Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: ZO3g6ATQYR0Ii2bY+4wA9RcyrtZoNc903+T1+FzGhL4=
Subject key identifier: A7:5F:AA:77:3B:D9:CA:28:B9:6E:D6:E5:2C:AA:A8:BE:76:31:CF:54
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 019D37C0F3D4219F078EB18BB2186EF66B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: Hom3OPPNKw+A7a3YQ+FQxplSAH4na+jpy1fWLeeAcHI=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f3:d4:21:9f:07:8e:b1:8b:b2:18:6e:f6:6b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=a75faa773bd9ca28b96ed6e52caaa8be7631cf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:9c:2f:50:47:05:31:eb:8a:2d:73:6e:4e:
ff:e1:bb:66:d6:8c:5e:34:fc:70:b7:ae:bf:89:1b:
6d:b9:30:f4:d0:44:67:35:7d:e0:f5:cd:93:0c:a6:
9c:b7:23:2b:52:37:54:38:c4:4c:fe:3c:5c:d2:9f:
51:0f:f7:4d:42:0f:d0:30:05:45:3d:12:7f:bf:b1:
4a:8b:dc:2a:3e:be:dd:07:46:4d:24:a5:b0:61:7c:
19:6f:4d:a9:66:6a:2e:87:5d:71:21:cd:52:7b:dd:
37:bd:82:3e:a7:6d:af:71:69:ce:cd:fa:59:e2:d1:
4d:56:a2:31:3a:d7:6c:6c:ea:46:8c:e5:dd:b9:80:
22:d3:ba:82:a4:1d:bf:30:87:a0:b6:83:4c:d9:fc:
85:06:ce:6b:ff:ff:f8:18:6a:1a:04:19:39:cd:7b:
b4:dc:4f:42:d8:7b:87:84:47:fa:8c:8e:da:5f:4d:
10:dd:a6:c3:84:48:a5:2b:8e:74:73:67:06:c9:10:
b2:af:69:51:f3:9e:da:b9:5c:43:43:fd:b4:e9:d6:
e9:86:a6:d7:86:e9:a8:df:7b:5d:38:2c:34:78:e3:
bb:be:95:d5:06:52:45:33:50:c2:c5:72:1d:8d:d0:
b9:83:08:ef:cc:e7:ce:04:41:08:ec:3f:3a:96:13:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5F:AA:77:3B:D9:CA:28:B9:6E:D6:E5:2C:AA:A8:BE:76:31:CF:54
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7a:46:00:38:23:6d:ec:f1:23:89:29:4f:da:ce:b5:6a:12:
1c:6f:05:e1:b7:87:18:a1:68:c3:ee:c4:59:72:8e:35:e0:d5:
db:2f:a9:10:4f:b4:a6:92:b0:15:0c:ca:40:30:25:59:dc:03:
51:35:71:d9:c4:55:d9:64:a6:93:9a:70:3c:75:32:8f:51:f5:
cd:6f:3b:51:b8:80:59:70:fb:dc:ae:d2:5e:f7:44:e7:5c:3b:
f5:75:77:46:00:94:5f:c0:d6:40:fa:dc:b0:11:7e:69:e7:90:
4c:44:cb:69:8f:cb:8c:b5:64:2f:2e:e1:19:d7:52:ba:b2:cc:
11:13:e4:d0:3f:11:37:e5:4b:25:ec:61:c3:6f:7b:7e:cc:c2:
e5:c2:9a:30:43:42:a5:f7:5c:4e:21:9f:23:77:12:a1:20:53:
34:64:a7:ad:02:e2:08:45:3e:bd:d4:1c:a3:dd:bd:d6:bf:08:
6e:8f:d0:85:bc:c6:a5:19:d1:ba:74:41:be:f5:89:8b:9b:99:
45:f3:33:2d:dd:96:c3:b8:51:52:d5:88:4c:c8:b9:b2:65:dc:
5a:e4:1f:56:a2:70:29:80:80:28:ec:d6:c3:4b:2c:d4:a7:a1:
52:38:05:56:bb:28:7f:d8:e5:5e:c8:43:5d:db:1d:2a:a0:1b:
bc:88:99:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPPUIZ8HjrGLshhu9msWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3
MjM2ZTUwHhcNMjYwMzI5MDQwMTI1WhcNMjYwMzMwMDQwMTI1WjAzMTEwLwYDVQQD
EyhhNzVmYWE3NzNiZDljYTI4Yjk2ZWQ2ZTUyY2FhYThiZTc2MzFjZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ucL1BHBTHrii1zbk7/4btm1oxe
NPxwt66/iRttuTD00ERnNX3g9c2TDKactyMrUjdUOMRM/jxc0p9RD/dNQg/QMAVF
PRJ/v7FKi9wqPr7dB0ZNJKWwYXwZb02pZmouh11xIc1Se903vYI+p22vcWnOzfpZ
4tFNVqIxOtdsbOpGjOXduYAi07qCpB2/MIegtoNM2fyFBs5r///4GGoaBBk5zXu0
3E9C2HuHhEf6jI7aX00Q3abDhEilK450c2cGyRCyr2lR857auVxDQ/206dbphqbX
humo33tdOCw0eOO7vpXVBlJFM1DCxXIdjdC5gwjvzOfOBEEI7D86lhMfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdfqnc72coouW7W5SyqqL52Mc9UMB8GA1UdIwQY
MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt
NjU2NDBmMWMxNzlhLzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh
LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnpGADgj
bezxI4kpT9rOtWoSHG8F4beHGKFow+7EWXKONeDV2y+pEE+0ppKwFQzKQDAlWdwD
UTVx2cRV2WSmk5pwPHUyj1H1zW87UbiAWXD73K7SXvdE51w79XV3RgCUX8DWQPrc
sBF+aeeQTETLaY/LjLVkLy7hGddSurLMERPk0D8RN+VLJexhw297fszC5cKaMENC
pfdcTiGfI3cSoSBTNGSnrQLiCEU+vdQco9291r8Ibo/QhbzGpRnRunRBvvWJi5uZ
RfMzLd2Ww7hRUtWITMi5smXcWuQfVqJwKYCAKOzWw0ss1KehUjgFVrsof9jlXshD
XdsdKqAbvIiZdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:48 2026 by rpki-client