Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: PGiu2Sw5Lo1aaIvA38BaiMsIqQqDqHuK7IdQUpXjVYM=
Subject key identifier: 85:7E:70:52:CC:6B:82:A7:E0:3C:9B:1E:09:D0:78:61:16:D9:A3:FF
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 019D29975CE70F77A8B63088F63CFA42041C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:01:18 +0000
Manifest this update: Thu 26 Mar 2026 10:01:18 +0000
Manifest next update: Fri 27 Mar 2026 10:01:18 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: 5+rJtvletQxJ32t8nBIvKjTGOutPxIuqr59vpervfE8=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5c:e7:0f:77:a8:b6:30:88:f6:3c:fa:42:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Mar 26 10:01:18 2026 GMT
Not After : Mar 27 10:01:18 2026 GMT
Subject: CN=857e7052cc6b82a7e03c9b1e09d0786116d9a3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:ab:80:eb:d7:f9:1c:fa:cc:c2:13:f1:d8:
72:3f:59:1d:28:37:47:b2:6f:d6:dc:25:73:57:0f:
9c:3a:b5:74:f7:28:4a:c6:05:be:c6:44:e6:ed:0e:
cc:26:7e:92:34:63:f5:76:46:d3:28:83:80:09:61:
92:a0:29:61:74:d2:fb:c0:f3:20:83:42:a7:16:9a:
53:63:ed:b6:1b:e7:0f:60:69:ca:8b:95:8e:a5:37:
bb:2f:b6:a1:b6:ae:c6:7a:b9:48:13:72:f1:ca:11:
e8:b6:b0:10:d4:45:15:20:a6:1a:59:8d:63:f3:5c:
55:36:41:a8:21:c8:d1:aa:47:6e:0a:cf:bd:f1:5a:
c5:b0:eb:5c:be:44:a4:34:3a:98:c6:44:af:ed:76:
b0:be:9d:17:d1:2c:90:fa:10:08:e5:a6:a5:dd:7d:
00:f1:e4:db:24:63:56:ad:70:83:90:05:8b:f5:5e:
23:e1:22:3e:b1:10:2a:ef:ba:33:34:8e:b0:f3:a5:
a9:c9:16:8d:e9:b7:e3:97:c5:61:9a:60:43:b4:e0:
e9:be:49:90:31:89:99:d4:a3:36:ce:cb:ec:c3:f2:
d8:37:2e:7b:0d:2f:8a:65:bf:49:a8:c7:57:65:84:
f1:65:ef:8d:6b:31:9b:63:2f:6e:cc:cb:fc:77:92:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:70:52:CC:6B:82:A7:E0:3C:9B:1E:09:D0:78:61:16:D9:A3:FF
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ba:0d:92:75:cc:89:85:67:04:ac:9c:54:77:fa:c5:e0:63:
26:03:89:6b:a4:fc:26:94:83:07:02:ec:0f:41:e4:e2:eb:de:
64:ae:c0:b6:68:56:e2:1e:7e:7d:dc:ce:c9:fe:ec:e6:56:27:
b7:19:a6:c5:1b:00:4e:52:33:97:0d:6d:04:c2:67:c4:5d:e0:
61:f6:86:93:80:d4:ce:e5:ce:7d:5e:53:94:07:40:ae:21:f5:
81:8a:82:7a:cd:34:ae:d7:62:9d:37:71:67:c4:40:fc:f7:4f:
6c:0e:07:bd:63:99:df:ea:30:c4:a4:41:41:c4:13:0f:74:82:
c1:db:e1:1d:5f:71:ed:9c:f9:7e:f0:de:aa:77:c7:ae:b9:83:
3f:8e:05:cc:36:91:fe:05:9b:4f:4b:95:7c:ad:d3:ac:8e:96:
da:a3:8d:ca:bd:62:0e:b5:7a:0a:ce:93:c7:9e:4e:78:a4:75:
e2:86:c0:ee:55:c5:ca:e3:ec:07:3b:18:95:e0:e2:cf:70:9d:
ab:b1:b4:ea:24:17:dc:30:3e:1b:52:43:13:78:45:88:12:d6:
fc:73:ad:1c:e9:e0:9f:ea:c7:fa:a9:32:5b:3f:53:0d:f2:98:
55:cc:11:4e:5a:91:5e:eb:c9:68:03:de:75:ce:c2:76:60:ad:
08:bd:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:17 2026 by rpki-client