Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: xGffqC5vB0kxN5aBbf3DLYHsoLMsVFjrcBn8HwSut2M=
Subject key identifier: 6F:40:52:4D:56:5B:24:18:FA:F7:CB:97:FC:B6:41:A5:4F:DC:44:1F
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 019E1D90E626B68EE719B16CE1A525594B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 19:01:35 +0000
Manifest this update: Tue 12 May 2026 19:01:35 +0000
Manifest next update: Wed 13 May 2026 19:01:35 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: pekLtdySEmY0eC50r85INx8Ms5nRVyjgzSubEsjWHSo=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e6:26:b6:8e:e7:19:b1:6c:e1:a5:25:59:4b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: May 12 19:01:35 2026 GMT
Not After : May 13 19:01:35 2026 GMT
Subject: CN=6f40524d565b2418faf7cb97fcb641a54fdc441f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:1d:8e:a0:3b:bb:75:4a:db:59:bf:f9:cb:
b0:e1:7b:8c:ca:26:a3:79:62:22:54:46:87:33:d1:
0b:53:2c:68:5b:6e:e3:5a:52:80:40:e3:ff:f6:32:
86:1b:bd:d3:bf:83:1e:08:c6:87:be:4e:f8:9c:2d:
14:46:61:f5:85:3b:2f:e0:9a:40:db:0e:91:19:5e:
f1:f4:d3:36:88:62:8d:d9:d5:d5:ee:aa:28:7f:78:
dd:3c:85:25:ca:d6:63:8c:ae:1c:7c:26:9b:bf:0a:
aa:3d:db:38:0c:33:36:a5:6a:d3:40:88:4d:97:ba:
cd:d5:94:a3:d7:1e:5e:b1:5c:5b:06:3a:18:ef:24:
40:74:0c:4a:46:c7:c0:73:80:a4:4a:f8:f7:44:66:
d2:6c:70:ae:83:59:06:bf:7e:89:5b:bb:d5:42:99:
f1:61:4e:ea:45:1f:aa:18:6b:78:4a:29:8a:11:30:
f5:91:66:ff:f9:18:d5:cc:f4:35:fa:13:be:ff:48:
fd:5a:3c:36:e5:16:a9:ef:14:75:63:f6:45:d6:b7:
3c:60:8e:e7:94:f8:b0:2e:61:99:16:75:d7:28:0a:
ed:66:2b:21:91:38:05:41:43:64:02:96:1b:be:a1:
3d:8d:69:ee:ad:50:2f:bb:29:db:19:c5:bf:03:1d:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:40:52:4D:56:5B:24:18:FA:F7:CB:97:FC:B6:41:A5:4F:DC:44:1F
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:34:37:1e:b7:e3:68:8a:4b:d0:1e:48:29:3a:d3:19:d5:
b0:69:f7:85:99:8b:ba:33:0c:f6:ae:99:68:a4:ef:43:4b:b5:
1a:4c:82:0c:00:ef:be:78:d9:0a:6b:de:db:f4:ae:a2:70:f3:
77:a1:6a:e5:92:7e:02:97:1d:9b:23:5d:7a:48:69:28:a1:cd:
5a:89:1b:ba:df:a6:8a:9d:c3:40:2e:61:5c:75:92:e4:2e:68:
a8:1c:20:85:37:c2:ee:bc:4b:7b:91:65:50:45:16:ea:ea:fd:
a8:ee:03:5e:99:c8:fe:81:14:bc:03:57:8d:67:f0:cf:55:b0:
6c:23:74:2d:dd:29:ee:9a:0c:2e:30:fd:63:60:d6:18:50:da:
c4:41:cf:56:d0:c9:70:dd:55:5a:5a:7a:1d:ad:bd:65:4b:70:
b4:a8:32:87:cc:46:68:8c:8c:63:b9:ee:fb:0c:59:13:72:da:
e4:59:a4:29:25:08:d4:51:59:11:74:bb:9b:4d:85:bc:42:d0:
23:46:bb:bc:12:94:96:d2:0c:98:21:15:32:72:79:b9:bf:b9:
0c:b0:ee:90:6e:00:6f:79:55:9e:21:30:29:eb:57:89:e8:ea:
b3:9e:f4:c0:f5:0f:b0:b6:f2:60:b6:8e:a6:77:a4:1c:d2:a2:
a6:ba:97:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkOYmto7nGbFs4aUlWUtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3
MjM2ZTUwHhcNMjYwNTEyMTkwMTM1WhcNMjYwNTEzMTkwMTM1WjAzMTEwLwYDVQQD
Eyg2ZjQwNTI0ZDU2NWIyNDE4ZmFmN2NiOTdmY2I2NDFhNTRmZGM0NDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+EdjqA7u3VK21m/+cuw4XuMyiaj
eWIiVEaHM9ELUyxoW27jWlKAQOP/9jKGG73Tv4MeCMaHvk74nC0URmH1hTsv4JpA
2w6RGV7x9NM2iGKN2dXV7qoof3jdPIUlytZjjK4cfCabvwqqPds4DDM2pWrTQIhN
l7rN1ZSj1x5esVxbBjoY7yRAdAxKRsfAc4CkSvj3RGbSbHCug1kGv36JW7vVQpnx
YU7qRR+qGGt4SimKETD1kWb/+RjVzPQ1+hO+/0j9Wjw25Rap7xR1Y/ZF1rc8YI7n
lPiwLmGZFnXXKArtZishkTgFQUNkApYbvqE9jWnurVAvuynbGcW/Ax2BQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9AUk1WWyQY+vfLl/y2QaVP3EQfMB8GA1UdIwQY
MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt
NjU2NDBmMWMxNzlhLzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh
LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxE0Nx63
42iKS9AeSCk60xnVsGn3hZmLujMM9q6ZaKTvQ0u1GkyCDADvvnjZCmve2/SuonDz
d6Fq5ZJ+ApcdmyNdekhpKKHNWokbut+mip3DQC5hXHWS5C5oqBwghTfC7rxLe5Fl
UEUW6ur9qO4DXpnI/oEUvANXjWfwz1WwbCN0Ld0p7poMLjD9Y2DWGFDaxEHPVtDJ
cN1VWlp6Ha29ZUtwtKgyh8xGaIyMY7nu+wxZE3La5FmkKSUI1FFZEXS7m02FvELQ
I0a7vBKUltIMmCEVMnJ5ub+5DLDukG4Ab3lVniEwKetXiejqs570wPUPsLbyYLaO
pnekHNKiprqXVg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:36:35 2026 by rpki-client