Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier: DYLR3c+3glkK+KNKkyLUS2tSm8qfTjn8glsTyzawnlE=
Subject key identifier: 02:B4:1D:61:BB:A6:48:75:D5:DB:A3:4E:F8:80:15:94:FF:AC:13:C8
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 019D265F257C3C65316D4BDB3AB8CE244177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:02 +0000
Manifest this update: Wed 25 Mar 2026 19:01:02 +0000
Manifest next update: Thu 26 Mar 2026 19:01:02 +0000
Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: YiDDLVQS4vQhefhrhVzJNoFlRHpvZ80rhJQV6q+eOk0=)
2: YJY4ynuuiedvHHvTSK2Y99WgTKA.roa (hash: vAaOsQ/R4WjdxzIXlSEYb3gqw5HoiLYG5de2yPVuZNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:25:7c:3c:65:31:6d:4b:db:3a:b8:ce:24:41:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Mar 25 19:01:02 2026 GMT
Not After : Mar 26 19:01:02 2026 GMT
Subject: CN=02b41d61bba64875d5dba34ef8801594ffac13c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:f2:af:76:7a:e7:26:94:47:12:e1:b1:90:
6c:29:b5:bc:cd:7b:2c:fa:10:2a:87:73:e3:23:16:
66:81:8c:04:5a:a8:73:b0:dd:d4:83:84:d1:31:d2:
2e:64:d9:06:29:b1:29:13:12:bd:bd:a5:24:26:fe:
71:78:85:8b:76:69:80:2b:3d:e4:95:7c:34:03:62:
0a:bb:d6:34:5e:d0:47:3b:bd:8c:4e:f0:d5:1a:07:
4f:02:61:a6:60:bd:8b:a3:9d:cd:4e:8d:28:b3:e0:
68:85:e9:77:d0:89:da:c8:bc:28:b4:41:8c:08:47:
82:1e:55:71:87:d5:38:36:db:53:3b:40:02:58:39:
6e:cb:6c:9a:7e:a6:44:a5:36:15:a4:72:e3:18:af:
cf:4d:6e:36:41:0e:d3:95:5a:f1:f4:b6:0f:4e:81:
92:4e:76:11:6d:72:3b:0d:3f:af:83:42:3c:30:af:
dc:bc:15:97:b1:28:5a:c1:9f:33:03:f4:da:57:88:
62:5f:55:ed:22:55:34:27:f0:cf:70:68:10:dd:d6:
2a:18:b8:ec:5f:61:cd:dc:69:ae:1c:76:4e:ed:38:
3f:80:b0:9e:e5:aa:dc:f5:d9:5e:bc:0f:bf:a1:7f:
36:42:fd:cb:86:6d:23:06:60:7d:22:0f:d7:7d:f1:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:1D:61:BB:A6:48:75:D5:DB:A3:4E:F8:80:15:94:FF:AC:13:C8
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:c2:b1:16:16:08:4b:5a:e3:6d:92:72:29:50:8d:00:81:
96:ec:ce:4d:3a:54:7c:7b:d6:51:8b:69:7d:a2:2e:fb:c5:16:
75:22:36:d1:75:88:19:8c:3e:b0:60:b8:a8:c8:22:f7:87:05:
ee:a1:6d:d1:93:57:28:3d:2b:43:e0:f6:4c:13:6a:5e:f4:12:
da:99:be:14:37:92:60:c4:d0:64:a0:fa:d7:99:39:f9:73:25:
d5:d7:b8:1f:72:e8:f0:fc:95:9e:1f:52:8e:38:de:7c:55:2f:
a8:67:f8:f8:11:c8:b0:a5:94:9e:99:7d:c0:c9:f5:c6:de:b1:
91:53:a0:a4:44:82:fc:8a:65:65:d2:9a:be:17:f4:94:6d:31:
c4:76:60:6b:fc:b9:7d:01:69:68:8b:37:ef:b8:8d:dc:be:62:
90:53:e1:88:89:bb:a8:0a:8d:65:b9:99:ae:29:64:54:19:40:
f9:7c:36:aa:60:22:c6:f8:36:6a:4d:ae:69:b1:df:a9:4b:1a:
0e:3c:1a:c8:66:6a:be:a0:15:b6:c7:a1:dc:9a:f8:33:03:67:
b3:e1:38:03:82:da:9d:59:72:31:b3:44:13:db:fa:17:4d:90:
cb:70:40:0e:eb:fd:36:0c:52:7e:d5:9b:e3:bb:3e:f4:0a:7e:
42:f9:8b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXyV8PGUxbUvbOrjOJEF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTNkNGQ4MTBmMjQ3Nzg0MWE4Yjg1NTkzYjhmMzBlOGFl
Y2Q0MDkwHhcNMjYwMzI1MTkwMTAyWhcNMjYwMzI2MTkwMTAyWjAzMTEwLwYDVQQD
EygwMmI0MWQ2MWJiYTY0ODc1ZDVkYmEzNGVmODgwMTU5NGZmYWMxM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X3yr3Z65yaURxLhsZBsKbW8zXss
+hAqh3PjIxZmgYwEWqhzsN3Ug4TRMdIuZNkGKbEpExK9vaUkJv5xeIWLdmmAKz3k
lXw0A2IKu9Y0XtBHO72MTvDVGgdPAmGmYL2Lo53NTo0os+Bohel30InayLwotEGM
CEeCHlVxh9U4NttTO0ACWDluy2yafqZEpTYVpHLjGK/PTW42QQ7TlVrx9LYPToGS
TnYRbXI7DT+vg0I8MK/cvBWXsShawZ8zA/TaV4hiX1XtIlU0J/DPcGgQ3dYqGLjs
X2HN3GmuHHZO7Tg/gLCe5arc9dlevA+/oX82Qv3Lhm0jBmB9Ig/XffGPVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK0HWG7pkh11dujTviAFZT/rBPIMB8GA1UdIwQY
MBaAFA7j1NgQ8kd4Qai4VZO48w6K7NQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzIt
YzMzMjZhZDJjZjhmLzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzItYzMzMjZhZDJjZjhm
LzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5zCsRYW
CEta422ScilQjQCBluzOTTpUfHvWUYtpfaIu+8UWdSI20XWIGYw+sGC4qMgi94cF
7qFt0ZNXKD0rQ+D2TBNqXvQS2pm+FDeSYMTQZKD615k5+XMl1de4H3Lo8PyVnh9S
jjjefFUvqGf4+BHIsKWUnpl9wMn1xt6xkVOgpESC/IplZdKavhf0lG0xxHZga/y5
fQFpaIs377iN3L5ikFPhiIm7qAqNZbmZrilkVBlA+Xw2qmAixvg2ak2uabHfqUsa
DjwayGZqvqAVtseh3Jr4MwNns+E4A4LanVlyMbNEE9v6F02Qy3BADuv9NgxSftWb
47s+9Ap+QvmLCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:55 2026 by rpki-client