Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: BHDClUTdMqBQgx+AOI173ueoC7pyjZvqaBf9XdF4nV0=
Subject key identifier: 9B:A6:2D:72:AA:EC:3B:76:07:8D:23:7D:92:41:C8:49:65:7D:5C:16
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 019D2B17828C9FB7FE82316ED0ED630AEFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 024E
Signing time: Thu 26 Mar 2026 17:00:54 +0000
Manifest this update: Thu 26 Mar 2026 17:00:54 +0000
Manifest next update: Fri 27 Mar 2026 17:00:54 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: VzKCTRS6/wGysq54ML7sVezWfljfLXyRJnnmdrLAa+s=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:82:8c:9f:b7:fe:82:31:6e:d0:ed:63:0a:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Mar 26 17:00:54 2026 GMT
Not After : Mar 27 17:00:54 2026 GMT
Subject: CN=9ba62d72aaec3b76078d237d9241c849657d5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:de:dd:56:99:45:15:f6:3f:2b:9c:0a:38:
05:93:ed:f0:af:bd:a7:09:04:25:3d:e6:7a:b3:9c:
c1:06:29:6b:89:7c:91:54:6c:63:52:54:a4:83:37:
ad:4d:8f:52:ba:d0:7f:0a:c4:04:08:a2:a1:aa:32:
15:a6:94:b7:3a:e5:36:33:f4:b2:ca:45:45:fc:7c:
2d:1f:10:d9:49:f3:39:4b:8b:a8:f2:48:74:f5:c9:
5e:ef:ad:cd:24:9c:ce:8c:2d:87:97:d8:d4:1c:55:
d4:84:89:5d:4d:68:a5:0a:fb:fd:90:04:2a:f6:ee:
cb:1c:29:8a:3f:aa:bc:3a:c6:6d:d8:e6:94:db:54:
d7:9c:93:44:5b:7c:8b:6b:cc:af:ae:c1:4c:3b:7c:
7c:c1:d2:6e:6f:42:54:ab:0e:58:ae:80:a9:fc:74:
51:1a:84:a6:3e:71:b2:55:61:ab:51:f3:c8:2b:7a:
f1:24:c2:e9:3f:e4:b3:ee:ef:b3:70:8e:3e:36:d3:
10:2b:2b:03:10:f6:e0:97:60:4a:4e:03:0b:83:db:
bd:80:65:15:be:f6:e3:ba:88:78:5a:fc:71:9b:dc:
80:3f:02:dd:f6:69:37:27:2d:cb:e7:b8:ea:c9:4b:
ca:e9:96:b0:1f:ee:3d:da:d9:f5:17:f5:07:71:42:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A6:2D:72:AA:EC:3B:76:07:8D:23:7D:92:41:C8:49:65:7D:5C:16
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:b4:8c:20:e1:97:ba:1b:7e:53:66:e5:81:d7:85:e1:99:
4c:89:f9:fc:56:2f:31:ca:16:c3:01:91:f5:17:9d:14:94:b3:
4f:fe:22:0a:17:d2:fb:e6:80:8e:c7:71:dd:63:25:80:65:12:
bd:3e:00:18:02:63:11:71:c5:f7:21:58:ae:55:d9:7e:91:20:
81:f7:ee:e0:dc:58:7d:d6:d8:c5:33:d7:17:22:46:90:9c:0b:
96:08:2b:31:77:f3:98:65:4d:46:74:a1:6b:92:3b:0b:c3:5f:
b5:05:89:64:df:60:9b:73:95:53:84:fa:d6:b4:75:13:41:33:
8d:2b:b9:0d:90:54:7b:59:66:02:e3:25:3e:c2:6d:34:ce:cc:
81:56:d8:8a:57:66:be:dc:7f:88:2c:f0:da:a7:b0:a2:e4:3a:
75:34:30:87:51:f9:2e:aa:66:16:f5:07:16:a6:1d:fd:b9:4c:
81:58:47:1d:bc:88:42:2d:00:4f:a6:f8:ab:ec:a2:fa:d9:d1:
3b:4f:a5:56:c3:59:3d:dd:ca:2a:b7:20:ff:5d:d6:56:4c:40:
54:3d:b0:b5:94:0c:e9:73:99:5f:0b:8e:6e:5c:34:95:16:12:
5c:5b:b0:97:36:f3:b6:7c:49:b6:1d:b7:ff:89:43:a7:67:ae:
f7:9d:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:37 2026 by rpki-client