Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: DCReqVRyyuZKb6VxOJOQc2fYZ/ySAENbgPAXbSprOPk=
Subject key identifier: B1:DA:90:8E:23:CB:BC:43:A9:6C:3E:01:07:D6:E8:65:7C:1A:2D:5F
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019F8568FC62D387C0C08FE178A2E5CD6651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0936
Signing time: Tue 21 Jul 2026 16:01:17 +0000
Manifest this update: Tue 21 Jul 2026 16:01:17 +0000
Manifest next update: Wed 22 Jul 2026 16:01:17 +0000
Files and hashes: 1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: Wt/oo2J5pa3LQH4s4A1Lhl0LElwvdKFbbruc94SSWGE=)
4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:fc:62:d3:87:c0:c0:8f:e1:78:a2:e5:cd:66:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Jul 21 16:01:17 2026 GMT
Not After : Jul 22 16:01:17 2026 GMT
Subject: CN=b1da908e23cbbc43a96c3e0107d6e8657c1a2d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:18:b2:b4:95:e4:56:16:25:2b:ee:0f:54:
b6:e2:5b:56:e9:79:c7:2d:31:d1:c3:12:10:1b:b0:
1b:3e:42:21:97:e0:6d:3a:7a:4b:ca:e3:10:3d:2e:
7c:ea:cd:cd:30:14:aa:db:66:4a:cd:8b:a3:c3:cd:
92:d7:62:ce:e8:6e:aa:f7:fc:00:f3:c5:15:0b:64:
34:da:9b:5a:ff:dc:8a:09:5f:d2:bf:d0:07:f1:43:
80:14:86:88:b0:6d:b6:c9:23:23:6a:c0:6a:cd:7e:
d6:45:42:24:7c:cc:fb:79:da:d1:40:e2:2f:06:bb:
61:97:e8:86:7e:6c:52:10:af:50:67:c3:47:e9:20:
da:e3:e2:e3:0c:6d:dc:0f:65:e9:41:61:cd:aa:b1:
6b:3a:65:63:5c:a6:69:5f:49:cc:cd:de:77:27:e7:
9e:dc:c9:09:3a:41:c6:9a:74:5a:3e:25:41:64:84:
f2:64:7e:aa:2c:9e:68:18:21:b2:e0:ef:e8:73:f2:
5a:df:17:36:19:a7:1c:b5:55:3c:99:ad:63:2d:41:
fd:d2:50:a3:45:b1:38:17:13:90:3e:f3:58:55:5a:
7e:60:f8:0e:19:2f:e0:d7:f1:a3:b6:be:62:64:4f:
64:31:64:34:d8:7c:c2:db:0d:0f:f8:82:f6:82:8b:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DA:90:8E:23:CB:BC:43:A9:6C:3E:01:07:D6:E8:65:7C:1A:2D:5F
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:26:36:30:78:8b:81:64:30:65:65:16:28:21:26:46:a6:86:
09:27:ac:51:5b:be:b8:ce:7f:3f:3f:8a:38:aa:73:7e:3f:f1:
e1:04:19:18:5a:ed:85:29:7d:86:31:7a:51:21:54:38:72:ac:
c2:d7:40:86:39:4c:fa:0e:d7:43:8d:03:36:f7:a0:e7:58:5b:
de:7e:6f:17:85:c2:b1:0f:e2:0d:c2:88:21:61:09:f6:ed:77:
3d:bc:85:71:99:ea:ff:11:63:8e:8e:03:04:1d:1e:72:2b:d6:
34:3e:8f:d2:3b:bc:bf:78:c0:0a:97:1e:d5:55:43:ab:06:ed:
5e:1c:80:2e:c8:37:f8:5e:90:51:9c:0d:ca:b0:a4:e7:ac:a8:
16:94:b6:6f:20:44:55:ce:23:ac:65:0d:21:dd:cf:9f:8e:51:
47:99:06:32:9b:f9:2a:cd:57:2b:ee:6f:25:8c:63:80:f5:e9:
0b:92:af:b0:20:21:4e:b2:f9:da:e3:ce:5b:b8:3e:69:eb:3e:
99:2b:d5:7c:9d:fb:83:d2:c9:ac:dd:b2:07:a8:0f:41:ec:58:
72:86:5c:dd:f1:ef:ce:8d:81:3d:28:4e:fb:af:d2:fa:35:94:
da:6d:2e:bb:42:d7:78:8a:60:0f:c5:21:88:62:25:f9:06:d1:
4d:43:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:08 2026 by rpki-client