Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: WMu4pLpX2dGKKX8cZtx4WSZUvMYguQIKAgVP60KXXo0=
Subject key identifier: 06:FF:5E:0F:80:6E:BF:6C:37:58:10:6D:F8:98:D9:D8:80:4B:EF:DD
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 01A0D2DE44EE4D077D297F2363A9677077FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 10:02:56 +0000
Manifest this update: Thu 24 Sep 2026 10:02:56 +0000
Manifest next update: Fri 25 Sep 2026 10:02:56 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: s3F2az50AS2mn8JHy+yeRABwxkLq8a9iZcOnnb5MqIM=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:44:ee:4d:07:7d:29:7f:23:63:a9:67:70:77:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Sep 24 10:02:56 2026 GMT
Not After : Sep 25 10:02:56 2026 GMT
Subject: CN=06ff5e0f806ebf6c3758106df898d9d8804befdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:67:af:0d:ac:ef:d1:2d:dc:ea:6d:99:c1:
ed:af:75:57:b7:d2:8b:f9:fd:ec:35:b8:aa:bc:79:
da:24:7f:48:15:19:0f:39:14:bd:2e:b1:91:ff:f6:
b5:de:a1:44:2a:39:0b:dd:d9:3c:49:09:21:e2:60:
2c:ec:6c:77:03:f4:b2:cf:a5:d2:3f:b3:04:fa:89:
11:b8:ae:e8:25:24:e7:82:7b:68:76:1e:7e:78:ab:
d1:4d:38:9d:a5:c0:0b:12:03:b3:c3:ca:cc:41:5b:
a4:85:e3:be:04:0c:1c:05:4a:30:fc:be:11:73:94:
ff:b7:b0:95:b1:d3:00:bb:a0:bb:4f:0f:83:7b:6b:
a4:66:df:45:5e:9b:84:38:d2:c3:2f:39:fb:d5:79:
07:1e:bb:3a:a5:85:a9:79:59:ef:23:a1:71:42:e1:
d4:0e:87:38:fd:1d:92:82:10:0d:96:78:d3:2e:61:
67:34:2e:5d:45:bd:7b:d7:ef:be:4a:3b:7e:00:c1:
a5:3c:1e:fc:f1:4b:ec:60:5c:80:e7:e6:72:d1:96:
d1:30:0a:e7:4c:44:d3:12:7a:7a:e2:71:d5:6b:52:
9c:f7:f9:93:f3:df:c9:9c:9f:77:d9:8e:91:f4:48:
65:ac:95:31:b1:b6:89:d0:64:7d:39:eb:1e:ed:fc:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:5E:0F:80:6E:BF:6C:37:58:10:6D:F8:98:D9:D8:80:4B:EF:DD
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:6a:bb:49:35:65:4c:f9:73:bc:43:08:25:95:b8:1a:16:
d9:36:4c:97:4b:f2:28:ea:fd:47:09:24:32:b8:26:29:b8:4c:
7a:8a:90:15:49:f8:b7:b2:05:b9:42:6d:99:26:84:89:cb:fe:
46:1b:91:05:52:ab:87:82:79:bd:86:08:03:7f:04:f0:c0:03:
40:7b:83:f8:af:cc:10:62:1f:70:97:e7:01:ee:72:af:c4:db:
65:d2:8c:80:a4:e1:c1:83:ea:ce:1c:93:ad:0a:2e:3a:b9:ef:
28:5c:6e:ee:cd:82:cb:c4:55:8d:c2:13:a9:08:5d:33:45:b1:
ab:6a:9e:02:e7:22:f9:4c:67:2e:72:82:37:e6:56:78:af:52:
8e:2a:d6:7e:bc:86:3b:6d:9a:b8:27:b2:3e:1d:bf:d8:74:09:
d9:8a:3f:a7:40:ec:82:af:9e:cb:5b:94:b9:85:4c:ed:3a:83:
8f:a1:37:09:19:ef:15:31:0c:75:69:40:22:4e:0b:83:f1:5a:
27:a2:d1:77:5e:0e:ad:e1:4e:b0:09:e7:4e:cb:99:a8:6a:0a:
d9:c0:4f:74:9c:5b:9e:b9:bf:c8:c6:65:83:28:0f:eb:94:ca:
76:ae:0d:fa:80:f7:ee:de:8d:cd:75:cb:c5:8b:74:9a:7b:da:
d0:c6:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:26:42 2026 by rpki-client