Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: qa2eVV5xsXh5EhMuRpsWB5Tsv7U2rYhFflPdeQrQuwo=
Subject key identifier: 12:84:4B:DA:F6:4D:B2:B0:B8:7E:A7:2C:DF:5C:BF:79:FD:F9:B4:98
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 019E1E6C6D7DD187A7EFEFDCF238B9858B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 02CC
Signing time: Tue 12 May 2026 23:01:22 +0000
Manifest this update: Tue 12 May 2026 23:01:22 +0000
Manifest next update: Wed 13 May 2026 23:01:22 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: hxj/0vDwVh85520lLPTSqN3WuVhPKnkQl6n9FXMY2RI=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:6d:7d:d1:87:a7:ef:ef:dc:f2:38:b9:85:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: May 12 23:01:22 2026 GMT
Not After : May 13 23:01:22 2026 GMT
Subject: CN=12844bdaf64db2b0b87ea72cdf5cbf79fdf9b498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:1b:8a:d9:47:fa:1d:8a:50:d9:e5:fa:2f:
02:70:2e:65:66:65:6c:4f:15:f4:c2:06:c6:9f:69:
c6:6c:20:9f:7a:30:ae:ea:55:70:68:7c:0b:5f:19:
f3:e1:d9:5b:cd:a3:62:d3:44:08:19:aa:2b:cb:9e:
71:46:1f:42:ce:cb:dc:d2:8b:71:c3:fb:1c:b0:e1:
a1:86:6a:a0:ea:f1:73:14:2f:2d:92:31:7a:87:6d:
e9:56:70:85:bf:30:dd:d9:aa:48:b4:22:ad:28:a6:
23:87:3f:77:46:b5:bf:b7:9e:b9:97:55:fb:9e:a5:
f7:09:8a:c1:e4:12:76:1c:36:ed:7b:19:b8:94:6a:
d1:5e:79:ff:55:ce:40:cd:82:4f:fe:27:c8:c8:46:
c5:88:cf:31:43:94:22:d3:bb:3c:d1:c9:03:0a:21:
dd:cd:97:20:20:28:63:f4:b8:de:e7:ef:f5:a6:93:
e7:79:83:7f:b3:24:f7:a7:f3:e9:5d:02:c1:5f:ed:
27:ac:c9:1e:9f:10:30:15:7b:00:46:72:3f:6a:de:
aa:6c:f1:c4:c8:e8:17:81:b8:3c:39:fb:39:28:b2:
32:0a:cf:9a:d9:0d:63:cb:0c:8a:3e:25:f2:69:bc:
c8:25:fe:7c:1e:c4:da:31:30:e1:7e:8a:71:8b:37:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:84:4B:DA:F6:4D:B2:B0:B8:7E:A7:2C:DF:5C:BF:79:FD:F9:B4:98
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ac:be:a2:62:65:03:ec:b7:44:a2:09:17:88:73:08:1e:06:
81:fe:73:a8:03:b9:01:12:05:cd:65:71:1f:18:c5:85:bc:6e:
5e:12:04:1d:33:d7:86:c2:26:70:68:1a:e1:dd:08:63:ce:71:
af:17:e9:cb:89:ed:73:04:fa:b1:cc:a0:2b:25:3b:43:56:09:
05:c9:ed:ff:be:a3:a3:67:21:42:72:38:11:8d:65:b0:ee:4c:
3f:3c:6d:83:da:94:5f:36:09:c5:39:36:40:fe:5b:f9:ba:f2:
cb:c6:b2:30:c9:5e:76:cf:de:5d:ec:5e:c2:69:41:5f:e8:7a:
d7:71:e0:b8:bf:34:83:ab:59:6f:f0:83:1c:61:47:74:76:f6:
24:49:cc:34:82:cf:5f:ce:e8:d6:3e:fd:8d:b1:87:c0:52:23:
5e:b6:fd:07:69:20:cf:23:37:6b:38:73:f1:59:2d:c9:ae:68:
90:09:89:18:be:33:6f:92:b0:af:c1:32:f4:2a:e5:14:7b:20:
31:05:2f:64:be:98:6b:ce:a9:f5:d2:fd:3d:cd:db:ee:b4:3d:
d7:fb:1a:f7:10:f7:7e:b5:04:2e:42:f1:7d:84:39:24:6e:83:
da:2b:25:36:b5:fc:06:4d:c0:70:54:48:96:9e:b6:3e:a1:e5:
cc:69:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:47 2026 by rpki-client