Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: Kr1c8z6w1yLqeRG447jh4pMLCreKgXD+cpXRiqcEBvo=
Subject key identifier: 3D:8F:C0:2D:EC:83:28:A3:11:42:CB:7A:8A:14:13:5B:79:63:8F:01
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019D265EE1575C57A38BDEED9081D14CAA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: EiT1kWLf6bL7feGJ3uQEd/eFzOKduDfH2tDDgJWej3M=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e1:57:5c:57:a3:8b:de:ed:90:81:d1:4c:aa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=3d8fc02dec8328a31142cb7a8a14135b79638f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:a4:a1:00:b4:d5:4b:ff:55:b2:ff:91:59:
f4:34:e0:7e:02:ec:35:5b:3b:38:f8:e9:66:1b:11:
27:2b:ed:04:49:68:a4:f4:1d:2f:2e:84:a9:39:25:
30:1e:bd:d4:6e:7f:4c:9e:cf:47:ff:c4:5e:a4:27:
31:ba:db:b9:cf:0a:c1:35:86:00:2e:82:fd:5d:9c:
18:54:01:94:7b:4a:4c:b1:e6:71:3a:e5:b3:e8:42:
1a:4e:29:b3:d6:32:6f:66:78:fe:06:4d:d8:89:40:
0e:e6:6f:f1:95:4d:07:ce:42:48:cc:e4:57:9c:d3:
4b:b5:0e:a3:ed:cb:2c:10:e3:76:84:82:a0:be:08:
d5:88:66:72:39:20:d7:68:1f:c0:1f:57:20:2e:42:
9a:b1:d0:27:9a:96:af:89:55:51:3a:4b:9f:00:f6:
f3:4d:ea:3f:15:e0:75:a3:4f:47:89:b4:3d:32:75:
2a:51:2b:53:8c:95:23:a0:42:c4:ab:79:35:61:1b:
47:e2:25:57:28:e1:cb:b0:3b:ad:97:e8:b1:ca:f8:
8e:a5:ce:02:e3:93:c0:30:6f:26:5f:43:34:10:f3:
e0:fb:73:e7:fc:78:16:42:6d:29:df:61:f3:17:25:
6c:e8:dd:d8:c3:55:e8:76:d7:1b:f0:9d:4f:29:3c:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:C0:2D:EC:83:28:A3:11:42:CB:7A:8A:14:13:5B:79:63:8F:01
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:be:53:52:41:86:4f:30:3a:cc:fb:b2:de:09:2e:ca:ad:8f:
cb:b5:0c:c7:34:d2:c1:7b:68:d7:a3:bf:10:46:39:8a:e1:cb:
95:ac:14:32:44:5a:82:83:ba:97:d6:08:b4:d2:e5:c5:74:82:
8b:2c:25:34:6e:8f:61:56:56:99:f2:8e:3c:e8:d6:b5:44:16:
ac:42:94:eb:43:23:d1:02:45:0b:6f:3f:9a:0b:1f:17:93:04:
88:a5:fb:a9:9a:75:5a:3d:37:9f:6c:a2:6c:b5:98:90:8e:48:
51:8b:eb:0a:3d:27:db:5e:7d:26:d2:c4:1e:88:40:e2:1d:5e:
2d:af:91:74:c7:20:a1:a8:91:05:16:1d:ad:f7:81:cd:e5:70:
06:68:d4:e0:1c:d0:03:37:2c:00:82:75:96:80:b8:0b:0f:34:
b0:21:9c:5c:68:db:aa:9d:f7:c6:88:d0:3c:78:98:70:16:ba:
7c:1b:7e:ff:b8:a1:d9:d3:81:84:ce:0c:36:4f:57:74:cb:bb:
41:85:7d:4d:95:49:9a:85:e8:92:64:7a:31:43:5f:36:15:4e:
47:68:21:e0:3e:c0:cd:58:1c:8c:36:2c:f5:1e:ca:35:41:43:
a8:58:05:21:ac:a3:5a:9e:1b:46:b4:36:fb:f3:f0:f0:33:8c:
62:78:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:18 2026 by rpki-client