Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: DU9kg7LUneZTan1dAe2H3awhD8atNwr+eefTALMSDO4=
Subject key identifier: 3B:0F:C7:F1:47:64:88:B2:83:0E:6A:38:AA:B6:84:D0:4E:5F:59:C6
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 01A111F2EA9874E8006E6563AEE948490159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 1A20
Signing time: Tue 06 Oct 2026 16:01:34 +0000
Manifest this update: Tue 06 Oct 2026 16:01:34 +0000
Manifest next update: Wed 07 Oct 2026 16:01:34 +0000
Files and hashes: 1: URJzBUsEISSG4FG2wK4plKVqkbA.roa (hash: d/U8BrAHZytlsN3OdFaMGxSnxJz7rd2AErfm0Q8DI8Y=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: Pz0kGa92wYjKACjcUVCiPyemDy3uA3VU6zKcWkjIUGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:ea:98:74:e8:00:6e:65:63:ae:e9:48:49:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Oct 6 16:01:34 2026 GMT
Not After : Oct 7 16:01:34 2026 GMT
Subject: CN=3b0fc7f1476488b2830e6a38aab684d04e5f59c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:8b:81:8b:02:f3:5d:5a:8c:59:97:4f:bf:
65:f0:6b:e6:f6:8b:d2:f0:2c:fc:47:03:22:ae:f5:
a6:7e:fd:c2:d3:5d:41:20:e1:a9:88:f8:ad:e7:36:
ea:64:b6:e6:c4:2b:e3:86:8d:a1:17:07:a8:dc:01:
7e:d3:aa:69:bf:d3:eb:b8:f0:28:aa:94:da:f6:6e:
d6:32:d7:f2:c8:fd:f2:ae:57:c7:e8:47:e8:1b:dd:
20:01:ff:af:38:85:72:55:92:af:f7:b7:b8:d7:46:
22:74:e9:67:88:99:88:da:a3:3f:3b:fc:5d:e2:54:
de:58:d8:cc:fb:c6:aa:86:34:fd:a8:6e:32:e5:49:
af:43:2c:ac:9d:17:57:ba:ef:b4:c3:cf:02:ef:f2:
ea:4c:a8:a3:28:1f:32:fc:69:f3:35:c6:91:73:73:
d5:76:91:e4:f6:34:9b:1c:b9:db:7e:7f:9b:f4:a0:
f9:a9:c5:ea:cf:d3:fb:2d:88:0f:6f:c9:f0:e1:a9:
c5:22:e6:49:1e:50:9c:13:09:5f:73:dc:4e:23:c3:
ad:b4:aa:32:ab:e1:8f:57:69:bf:5a:c2:7d:5b:69:
47:6f:5b:ed:e7:6a:4d:b2:64:03:48:22:72:a3:56:
93:ce:7f:f8:0c:d9:c0:5a:95:b1:7d:85:65:2c:38:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:C7:F1:47:64:88:B2:83:0E:6A:38:AA:B6:84:D0:4E:5F:59:C6
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:11:71:3d:68:29:ff:b1:9f:28:4e:7c:15:04:fe:53:d0:f7:
bf:25:ab:dd:7a:b6:df:91:42:3e:21:77:c8:f5:f8:5b:85:ca:
7b:d1:58:56:be:e4:c0:4d:81:f6:01:cc:d2:b0:e5:ea:19:7a:
5b:0d:70:8b:e1:80:46:12:f2:d6:99:19:0f:91:b8:94:35:79:
7e:b6:a6:f6:9c:4c:fb:22:23:ee:84:b1:06:bd:89:bd:ea:1f:
fa:9c:45:49:c8:c9:3b:87:4b:3a:45:1f:8c:69:2a:1b:7f:b0:
9a:e2:94:3b:a1:d3:0e:d1:1b:bd:3e:48:2a:d6:f1:e8:ba:92:
35:9c:57:c5:96:1c:d2:d9:84:2a:79:58:c1:9c:c4:47:8a:2f:
8c:03:80:2c:18:70:7e:f3:89:40:d4:55:ea:b7:e9:4f:3e:ff:
bb:0c:58:61:49:42:18:4a:93:28:e8:76:a1:ab:18:c7:08:ea:
19:dd:1e:5f:a6:0e:01:84:3e:47:2b:88:2a:18:64:e8:3a:a8:
99:34:10:a4:ae:ec:c9:69:f5:d6:f0:1d:25:58:a5:34:0f:87:
c1:61:29:9b:a6:a1:c0:30:09:09:45:7b:11:93:c2:90:6f:7d:
22:e6:fc:ea:54:2f:04:18:70:95:40:38:2f:70:b0:ed:73:f8:
93:91:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:04:38 2026 by rpki-client