
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: zK/0bkBSXBEpWkBbwvztpX8jz+yD0z71G8WBApXFKs8=
Subject key identifier: A1:EB:39:55:DC:C7:6F:F8:EE:E5:3A:9A:F9:A4:4B:4D:01:C6:DB:EF
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019E1C0FC2F055F0287FF7E0237A0D794690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 12:00:55 +0000
Manifest this update: Tue 12 May 2026 12:00:55 +0000
Manifest next update: Wed 13 May 2026 12:00:55 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: bqqpi5fN6hl6QVgT0Y21TwqF27iG+JK2Ed+0+oj6KG0=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:c2:f0:55:f0:28:7f:f7:e0:23:7a:0d:79:46:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: May 12 12:00:55 2026 GMT
Not After : May 13 12:00:55 2026 GMT
Subject: CN=a1eb3955dcc76ff8eee53a9af9a44b4d01c6dbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:75:1d:2c:57:c9:25:87:92:24:ca:22:12:
c0:97:f3:c8:23:6f:87:1b:0f:35:3e:38:8f:82:06:
0f:96:b2:e1:d1:8a:47:f8:1a:25:4e:ea:72:b2:a1:
43:6c:35:b8:0b:a2:2f:4e:1a:4a:c4:1f:36:14:ed:
80:6f:fe:2c:48:9c:3a:0f:6f:58:b3:f2:61:60:42:
7b:ef:68:a4:ef:9b:98:27:e7:b5:01:9d:93:9d:6c:
f2:45:2e:8d:76:7f:61:a2:35:14:3f:93:57:e4:2f:
3a:21:84:99:39:0a:89:b0:3f:37:04:64:04:9b:29:
36:a3:71:62:d9:da:65:44:8e:94:bf:d0:61:87:4e:
dc:a4:66:92:21:c4:35:1d:7c:94:10:fe:db:99:65:
16:5b:59:9d:7b:45:4b:0f:a8:20:d6:65:ad:2d:6b:
cc:5c:4f:fb:a4:d7:53:cd:d6:23:d2:60:95:a8:64:
40:ac:11:cf:79:e5:a8:a0:35:2f:58:9a:da:42:a8:
42:d3:8f:a3:9e:56:79:47:98:45:2e:7a:ef:04:9b:
fd:17:c6:42:44:59:98:e6:56:79:40:00:3d:57:92:
49:7b:d9:30:f9:b5:9c:71:7f:e2:4d:60:f7:e2:8b:
e5:db:97:9b:bb:4c:77:d2:4c:df:f8:70:0c:f6:8f:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:39:55:DC:C7:6F:F8:EE:E5:3A:9A:F9:A4:4B:4D:01:C6:DB:EF
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c6:10:0a:f5:3e:15:4d:c6:4c:86:1b:41:c3:90:9f:51:6a:
80:67:e4:e2:94:09:c3:4c:35:dc:f3:b2:2f:3a:94:9d:a1:af:
1b:8f:12:2b:b4:c5:26:4d:7b:70:77:64:c0:40:95:09:22:d6:
c4:59:48:67:02:f2:00:d6:79:66:7f:1e:84:a3:d9:5f:fd:66:
a5:1e:fb:c0:8e:30:35:e9:b6:9a:72:05:f5:d7:fa:ca:9c:44:
7d:b0:23:72:18:48:12:c8:56:e0:5c:01:36:49:ac:c1:6f:1d:
6a:33:5c:be:90:3d:b0:76:e2:a2:e6:d7:1d:3c:ae:da:22:3b:
27:cd:5c:ae:aa:f8:a5:ad:0e:98:aa:6a:b3:d0:e5:07:d8:f2:
b2:6e:50:51:30:a0:aa:5a:ea:e9:f0:6a:d3:fb:35:b9:0e:72:
3b:e7:1f:37:02:a7:ad:a6:5c:0c:df:24:87:0d:10:b9:1d:65:
12:2f:4a:b8:2d:9e:31:16:93:63:37:e3:d4:39:27:03:fc:22:
63:b6:38:12:a3:84:d8:45:c2:4d:2c:f6:12:21:73:5d:c4:e9:
ae:ce:0f:7b:9d:0b:7e:2c:2b:4b:55:05:69:7f:b4:e1:6e:b9:
54:fe:4c:10:a1:33:8f:59:29:75:aa:74:85:8f:fd:4c:36:2f:
29:a9:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:28:48 2026 by rpki-client