Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: R4ObERc/vLJ75Je1WkMRstveiumpnfYQ06bgkIamwc4=
Subject key identifier: 2B:F6:83:C2:97:B7:E3:E3:EB:D6:9B:33:1D:2F:E8:B5:42:10:B3:CE
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 019E30DFE9A06830466A8497DE560B9B40BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 1917
Signing time: Sat 16 May 2026 13:00:40 +0000
Manifest this update: Sat 16 May 2026 13:00:40 +0000
Manifest next update: Sun 17 May 2026 13:00:40 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: XHONTmLeIutdKxhthEE19p7ZHcDFQQYDryV0Hy21ksw=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:e9:a0:68:30:46:6a:84:97:de:56:0b:9b:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: May 16 13:00:40 2026 GMT
Not After : May 17 13:00:40 2026 GMT
Subject: CN=2bf683c297b7e3e3ebd69b331d2fe8b54210b3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:48:1b:7d:52:dc:01:50:75:ad:13:bf:bc:
0b:37:b8:09:97:56:4e:1a:a6:20:27:cb:6b:4b:f5:
48:cf:07:da:35:ba:73:91:69:6d:18:b2:39:75:f1:
a3:f8:05:a8:7e:84:a6:0f:3e:4c:b4:59:11:d2:44:
87:6e:36:27:32:ae:8f:76:25:89:26:d3:aa:4b:a7:
2f:13:13:ad:07:b2:e9:91:48:67:e3:5b:f7:fd:0d:
80:86:8c:90:39:36:ef:00:d9:49:d7:bd:cf:5d:1b:
e4:85:73:0d:f6:7e:4a:4f:5e:30:b6:e3:a2:a8:6e:
80:5f:49:d4:85:a6:a4:7b:b7:5c:cf:70:e8:9a:55:
ba:05:47:30:07:76:5c:68:0c:ab:46:ac:18:27:69:
49:36:11:89:29:7a:f8:4e:30:e5:78:d7:ef:97:40:
06:ca:02:6a:8c:0f:21:43:2f:76:e2:4f:76:d0:75:
4e:cb:b5:c8:73:5a:5f:da:12:38:a6:33:61:b2:ef:
66:57:85:5d:4e:b5:a8:32:70:48:a3:1e:d0:ff:26:
2e:54:0c:3e:52:f5:f0:3a:fe:77:8a:df:0a:b6:d3:
e3:6f:c0:49:2b:04:09:22:05:af:83:ee:85:46:a4:
37:83:0b:cd:65:08:9c:0b:2a:91:38:de:60:c4:9d:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F6:83:C2:97:B7:E3:E3:EB:D6:9B:33:1D:2F:E8:B5:42:10:B3:CE
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:37:c4:62:58:ff:04:54:8e:37:dd:35:2e:01:21:38:55:
89:5a:e5:5f:e3:eb:00:cb:c5:61:4c:31:31:f8:98:85:ac:bb:
9e:90:a5:8b:d3:88:0f:c0:22:0f:eb:e5:80:07:37:f0:3e:23:
c9:56:80:85:9d:ed:3b:98:b5:c4:07:aa:5d:78:4d:17:e9:7f:
95:63:aa:25:bd:20:fb:c9:85:91:13:c3:c7:a3:ef:1e:c9:59:
72:c9:41:f2:45:ae:47:30:4a:fa:f7:b7:6e:dc:dd:9a:89:54:
b0:74:68:f2:40:36:bf:ac:08:7d:2f:13:fa:53:3d:9f:3f:ab:
b3:3e:32:ff:61:9c:1c:fe:67:65:88:bc:86:fe:46:14:c4:7c:
94:4d:58:4f:2c:72:af:54:57:21:1b:b9:d5:b6:6f:7a:5f:ba:
f9:5f:70:09:c9:dd:e6:f9:c1:84:d7:c0:10:ce:89:81:c6:fa:
59:17:d2:5d:25:41:27:b4:d5:3d:89:19:3b:7a:7f:36:82:2d:
69:bb:90:f3:7d:2c:ee:55:23:29:b3:4a:b7:c1:7c:4a:65:ce:
00:70:6a:41:31:ba:39:3a:bd:30:bb:57:33:40:67:cd:e0:fa:
11:1a:86:16:98:b9:f9:73:a7:98:4b:e9:78:57:5d:58:dc:aa:
47:1d:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:22 2026 by rpki-client