Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: 4SsHArmTVHXoP2yMHVvboOVAw7reppbrBLxiBkSqPt4=
Subject key identifier: DD:CE:81:CD:55:B4:F4:65:79:F0:FC:27:7D:26:F9:25:2E:A0:7B:25
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 019F92490FDB57757C94CE0033DD6674F2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 04:01:29 +0000
Manifest this update: Fri 24 Jul 2026 04:01:29 +0000
Manifest next update: Sat 25 Jul 2026 04:01:29 +0000
Files and hashes: 1: 9pt3MDCay7srVLLtOW6VihLRgqg.roa (hash: t8waBrYlHxhkv2G7wxFbB2b8tWVcdcespy2BiSBs4U8=)
2: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: orW+06Aaj5kAomqMKjr9g+nUlhpSjX2gkmSB2RAzLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:0f:db:57:75:7c:94:ce:00:33:dd:66:74:f2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Jul 24 04:01:29 2026 GMT
Not After : Jul 25 04:01:29 2026 GMT
Subject: CN=ddce81cd55b4f46579f0fc277d26f9252ea07b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:b9:0c:9c:e6:e1:cb:96:68:55:97:34:15:
17:86:08:79:f0:39:4e:ba:7b:a8:7d:3a:12:27:fa:
d2:e7:b6:c8:15:23:8d:97:81:50:32:2f:d2:c0:d9:
6d:07:7a:af:9e:95:db:91:55:ab:1f:7f:b6:03:d6:
34:35:4d:c7:6f:0e:8c:39:42:16:a8:cc:10:dd:1e:
ed:4e:f1:32:85:79:11:69:91:36:59:2a:0c:fd:f6:
d2:15:61:8a:05:69:b5:0a:90:b5:3d:ba:f8:33:3e:
04:87:d4:04:8f:b3:34:a6:6c:00:7c:03:f8:2d:e7:
f0:15:c0:29:56:1c:f7:ec:17:e3:17:b2:51:0b:d9:
05:23:bb:5f:f2:14:17:2b:ce:ee:24:f2:1b:ee:f1:
0a:07:2e:fb:a5:ee:c7:a4:9b:ac:ff:50:0b:48:0b:
6b:64:b1:81:15:f5:7a:14:e7:cf:7f:66:74:75:27:
de:40:1a:8d:fd:00:6f:43:74:72:bd:14:e7:c3:a7:
ba:2f:3e:d7:ad:ba:f5:c9:67:50:e9:1b:02:70:32:
ec:95:53:4d:11:17:c1:5a:ab:62:93:e7:d2:27:61:
cb:dc:e6:37:02:ff:9f:2d:cb:28:b5:2d:a2:13:99:
c3:48:40:65:14:53:a3:72:46:b5:16:b4:32:eb:10:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CE:81:CD:55:B4:F4:65:79:F0:FC:27:7D:26:F9:25:2E:A0:7B:25
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e0:3a:57:5a:24:21:ff:f8:6b:03:cd:37:3c:3a:f1:c5:c6:
7f:90:75:11:c4:28:4d:af:9a:38:5b:87:6b:ac:d1:6e:c0:18:
91:d0:01:a3:8c:0d:da:43:de:14:1b:f9:2f:15:ff:fe:8e:53:
06:2e:f7:1d:61:b2:ad:a9:df:9d:07:ef:70:48:cb:28:28:25:
7a:39:8b:c9:a4:39:32:03:9d:c3:c4:2b:d9:68:88:8b:09:aa:
8c:4f:56:02:2a:45:1e:23:42:bd:d7:da:03:6d:2f:54:8a:56:
b4:90:61:24:76:bf:a1:3f:aa:c5:58:d3:78:e4:7d:96:8b:1a:
6e:86:a3:0b:79:40:40:77:72:3d:d3:83:32:ee:f5:24:76:b2:
c0:b6:6f:42:12:d9:ae:81:d4:17:fe:40:32:60:13:a1:59:6a:
81:5c:9b:d9:8c:6a:ac:22:a2:f4:d0:be:02:15:70:8e:7d:d2:
73:cc:6c:46:1f:00:f3:8b:24:db:a4:d7:69:58:54:15:b0:2d:
6a:19:2f:c2:9c:46:0d:29:49:0e:d6:0e:a7:d7:9f:63:22:7b:
ab:bd:8c:8e:e2:aa:22:a1:b1:bf:2b:af:78:52:82:0b:44:c5:
df:f9:46:a7:a9:f6:7e:33:1a:c3:c8:d2:67:af:94:9b:05:c7:
88:9f:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:05 2026 by rpki-client