Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: 7N3fTKULmCn7levEX/Yw99B7piYoiMIhn5JA3KNItkM=
Subject key identifier: 19:45:73:E6:B2:32:90:87:6F:48:26:96:55:03:F4:5E:33:8B:AE:F7
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 019F8EA2F944502DFCA91FBA0D4A42EF0726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 027C
Signing time: Thu 23 Jul 2026 11:01:12 +0000
Manifest this update: Thu 23 Jul 2026 11:01:12 +0000
Manifest next update: Fri 24 Jul 2026 11:01:12 +0000
Files and hashes: 1: Nl_yi1QXIQ5ForZSQarCyISI-8I.asa (hash: AajCKSsGi9WnrBsDdmR9RQ3tCTGoQ7cdjbFClS/xtCA=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: H/bto1qYcACHfVaGsmQG3hxRNuoLxpDUiUNZsNlVlhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:f9:44:50:2d:fc:a9:1f:ba:0d:4a:42:ef:07:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Jul 23 11:01:12 2026 GMT
Not After : Jul 24 11:01:12 2026 GMT
Subject: CN=194573e6b23290876f4826965503f45e338baef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:d0:0c:4e:23:dc:f5:65:40:9a:3c:7f:4a:
02:42:0c:72:fa:e7:09:08:60:79:69:92:9f:1d:66:
7e:e0:96:ab:8c:79:1c:57:a3:93:cd:0d:4f:10:d3:
30:33:cc:3c:a9:52:c9:4e:b8:eb:d2:15:96:22:68:
4e:f8:22:08:47:b8:02:3f:b1:60:2a:5e:86:e1:31:
e0:48:be:c7:38:6e:9c:6a:e8:1d:36:84:02:d0:16:
ca:20:88:f5:7d:55:03:4a:20:f5:8d:08:1f:cf:42:
ec:c4:20:d6:b6:e8:96:46:5f:6e:85:4b:b9:35:38:
14:70:92:9c:03:d6:1e:b1:ef:7c:6b:45:f9:29:c2:
24:b8:3b:65:7f:9b:a3:e4:89:18:75:bc:0c:29:5a:
9a:73:9f:42:5a:6c:ba:61:05:b6:da:0a:82:bc:b6:
2c:ef:c4:74:8a:37:ff:93:4e:2a:d7:9c:d9:28:97:
c3:c3:bd:36:67:a3:f4:53:e8:37:78:60:38:57:6c:
9a:88:c4:e8:3a:49:89:d0:0f:05:12:f3:0e:e3:a4:
68:5e:e5:00:77:46:f4:39:cb:35:df:a3:25:9e:03:
7d:e6:26:38:37:99:69:5d:b8:2a:4d:27:b9:b9:06:
d4:b0:5c:b5:69:5f:d3:6d:99:7c:41:5b:f5:0b:75:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:73:E6:B2:32:90:87:6F:48:26:96:55:03:F4:5E:33:8B:AE:F7
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:13:f0:d3:73:90:d4:8f:69:46:ba:84:3a:dc:d8:e3:f6:
85:ec:29:cd:52:93:24:d5:4b:08:99:55:fa:8d:75:04:5a:1f:
a1:63:a2:07:ae:9f:0d:e3:6d:c0:43:aa:80:ad:04:0f:d6:c5:
10:47:4e:89:e1:e7:ad:6e:f2:74:8e:44:47:b3:a7:47:f4:72:
20:ad:1d:dc:6b:24:74:92:28:fc:d5:b9:9b:7b:e5:6a:1f:a4:
93:b9:23:fe:ba:68:86:2b:4f:02:49:4a:ca:17:ca:b1:5f:53:
ca:6c:67:f1:3e:12:0a:94:80:48:1b:9c:4f:42:b6:f5:80:32:
5b:6b:62:f8:fa:59:f7:a9:8d:71:69:68:a0:c4:fd:ed:45:77:
ca:82:5a:c5:25:ec:77:6f:63:b1:af:2f:32:df:26:49:00:d1:
b7:ec:65:33:30:5a:bd:24:58:9f:c5:e3:e2:85:25:4a:0b:a4:
43:b0:3f:07:b5:8d:20:79:dd:06:a8:28:51:89:ea:1c:48:95:
7d:35:8b:e9:dd:d0:8c:3a:87:11:ad:79:f0:1a:8f:7d:2b:37:
f8:6e:fa:a5:05:13:49:6b:bc:6f:9d:8b:0b:5a:d9:e6:44:66:
d1:4f:e2:87:e2:a1:62:2c:f7:14:82:39:30:4c:17:af:7b:aa:
cb:ff:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:14 2026 by rpki-client