Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
File: dUI-b2St_Fh6CPgawqySYOsu1hU.mft (raw, json)
Hash identifier: 6shk2PvCvIWWHIa1sQW4/G6/B+xpDdNuXBhyAcrhBTI=
Subject key identifier: B4:07:AE:DB:38:46:72:8F:94:9B:3E:DE:04:FD:A0:3E:E7:C5:EC:52
Authority key identifier: 75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
Certificate issuer: /CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Certificate serial: 019D270406175D85622816E551DD7528B15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
Manifest number: 0EF7
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: dUI-b2St_Fh6CPgawqySYOsu1hU.crl (hash: ho6Oxy/16Ml0nqHhDtU8TPprUFge4Ls1OrPTgyh9taA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:06:17:5d:85:62:28:16:e5:51:dd:75:28:b1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=b407aedb3846728f949b3ede04fda03ee7c5ec52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:f0:e0:f3:ce:dd:32:f4:30:42:41:70:35:
e4:65:e0:3e:5d:cd:33:e3:f5:80:8c:a1:f7:21:1c:
c1:55:1f:61:27:26:86:92:73:0a:20:e5:44:d1:6a:
08:bd:6c:06:d9:ad:e5:ab:39:a3:83:b4:c0:e4:d7:
a2:23:17:6f:0d:97:21:26:13:8b:c0:69:f7:83:d6:
2f:70:e9:c4:d2:77:f9:ef:5e:5a:07:45:46:b3:43:
14:a3:8b:74:e7:5e:64:f7:de:5d:27:b5:0a:b9:6d:
d0:da:75:ee:a6:20:cc:1c:c2:40:05:75:5e:07:c0:
e8:ae:2f:a4:5a:31:09:eb:9e:b2:39:dc:28:e0:a8:
cb:d0:09:fb:44:30:73:a8:a4:a9:07:ff:4a:c5:1a:
35:b8:dc:6b:ef:c1:8d:dd:a9:f7:c4:7c:71:66:10:
d0:dc:8d:26:e0:0a:ae:26:9f:da:55:ca:52:71:ac:
3a:0a:cc:2c:c0:a2:c0:18:bf:44:87:53:6b:49:3a:
57:f6:e1:f8:9a:e5:e5:ce:de:8c:64:0d:d2:df:c8:
bf:41:a6:b8:0e:73:67:d8:ea:e8:0a:d2:b1:c6:bc:
d8:1c:c9:8c:08:73:9f:f5:92:53:64:c5:c5:00:7a:
53:18:ed:33:38:60:9a:90:e0:84:3e:ce:45:55:0a:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:AE:DB:38:46:72:8F:94:9B:3E:DE:04:FD:A0:3E:E7:C5:EC:52
X509v3 Authority Key Identifier:
keyid:75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:f9:74:b2:d2:36:0c:d9:83:43:6e:8d:12:6b:ce:67:28:e0:
0a:5f:f5:4a:93:24:38:20:35:47:92:7d:59:c6:9a:aa:ba:ce:
73:56:81:cc:0a:dc:11:f4:b5:15:cc:9d:df:c6:9b:ad:6a:d3:
c5:48:c8:f2:b8:79:c3:1f:ba:26:fd:2e:63:8b:c7:2c:da:a3:
7c:53:f4:cb:bd:bb:d0:4b:66:da:61:e4:58:74:08:5f:1e:43:
6e:23:65:68:14:41:14:bb:e4:b0:d3:3f:c7:b0:92:a2:97:af:
e1:a8:7c:61:ef:01:0c:38:a9:d2:9c:82:67:8d:ff:03:5d:c6:
94:80:7b:5a:df:71:6d:50:78:cf:cf:67:79:79:4b:76:98:ed:
bd:55:a2:07:8d:e4:a9:99:4e:42:b2:a3:d5:1c:a3:7b:c7:1d:
a8:c4:c7:be:31:16:53:ee:57:3e:f4:c9:7b:05:13:24:7a:ed:
8f:14:de:d0:38:34:0a:8e:b0:56:3d:39:26:0b:03:e4:fa:db:
51:69:7a:93:74:66:6a:92:46:de:84:31:4f:03:45:99:48:1c:
b4:32:6e:dd:31:0a:44:09:35:ae:7c:6e:1a:23:08:ab:19:77:
52:80:84:66:0f:3f:cb:15:a4:ce:8f:5f:c4:0b:3e:a8:9c:60:
81:ea:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:33 2026 by rpki-client