Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
File: DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft (raw, json)
Hash identifier: 0KEMgPxiFIbSk/E1WDbvkFeUqapu4WsKCexN6fag3ls=
Subject key identifier: CF:C3:AE:C3:CC:5A:E5:55:ED:2D:60:95:52:B7:DC:8B:F3:70:AF:13
Authority key identifier: 0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D
Certificate issuer: /CN=0d4531777febf988e5305a2d299f9c548e8d501d
Certificate serial: 019D254C4D3CA78A135B3922D03511C6E37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
Manifest number: C3
Signing time: Wed 25 Mar 2026 14:00:50 +0000
Manifest this update: Wed 25 Mar 2026 14:00:50 +0000
Manifest next update: Thu 26 Mar 2026 14:00:50 +0000
Files and hashes: 1: DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl (hash: v0rXyExuZRTXUqJ8/D08r+tYOPClWnyCCpBNoPPDZF0=)
2: U6voxKN65jQH_hLBK3btXjUs3XA.roa (hash: Q/KwQqI2oZ064L8UakL1/UvH01OXvIiI/6cQL59DWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:4d:3c:a7:8a:13:5b:39:22:d0:35:11:c6:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4531777febf988e5305a2d299f9c548e8d501d
Validity
Not Before: Mar 25 14:00:50 2026 GMT
Not After : Mar 26 14:00:50 2026 GMT
Subject: CN=cfc3aec3cc5ae555ed2d609552b7dc8bf370af13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:e2:18:ee:9c:26:bf:19:8e:d4:99:a9:c2:
9e:20:fd:91:28:9b:cb:bd:9c:49:54:c1:3c:62:08:
d5:b9:37:06:13:a7:53:31:a7:1f:0b:69:c9:5e:83:
75:ad:70:5c:98:ec:94:1b:cb:81:37:54:43:f2:fe:
b1:fa:97:ff:50:27:a3:ea:9c:ef:27:c3:bc:ae:78:
06:cf:3d:cf:ea:75:ad:49:56:d9:61:f7:99:91:ee:
d2:e8:21:bd:01:6e:7f:32:12:93:57:de:5c:0b:d8:
62:f7:43:f7:81:5c:04:d3:27:32:0c:6f:47:71:47:
90:63:99:8a:52:76:65:38:65:20:6e:76:7f:f2:95:
b5:f2:6b:11:33:1a:41:57:4c:21:35:dc:20:0b:9d:
a8:88:b1:df:b0:1f:f7:95:f2:2a:f9:0e:df:37:b1:
41:b4:80:d2:7f:e9:c9:82:59:7a:26:93:b1:73:d6:
b9:11:75:26:25:c5:73:06:56:53:44:08:40:18:de:
d2:f6:0c:52:2e:14:68:94:a0:16:01:32:8a:fe:e4:
60:2c:b5:ba:af:05:be:35:1a:74:c1:bd:88:f1:09:
ad:f9:88:97:90:b1:0e:37:23:e3:45:d3:54:99:63:
c1:87:fe:c0:66:90:4c:37:84:8f:54:fa:33:c9:23:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:AE:C3:CC:5A:E5:55:ED:2D:60:95:52:B7:DC:8B:F3:70:AF:13
X509v3 Authority Key Identifier:
keyid:0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:93:22:64:ea:c2:38:ae:74:82:47:f8:5a:43:ab:ce:6d:4c:
1a:79:5e:46:3a:b3:89:5c:41:86:84:bc:bc:eb:28:f3:ac:cf:
f1:23:3c:94:48:70:00:2d:4b:c4:d8:3d:9f:83:9c:3a:5b:ff:
39:cb:81:7c:aa:5c:85:21:72:31:40:83:38:d8:34:21:21:44:
b3:c8:7d:d4:3c:f3:07:23:57:ae:38:f1:bc:51:21:f8:a4:41:
37:d5:70:6b:47:94:cc:41:21:ef:c8:17:5f:5c:6c:61:b9:15:
16:46:f2:e5:5f:66:99:a7:ab:96:5d:0f:ee:ef:d3:db:55:cf:
ff:3e:71:74:da:13:cf:5b:a3:3f:c6:10:23:60:79:c6:c8:93:
b3:ca:04:a3:6a:a2:c5:5b:65:37:42:c1:a6:6d:ef:d0:c4:6b:
5f:fb:27:ce:64:44:dc:65:8d:80:ec:7a:54:3c:c9:c1:0b:da:
de:cc:75:d6:61:6a:7e:96:4a:99:c7:50:cb:54:e1:58:c2:31:
8a:e8:db:4b:aa:56:1e:31:0c:ae:a2:27:7d:b6:fc:c6:7c:0d:
a6:b9:1f:bc:f6:26:d2:02:4e:93:a2:b7:50:e8:ab:0c:17:a9:
e5:b6:dc:91:e8:d3:c2:ca:2f:b9:25:f9:a7:13:67:f9:ce:1e:
b5:41:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:02 2026 by rpki-client