Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: 3FRs5slcxrOPMA+RAKu2H6en7KkwESgeK5VlnfzaJSs=
Subject key identifier: 24:32:44:27:A5:A0:A7:05:2A:FC:13:05:2F:E8:4D:A9:54:FF:16:52
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 019E30E042E8A61F0B7A92972893433AD076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:01:03 +0000
Manifest this update: Sat 16 May 2026 13:01:03 +0000
Manifest next update: Sun 17 May 2026 13:01:03 +0000
Files and hashes: 1: 9pt3MDCay7srVLLtOW6VihLRgqg.roa (hash: t8waBrYlHxhkv2G7wxFbB2b8tWVcdcespy2BiSBs4U8=)
2: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: 42rcKKcxTG71quTzNEVDuf5GSphM0EOUzb8eJykIovo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:42:e8:a6:1f:0b:7a:92:97:28:93:43:3a:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: May 16 13:01:03 2026 GMT
Not After : May 17 13:01:03 2026 GMT
Subject: CN=24324427a5a0a7052afc13052fe84da954ff1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:49:6a:bf:9e:1b:1b:e5:ae:26:2a:49:80:
4e:ad:81:f6:cf:e9:75:67:b2:1b:d2:de:2e:d8:64:
42:d3:2e:00:bb:a7:b7:b1:18:be:39:e7:d4:73:9a:
24:2b:28:0c:87:16:14:4c:6a:b6:91:29:38:21:7e:
1b:4a:28:c1:84:71:ee:de:7f:c4:46:00:73:35:73:
11:e5:cc:4c:3f:ea:66:23:f6:23:13:b9:db:69:6b:
6f:3b:3c:4d:8b:0c:e6:f3:a5:00:fc:25:55:b1:f3:
2d:d5:5e:58:45:05:07:ed:c0:d0:a7:0f:11:fe:8b:
05:dd:0c:92:b8:cc:9c:ee:c3:1c:02:03:f4:0c:42:
e2:40:fc:79:56:90:72:68:43:00:42:24:cd:0c:c2:
c2:e8:41:d0:d8:c6:8a:6d:b3:47:c8:bc:92:5d:88:
cf:92:40:ca:7e:89:ce:c7:ce:56:ed:5b:13:9b:51:
f7:63:37:63:e0:ef:2a:3a:8f:7f:02:a3:e3:94:ca:
9f:3a:52:50:4d:62:b8:d5:ff:38:5d:34:3a:f3:bc:
ca:6a:b4:88:60:ed:1f:c4:b8:93:00:6e:49:d7:c1:
c6:46:da:c6:41:e0:89:90:99:1c:f9:20:b9:3b:3a:
9f:16:61:a4:df:a1:94:9f:74:9d:9a:eb:f9:68:fc:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:44:27:A5:A0:A7:05:2A:FC:13:05:2F:E8:4D:A9:54:FF:16:52
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:3e:d9:fa:97:a7:92:70:92:ab:62:6c:cd:cb:9d:f8:18:
b6:29:6d:e3:8c:69:0d:f4:7b:23:58:be:34:2c:57:80:9e:c7:
61:d3:89:97:9a:ec:0b:ae:53:1d:53:03:3d:58:df:ca:72:ea:
45:cf:b0:ec:86:6f:11:25:db:d9:a7:35:e3:9a:3e:d6:9c:88:
85:ee:ca:6b:b4:3c:65:6e:d7:55:d2:9b:0e:54:57:cd:3e:66:
c6:cc:33:2a:f0:4c:6d:0c:e0:d8:6b:5f:c9:81:b5:1a:55:dc:
0a:5f:4c:e5:7c:b9:3c:0f:b7:d0:fd:4f:a3:f1:06:57:f6:75:
73:da:ba:ec:30:93:ad:5d:b8:29:a1:29:84:20:56:f0:3b:d1:
0f:a0:28:70:75:8d:a2:21:22:9a:c5:72:ec:97:00:23:7b:71:
f8:6d:29:17:08:5a:89:18:78:a3:b3:be:e6:c5:6b:84:9a:30:
eb:a1:18:0b:26:10:0d:e3:d5:94:2a:8e:ec:91:81:b9:49:61:
e2:75:55:0f:34:8d:89:ac:8a:9c:90:e8:b7:0f:7c:f7:60:fc:
c3:30:44:5e:25:ac:00:ec:92:35:d2:b4:5c:ff:f3:81:cd:7f:
e8:45:0d:5e:29:d0:76:11:90:1c:3d:34:60:3b:c9:b9:96:e5:
da:65:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:39:52 2026 by rpki-client