Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: e3O8rxPDjA+wbR+3SNCM5Xx7gvCxTwvN8HqusI8eWe0=
Subject key identifier: 06:A9:A2:D4:22:AC:B3:16:DB:2E:5C:39:12:96:54:04:86:9D:0B:17
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 019D2996E430E3788B4959B41AA3B8A18603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 10:00:47 +0000
Manifest this update: Thu 26 Mar 2026 10:00:47 +0000
Manifest next update: Fri 27 Mar 2026 10:00:47 +0000
Files and hashes: 1: URJzBUsEISSG4FG2wK4plKVqkbA.roa (hash: d/U8BrAHZytlsN3OdFaMGxSnxJz7rd2AErfm0Q8DI8Y=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: 16zdKmhVtI33/Conp3ex1dtDtwwSyLpc4890uaKPkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e4:30:e3:78:8b:49:59:b4:1a:a3:b8:a1:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Mar 26 10:00:47 2026 GMT
Not After : Mar 27 10:00:47 2026 GMT
Subject: CN=06a9a2d422acb316db2e5c3912965404869d0b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:4d:ad:80:9f:ea:a4:2a:a4:e0:ad:19:ea:
ed:a0:11:76:fc:92:a8:2b:97:31:47:39:5a:aa:af:
d0:4e:16:b5:e0:8f:fb:67:25:b7:e7:cc:13:21:35:
16:c0:0e:56:9e:3c:65:46:32:67:4a:ef:12:f9:c5:
60:e0:e1:00:00:e2:6c:a1:08:1c:d1:d8:4b:ac:31:
ae:8d:95:90:57:f7:b8:97:3a:ec:25:66:52:10:2b:
63:b2:df:aa:62:31:c8:f4:c6:af:9f:3c:c5:c9:3e:
24:85:0e:ff:71:ba:f4:28:38:8d:c6:1c:62:e2:f1:
b0:ea:09:a5:80:d4:fb:89:5c:47:d5:9e:fd:a6:49:
e6:f3:62:6b:47:1e:8c:f6:a4:4c:35:8c:c0:bb:cb:
cc:a8:22:5c:a7:8f:ad:70:00:fe:fb:60:26:03:7c:
42:82:7d:bf:84:85:ee:84:18:21:65:d2:45:a7:93:
ad:a0:06:22:77:5d:51:78:99:58:74:61:c0:c2:76:
43:7d:3d:c7:32:59:ca:83:8e:10:8d:eb:4f:0f:a1:
d1:be:64:ad:6d:60:7f:d4:10:7b:8f:e3:57:ce:ab:
aa:7c:29:21:ef:0d:a1:e9:85:db:37:b3:92:88:01:
b8:ea:75:87:1b:52:70:5f:39:81:8f:69:85:84:99:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:A2:D4:22:AC:B3:16:DB:2E:5C:39:12:96:54:04:86:9D:0B:17
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c9:c4:16:2a:a0:72:d9:80:f8:26:8c:6b:46:56:0b:b2:3a:
7c:fe:c9:3c:91:68:3b:3e:2e:dc:6d:ec:a3:74:ae:81:d2:da:
79:60:a2:d6:58:cb:01:3a:25:51:00:74:dc:7e:7e:f5:47:92:
c4:a3:bc:70:20:e7:df:d3:b1:49:91:e4:c7:92:6d:e6:f3:eb:
be:e3:a0:c3:2c:94:4b:a3:ee:dd:48:49:b4:65:d5:ab:53:c0:
21:10:a3:5a:32:9e:d5:ac:18:9e:fb:de:6d:c2:39:dd:c9:f8:
a5:fd:0c:07:58:f3:7b:59:f7:bc:d0:e5:87:93:ee:94:a5:6a:
52:32:21:36:2e:f9:72:da:62:26:cc:6b:cf:05:ae:ae:9c:15:
c7:f9:46:76:70:5e:25:43:59:db:62:b5:2c:7c:a4:05:3a:77:
9e:20:99:75:c4:93:32:b5:84:3c:88:4a:b2:42:a7:e7:e9:32:
41:81:fc:11:e9:37:28:f8:dd:79:cf:6d:a8:cc:a5:54:9c:1d:
4f:91:5d:e1:7c:0a:77:dd:3a:8b:61:3c:fc:b2:24:99:d1:94:
70:2f:d0:f2:52:77:65:a6:2b:bc:81:14:bb:bb:50:52:b4:65:
e8:d0:66:df:fd:65:ad:69:a4:12:ba:2c:e2:4a:01:64:a5:04:
35:4e:74:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pluQw43iLSVm0GqO4oYYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZTA1ZTllZTU5NDc3ZTAxNTVmYzFlZGMwYTE4MzA3Mjk3
NjZlODgwHhcNMjYwMzI2MTAwMDQ3WhcNMjYwMzI3MTAwMDQ3WjAzMTEwLwYDVQQD
EygwNmE5YTJkNDIyYWNiMzE2ZGIyZTVjMzkxMjk2NTQwNDg2OWQwYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEhNrYCf6qQqpOCtGertoBF2/JKo
K5cxRzlaqq/QTha14I/7ZyW358wTITUWwA5WnjxlRjJnSu8S+cVg4OEAAOJsoQgc
0dhLrDGujZWQV/e4lzrsJWZSECtjst+qYjHI9MavnzzFyT4khQ7/cbr0KDiNxhxi
4vGw6gmlgNT7iVxH1Z79pknm82JrRx6M9qRMNYzAu8vMqCJcp4+tcAD++2AmA3xC
gn2/hIXuhBghZdJFp5OtoAYid11ReJlYdGHAwnZDfT3HMlnKg44QjetPD6HRvmSt
bWB/1BB7j+NXzquqfCkh7w2h6YXbN7OSiAG46nWHG1JwXzmBj2mFhJkZ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAapotQirLMW2y5cORKWVASGnQsXMB8GA1UdIwQY
MBaAFHbgXp7llHfgFV/B7cChgwcpdm6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQt
YjUzM2Y0OTQxYWZlLzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQtYjUzM2Y0OTQxYWZl
LzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsnEFiqg
ctmA+CaMa0ZWC7I6fP7JPJFoOz4u3G3so3SugdLaeWCi1ljLATolUQB03H5+9UeS
xKO8cCDn39OxSZHkx5Jt5vPrvuOgwyyUS6Pu3UhJtGXVq1PAIRCjWjKe1awYnvve
bcI53cn4pf0MB1jze1n3vNDlh5PulKVqUjIhNi75ctpiJsxrzwWurpwVx/lGdnBe
JUNZ22K1LHykBTp3niCZdcSTMrWEPIhKskKn5+kyQYH8Eek3KPjdec9tqMylVJwd
T5Fd4XwKd906i2E8/LIkmdGUcC/Q8lJ3ZaYrvIEUu7tQUrRl6NBm3/1lrWmkEros
4koBZKUENU50rw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:14 2026 by rpki-client