Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: woIqzzZob+AUTytioI3G0kiqfSyiGUr/12g7+GYOdEY=
Subject key identifier: 7E:05:89:EF:7A:22:54:7E:55:9D:4F:73:94:16:F2:BA:5A:44:D2:F5
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 019D25837C085BE8FEBF1925B34721BA77A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 013B
Signing time: Wed 25 Mar 2026 15:01:07 +0000
Manifest this update: Wed 25 Mar 2026 15:01:07 +0000
Manifest next update: Thu 26 Mar 2026 15:01:07 +0000
Files and hashes: 1: mdTui1wA75wOztqtTMK3zvX24Ds.asa (hash: KzmXvzUo2gWfBYklqBo8Crh93lUSqFHKLtZy6y1uVdg=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: 99pHNZFkxfvckYfdE/PYgl0CbGHh+FKXig6B4EhhKfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:7c:08:5b:e8:fe:bf:19:25:b3:47:21:ba:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Mar 25 15:01:07 2026 GMT
Not After : Mar 26 15:01:07 2026 GMT
Subject: CN=7e0589ef7a22547e559d4f739416f2ba5a44d2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:aa:9c:2e:e5:bf:98:97:90:ba:ea:06:14:
7c:ed:07:a2:20:ec:70:d1:78:80:56:fc:ee:a3:ad:
c1:a5:03:22:61:97:83:fa:ab:75:14:2d:7b:f9:6c:
da:0d:6d:6f:25:7f:9a:be:f2:45:b3:fb:07:96:64:
f8:ef:3b:67:42:59:1f:e8:92:c1:03:cc:38:b9:41:
7c:d1:7a:ea:0d:60:c1:2b:30:d2:ab:26:cb:75:3c:
c6:f8:3e:5b:9e:c9:5a:b2:6a:cc:63:7a:07:80:99:
75:16:7a:dd:aa:fe:3e:44:ee:49:b6:7e:59:07:b3:
03:66:c0:a3:ed:4f:f7:4e:04:8d:f9:96:0c:e6:07:
80:eb:a2:08:df:87:9a:d9:00:cd:61:b6:2f:cb:c1:
5a:45:4d:de:a9:ee:40:7c:35:c3:da:7a:f4:d4:8d:
82:24:53:8f:82:1d:0e:16:1d:0e:97:9c:c9:b3:56:
94:d7:01:6f:fe:ca:35:31:cb:21:cb:60:a1:78:77:
6e:f8:d8:82:50:1b:7e:f3:1d:ea:e9:28:47:c4:6d:
b7:07:27:15:07:80:f4:67:c0:34:51:e1:e9:d6:c7:
ae:0a:c9:ac:2b:25:c7:31:57:69:9a:6b:3b:63:ba:
68:63:27:a8:d4:21:90:e0:ed:16:30:79:5a:fb:2c:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:89:EF:7A:22:54:7E:55:9D:4F:73:94:16:F2:BA:5A:44:D2:F5
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:7b:e5:e9:82:8b:93:9b:3f:98:5d:f2:a6:a7:f4:95:7d:95:
4a:44:aa:a9:0f:4d:3a:f5:e5:d3:1d:a2:ea:b1:d2:89:50:97:
7c:d8:07:07:cd:e3:4f:c1:3c:8e:6b:a1:62:dd:b2:9c:19:30:
67:e6:73:e4:06:2a:8e:9b:0e:37:bb:dd:a5:a0:a3:3c:e1:29:
5e:f7:ea:29:5c:05:ec:6f:e5:78:55:c6:37:74:ca:ad:58:c6:
58:64:65:32:9c:a3:59:ea:40:83:73:af:26:8c:75:9d:43:f9:
6f:fa:38:0c:50:53:c4:28:c5:7b:85:54:86:52:76:75:56:5d:
36:f3:1f:a8:09:77:d9:fb:70:e7:c2:11:b6:44:0d:53:3c:1c:
a2:6f:97:45:50:c8:0f:e3:8d:91:15:7b:f5:53:55:59:87:32:
c3:7a:80:d3:4a:b5:b9:88:23:5e:be:cb:8d:17:cc:92:cb:69:
af:7a:83:b3:f5:13:c3:bd:c8:50:a1:fb:d3:de:d8:90:bc:2e:
28:d0:85:bb:40:0f:51:a9:ad:51:04:74:54:f6:d0:27:08:fe:
84:b0:33:73:3e:ac:8e:c3:f0:50:50:d4:97:6a:b0:2e:11:4d:
2a:9d:06:65:3a:78:c1:99:91:bc:51:05:ba:43:5a:10:7e:f7:
b7:e8:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:42 2026 by rpki-client