
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: wGO96l87efF6EEAnomO5Cooc1YnHjlZoN2NmOm+cC9k=
Subject key identifier: 2F:30:2B:9A:5A:6C:5F:96:53:27:AB:67:50:D0:AC:8F:FA:82:F4:EB
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01A1664665C3491A8AF903E63170F7C8B40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0A2F
Signing time: Fri 23 Oct 2026 01:00:51 +0000
Manifest this update: Fri 23 Oct 2026 01:00:51 +0000
Manifest next update: Sat 24 Oct 2026 01:00:51 +0000
Files and hashes: 1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: dC7Vr+ajKbSEEHBddROoNlnnjvZPYWxakfk3kp5qvmQ=)
4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:46:65:c3:49:1a:8a:f9:03:e6:31:70:f7:c8:b4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Oct 23 01:00:51 2026 GMT
Not After : Oct 24 01:00:51 2026 GMT
Subject: CN=2f302b9a5a6c5f965327ab6750d0ac8ffa82f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:8e:c9:1a:ff:74:ab:e0:af:e9:bb:79:6a:
8b:d8:c6:b2:b8:f4:a9:e8:51:0b:32:8d:1b:09:80:
84:06:69:86:70:c8:84:95:97:c1:f2:ae:fe:fd:eb:
96:6d:ea:38:bb:50:19:22:67:b9:1e:12:de:33:a5:
5e:15:25:0d:5b:cc:eb:28:c3:86:8d:0c:2a:14:5d:
4f:ad:4d:b0:04:27:5f:2d:48:7b:f1:98:8f:b3:b7:
1d:78:cf:7f:76:45:12:68:17:82:3a:a0:a5:d3:8c:
b1:75:28:c9:48:95:b1:d7:b9:df:c7:36:36:ab:aa:
7a:09:fc:e1:8e:bb:80:03:14:9d:95:03:1b:bd:b1:
35:97:0f:ab:61:60:33:3b:68:80:75:6c:5a:81:f5:
23:92:02:89:69:29:28:0c:ba:11:36:e9:42:e2:4f:
1f:72:a7:33:4f:f1:24:d0:8e:e9:0b:83:43:4c:96:
05:6e:41:2b:e9:da:58:b2:4d:94:dc:a6:9b:54:e7:
89:c6:97:a1:ab:09:fd:09:50:b0:5c:85:1d:7c:26:
38:9f:7b:33:8d:65:07:9a:bc:bc:6c:12:a5:56:53:
31:48:65:cf:93:c3:d1:29:1f:03:4e:5a:79:d4:80:
d1:66:d9:a9:df:73:4e:f5:d6:8d:df:81:2a:b1:cc:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:2B:9A:5A:6C:5F:96:53:27:AB:67:50:D0:AC:8F:FA:82:F4:EB
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:d7:6f:3d:17:6d:8e:4a:97:75:b9:04:89:83:01:b1:47:
3a:01:01:a7:23:4d:d5:38:ba:78:9a:2c:34:3a:c5:7a:d6:e3:
ba:53:5e:9d:1d:ca:c0:cc:61:7f:a0:49:89:39:57:53:4a:66:
9c:97:a8:44:68:5a:df:81:fc:11:73:f0:86:fa:4a:29:62:c0:
46:09:61:a8:fc:ec:27:d8:5a:68:63:98:2c:10:d5:33:5e:8f:
00:20:c4:b2:9f:7a:cf:50:b7:a2:fe:e0:4f:81:ed:60:1a:ff:
d7:42:f7:0d:a5:4d:dc:e2:13:aa:f4:d1:cd:ab:4a:ea:5c:4b:
06:da:f7:cc:5b:49:b6:1c:3a:6e:38:91:10:64:8c:db:dc:6d:
a2:46:80:7d:43:ff:fb:1c:40:0b:d7:a0:17:ad:41:fe:b2:b2:
6c:50:b3:a3:da:09:fe:e9:ae:97:8a:dc:e2:d7:0b:8b:d2:a7:
d1:98:ab:45:d4:c4:ea:05:31:4c:0d:e9:59:30:41:5c:63:53:
67:c9:0d:a2:10:ff:f7:ea:14:60:28:3f:0e:0c:33:63:0f:99:
ab:e6:a8:30:e7:5f:9d:4f:a9:ef:45:f2:4a:c4:85:c2:79:56:
4b:31:08:e2:0a:7e:bf:eb:35:dc:77:90:82:e8:ec:0f:04:10:
0b:d8:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:19:52 2026 by rpki-client