Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: gf6Ey8s6V7N1FixjPsRoOPZ5tzhyL0gnXIQuqgSfasE=
Subject key identifier: 16:13:02:8D:6E:08:C7:12:82:AA:0F:BC:8D:7E:90:61:28:63:6C:3C
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 019F932460E0EBD1D2CECB679CB467EEDFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 038D
Signing time: Fri 24 Jul 2026 08:01:02 +0000
Manifest this update: Fri 24 Jul 2026 08:01:02 +0000
Manifest next update: Sat 25 Jul 2026 08:01:02 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: 2pP56RtEJDHlq69cKfL+oJBeUXgNwl/+EsTo0v/IxZY=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:60:e0:eb:d1:d2:ce:cb:67:9c:b4:67:ee:df:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Jul 24 08:01:02 2026 GMT
Not After : Jul 25 08:01:02 2026 GMT
Subject: CN=1613028d6e08c71282aa0fbc8d7e906128636c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:db:64:3b:57:db:f1:85:ad:77:9b:2b:84:
59:1b:17:32:21:fc:43:a3:19:a5:74:a8:34:16:43:
28:f4:7a:cd:fd:d4:97:cb:bf:6b:2a:2c:7f:a7:79:
dd:34:e6:ec:3c:ac:a9:0d:71:e8:82:64:a3:25:59:
b8:6d:0e:56:4d:e5:ed:07:06:79:82:bc:f1:2a:31:
1b:51:b3:7f:93:9c:6b:aa:35:cb:fd:e3:99:c9:22:
7f:4d:b2:a4:26:f3:14:4b:ee:6a:ee:63:a5:d6:c3:
75:76:cd:f2:01:f2:86:13:27:db:a1:2d:8d:f2:b8:
32:46:2b:89:f5:cf:64:f3:e7:f5:92:26:20:3b:98:
1e:a9:67:32:51:06:59:a7:f5:8e:86:2c:5c:bb:77:
f3:b1:21:fc:98:6d:e2:47:b2:92:30:26:30:21:20:
56:8b:4f:81:74:ae:e0:ca:d8:48:ee:34:f4:c1:9e:
a1:a9:97:99:a2:b3:a5:f3:3e:a6:42:df:ea:ad:29:
1d:9d:66:66:4a:d6:a5:12:d6:c4:12:f4:52:95:ad:
ad:54:48:48:06:f6:72:b8:6b:ba:62:9c:fc:2c:b2:
8f:8c:49:0a:ca:5f:f9:85:36:59:26:53:c9:6a:a7:
ad:d5:97:75:0f:f5:81:71:12:5c:4a:f5:c8:10:8a:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:13:02:8D:6E:08:C7:12:82:AA:0F:BC:8D:7E:90:61:28:63:6C:3C
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3e:7c:91:7b:6c:b2:56:24:3b:55:64:24:0b:6d:9b:5b:48:
81:bf:21:97:60:64:2f:ff:f9:a8:83:d1:9a:9f:39:f6:ad:3a:
46:d8:d9:4b:6b:67:cb:ac:86:8a:65:99:92:93:37:23:72:1c:
24:76:74:ee:bb:3f:4b:c6:7d:4e:23:ad:92:ac:08:19:c8:44:
5d:e5:38:f2:14:a6:b2:12:0c:f9:19:0e:40:3e:bd:48:4a:4d:
36:99:f3:bd:81:bd:db:03:39:76:bd:28:7f:53:63:fa:d7:4f:
b4:06:00:28:56:e9:f0:9b:3e:72:70:fb:db:db:82:78:b3:a2:
8a:7b:0f:f3:66:b9:84:b7:2a:63:80:a6:09:f8:3e:64:08:3e:
13:62:e8:84:7a:d0:eb:b8:b4:4f:18:27:0b:ee:41:b9:c6:61:
79:80:68:ed:24:a5:71:35:eb:8d:92:fa:fc:3b:4b:98:cd:2c:
5b:ca:72:6f:b2:cc:69:1f:fa:cc:81:be:cd:36:b2:00:0c:dd:
3f:00:6b:79:17:92:94:d2:40:8b:a3:95:c5:9f:a6:9c:91:1e:
b9:18:57:e9:05:7b:fd:bd:a8:32:20:5c:5d:3b:a8:24:19:d0:
34:81:29:e2:0a:7f:02:ef:5a:6c:0a:3e:91:23:ce:d0:da:75:
ee:01:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:43 2026 by rpki-client