
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
File: dU79gbTukUeAKK41pBT0apG9L-4.mft (raw, json)
Hash identifier: 9iIqUVvG/EVTgiQWaVh4/wkYv3FJQCSnmPjYuQpaUZ0=
Subject key identifier: 69:61:D7:74:18:12:70:CA:98:F2:0F:A4:AD:74:01:C9:43:0D:23:25
Authority key identifier: 75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
Certificate issuer: /CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Certificate serial: 01A0E6D3205C67D8898F775B9DBD74930C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
Manifest number: 8F
Signing time: Mon 28 Sep 2026 07:03:11 +0000
Manifest this update: Mon 28 Sep 2026 07:03:11 +0000
Manifest next update: Tue 29 Sep 2026 07:03:11 +0000
Files and hashes: 1: OyjkYccu_CLKgxrEV7g_bFW-ous.roa (hash: /S7gHpDK0DxMjnQ0e8Y2GVl3yAnFF9lshq6UILw6034=)
2: dU79gbTukUeAKK41pBT0apG9L-4.crl (hash: 0OQKVmFXObcq/+OONW6cPGwOd7kMFUhYsxs2okQzW4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d3:20:5c:67:d8:89:8f:77:5b:9d:bd:74:93:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Validity
Not Before: Sep 28 07:03:11 2026 GMT
Not After : Sep 29 07:03:11 2026 GMT
Subject: CN=6961d774181270ca98f20fa4ad7401c9430d2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:93:fa:a7:33:5d:a5:d3:7c:78:e5:ae:3c:
ce:6b:bf:35:68:cd:e7:c3:c4:ff:30:f3:83:3c:5c:
37:b0:14:47:3c:76:4c:41:d6:e4:a5:85:b3:73:8c:
e5:e9:01:8b:8d:aa:89:1f:8e:a9:f5:82:e5:b9:c4:
14:b2:e8:37:54:c0:2e:49:89:76:91:b1:be:fa:2f:
3a:3b:55:23:7c:90:df:37:c5:3d:41:2d:62:c4:11:
77:74:10:9b:23:39:ae:75:85:03:22:9f:3a:31:0b:
01:55:4b:01:20:a2:10:40:43:54:97:3c:c6:ce:eb:
28:6a:a9:4f:b8:f8:6c:a3:98:90:29:aa:76:6b:08:
01:6c:0f:ed:00:f9:30:e1:9e:1d:73:5e:4b:aa:4a:
28:7a:61:8f:18:82:8e:59:79:9a:26:d1:ad:0b:c7:
dd:55:03:f5:04:40:af:0a:6b:0a:09:47:51:54:b3:
ff:4d:29:85:55:8f:32:41:4f:b0:3e:42:9e:3c:1d:
74:37:85:36:50:b4:5c:7d:2f:8c:28:b6:42:3d:f2:
63:d9:db:a4:47:9f:1b:04:da:0d:55:88:f8:63:89:
d0:4d:4a:c7:cb:05:55:1f:bc:14:ba:74:8e:3f:c7:
67:f2:43:64:67:55:73:9d:df:6b:25:c8:31:46:60:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:D7:74:18:12:70:CA:98:F2:0F:A4:AD:74:01:C9:43:0D:23:25
X509v3 Authority Key Identifier:
keyid:75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8d:9a:0d:09:00:9c:48:c9:ea:b0:2b:9d:c1:08:73:61:66:
83:01:ab:76:af:32:44:88:9e:7d:ab:26:36:02:6f:c4:2c:19:
8d:7a:89:a1:54:af:78:19:a5:70:88:3a:66:7e:e0:0c:24:df:
94:d2:33:6e:fe:79:16:4a:a0:41:1f:b4:ca:ef:e9:d2:fd:7a:
26:ef:f5:55:a4:e0:f2:ab:23:e3:e3:ee:97:34:ba:4c:d5:7a:
ae:56:2d:ce:7f:8e:44:d7:82:53:74:76:99:80:e4:45:a0:7b:
53:cb:6b:1b:ed:66:49:f2:3a:38:51:ad:88:3e:a9:e6:3f:9e:
b6:78:ac:02:7e:a6:e4:ff:56:c3:a5:d7:88:55:19:e5:d2:23:
31:55:c7:67:50:fe:9c:ff:b8:64:36:2f:1f:04:59:8b:cc:15:
cf:ca:e6:68:e9:ea:14:63:3b:87:7d:36:b5:c5:13:88:2e:e1:
cb:b3:e0:eb:2d:c2:e4:01:a8:ab:ec:04:e6:64:53:4a:65:af:
d9:5b:07:3a:12:cc:69:99:9c:00:ae:4a:9c:5a:e9:7e:55:5c:
8f:6b:18:18:d6:b5:18:20:8e:f6:5c:4d:90:10:d3:70:e8:6d:
5d:e7:f6:ea:80:f7:34:52:f7:fa:4d:82:aa:93:e5:60:e9:0d:
66:f4:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:11:15 2026 by rpki-client