk
3xGFNoYiWLd0+Z9tuzBfWJs7dmQo10p8YK7lRY8J6AJpDVz9QDVZIRZmXKp1BneR
ubcwPywrmUTdqY4EvVVMKNNvYg3ogUHu2x62AGbb0nz8BqwXucI9kSMjC6zjyuHi
pvID+4SfPdr4QWV1ei0FISYWnWDvSgt8BITfCgB1kfGmn8S3tDVOJjl1P+leoLQz
l+n4Fw0Jm0V9CSOa0TFVeyHtfkM6rbfTQyDrx13bDWpFSFDZMSgwDR8Gk8Cx5tch
W1Fy+Loov9db6uNSh9Z1t+3MB4eGKbqwZu+pQSWaa63AQoYrlVu4noIBSSTpXVfp
4T8YUPpJVFvbZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:44 2026 by rpki-client