Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: /sP4kpj/baXsdVSspi6MPELGenmT3uMifK1khvoRDnE=
Subject key identifier: 1E:42:22:C0:68:D5:F9:12:B7:A4:74:BC:36:17:3C:CF:62:03:BD:82
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 01A0024B743ACBF13F25465E4EEB4C16A408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 22:01:34 +0000
Manifest this update: Fri 14 Aug 2026 22:01:34 +0000
Manifest next update: Sat 15 Aug 2026 22:01:34 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: qy0ZoWmMc+V8D1vafrEXpO4e4R35RhCF/+VYdLMACYg=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:74:3a:cb:f1:3f:25:46:5e:4e:eb:4c:16:a4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Aug 14 22:01:34 2026 GMT
Not After : Aug 15 22:01:34 2026 GMT
Subject: CN=1e4222c068d5f912b7a474bc36173ccf6203bd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:c9:74:0f:47:87:d5:19:04:00:be:e0:22:
71:36:5b:a9:7b:b8:22:b8:76:4e:5e:21:68:51:4f:
e1:47:e4:86:b6:f5:72:46:6b:e6:d3:4c:2a:44:6a:
5a:05:21:97:40:bc:d0:30:19:47:d9:11:d0:66:3e:
fd:06:a5:f5:c4:02:3b:bc:26:e6:d5:d3:21:31:d7:
86:1e:78:3f:2b:af:7a:01:41:b9:d8:b0:d5:f7:e7:
5f:62:b7:e5:d6:38:9b:96:2d:fd:2c:7e:70:a1:9d:
e6:90:e7:85:a1:67:0f:1f:84:83:06:62:77:6e:57:
22:75:04:e8:d0:c1:ce:70:00:a5:07:55:37:1c:f2:
f7:9b:b3:22:6a:3a:5e:b4:67:42:c9:8d:c8:cd:8e:
74:1c:e9:76:74:90:f1:a4:69:57:41:82:10:50:a0:
2e:04:32:2b:8f:29:6c:45:96:65:ec:01:b9:58:f7:
a3:37:05:e8:1e:34:1c:5f:52:4a:8f:23:94:db:f1:
d0:f1:03:64:c1:8c:5d:57:27:9f:ad:10:f2:ea:9e:
d9:02:65:90:4c:be:0d:66:4f:e0:5e:ac:18:2a:b6:
a2:3e:76:d3:bb:04:50:84:90:66:29:b8:7b:ee:70:
c9:38:51:a5:39:50:d0:b6:01:45:d3:16:ec:41:92:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:22:C0:68:D5:F9:12:B7:A4:74:BC:36:17:3C:CF:62:03:BD:82
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:94:5b:16:f5:a5:8f:98:74:37:b4:66:8e:a5:3d:76:c7:b7:
e5:2f:b7:f3:53:24:7b:b4:66:f3:60:11:e8:2b:69:33:85:0d:
23:fd:f9:12:10:79:9a:93:79:0a:ec:1a:0c:8a:35:48:35:92:
a4:40:16:18:f7:12:04:2b:d4:57:4e:02:c0:03:00:87:a0:d0:
09:e6:46:d9:9b:50:87:41:88:92:c0:ad:c7:fa:75:3d:fc:77:
3e:23:dd:8e:3e:d7:0c:9f:de:8f:00:07:a7:75:ca:33:7b:85:
5e:ee:c6:ab:43:fa:49:32:ca:71:2d:43:d6:96:5e:01:5e:cc:
bc:92:4b:8f:e5:bb:ee:16:05:80:c9:24:10:b4:e7:f3:5b:31:
b5:ac:f5:55:6c:36:7e:4d:ed:11:93:68:9e:c8:b5:54:f2:47:
61:84:77:da:28:0f:d4:f5:60:09:58:78:98:3d:26:13:a9:d4:
54:ef:45:98:9b:35:24:70:bb:c5:a1:04:78:3f:59:15:f4:61:
b4:4e:61:a4:62:2c:48:4e:73:e7:55:33:11:31:87:02:6e:85:
6a:02:9b:97:bd:99:6e:ff:1b:b3:00:46:62:7f:0a:a1:22:16:
1f:98:be:e8:48:a4:7a:f8:fd:4f:40:e7:00:6e:e5:a7:00:52:
db:fd:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:24:05 2026 by rpki-client