Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: Oqr7eQzPkLSY5AzaJjZxQukXSIyQdt+Twi5iTgD0s94=
Subject key identifier: 66:51:B0:04:24:5E:DB:26:B7:08:55:C4:54:B3:A3:22:E6:BC:43:B4
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 01A1DDCC12593E536EFADEAE3B824E9BE97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 06:01:41 +0000
Manifest this update: Sun 15 Nov 2026 06:01:41 +0000
Manifest next update: Mon 16 Nov 2026 06:01:41 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: Mt1DlbKwVmOWIHh6VXO/l4KsScU67GqQSKqvvnjpoJQ=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:12:59:3e:53:6e:fa:de:ae:3b:82:4e:9b:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Nov 15 06:01:41 2026 GMT
Not After : Nov 16 06:01:41 2026 GMT
Subject: CN=6651b004245edb26b70855c454b3a322e6bc43b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:93:6f:ba:cb:52:06:5d:08:33:2d:41:fd:
e9:08:a2:92:6f:3f:48:a4:d0:6b:aa:81:67:50:cc:
90:3b:90:02:db:6e:f2:6c:f4:f4:4c:71:28:66:6f:
0f:18:ee:8b:2a:97:cc:a9:c7:77:2f:22:48:dd:58:
b1:3e:6f:14:45:1b:e7:44:51:27:b5:75:fa:49:99:
0b:20:92:9b:7b:26:d1:2e:51:8f:ad:f4:ed:4d:d0:
53:1f:e6:a2:9e:62:2c:c9:38:77:4a:ee:ae:ce:0d:
53:6a:13:95:54:80:95:1a:f7:fd:ea:29:c7:79:b2:
ee:c5:ef:a5:3a:82:ab:86:db:11:0d:79:9d:92:64:
ce:ff:52:56:92:d1:ee:2e:89:e7:29:8a:9b:29:99:
73:19:02:a2:4b:07:20:4e:a8:59:fa:53:fa:f2:98:
47:bc:ca:6b:92:47:33:7d:9a:7a:e1:fb:98:0d:3f:
ea:c4:94:eb:98:94:42:72:5a:88:78:39:50:08:a9:
47:84:d3:be:09:dc:99:c0:56:37:90:1e:19:65:e2:
24:43:6c:a8:89:82:45:d4:cf:34:c2:27:44:f1:4e:
d4:02:a8:da:17:62:eb:53:87:a5:e6:1f:28:76:d7:
d4:b2:77:19:81:c8:a8:12:4a:f2:bd:9f:57:19:b2:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:B0:04:24:5E:DB:26:B7:08:55:C4:54:B3:A3:22:E6:BC:43:B4
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:86:40:9b:64:20:44:ff:91:bb:b0:dd:8f:78:b4:1c:c6:ca:
75:d9:3d:ea:66:df:e3:a1:47:80:d5:57:83:c3:8c:82:79:e1:
50:4a:b7:91:5d:91:74:45:0d:fe:05:a2:10:31:2d:ae:f3:a3:
72:c6:1d:3d:32:5e:af:65:46:a6:3b:3a:1c:c9:15:b6:4f:64:
b7:c1:34:bf:e6:b8:85:d6:10:6c:3b:16:f7:e3:66:b4:44:4e:
c7:e9:00:b1:a1:54:cc:6f:49:a7:e1:69:54:4c:aa:16:bf:30:
1f:e6:ac:ce:55:0f:a3:d9:bd:95:ff:92:0f:cb:63:2c:82:85:
4d:7e:9b:2d:93:9f:3c:1f:4f:53:6f:11:84:38:78:c6:64:7d:
c4:95:c7:a2:08:6d:0f:e2:05:e6:cd:03:87:01:b1:59:58:34:
92:33:c2:29:22:1b:4d:29:57:2e:08:87:12:0d:cd:4b:d9:6d:
9b:03:27:01:fd:fc:f0:47:b2:4f:8c:cb:f1:84:47:0a:cc:25:
29:f3:f0:0a:40:10:9b:a5:8a:e5:00:b9:cb:19:eb:4c:26:66:
c5:bb:7d:09:c5:dc:ef:8a:6a:cf:17:cd:74:7a:38:fd:5e:58:
2d:5c:41:82:c0:0a:7a:00:a5:ae:62:b0:ae:27:23:67:d8:65:
2b:6f:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:02:59 2026 by rpki-client