Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: 0iKlL0V9ukCBU8tjpAQp8egE6sfQfs0SrH5Pg4NKlY8=
Subject key identifier: 3D:E5:32:34:7E:36:A4:D1:0C:69:30:E9:C8:9B:3E:44:A9:ED:7B:DD
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 01A12DA0D3ABBC516416D76DE0C0DB961E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 01:01:16 +0000
Manifest this update: Mon 12 Oct 2026 01:01:16 +0000
Manifest next update: Tue 13 Oct 2026 01:01:16 +0000
Files and hashes: 1: 9pt3MDCay7srVLLtOW6VihLRgqg.roa (hash: t8waBrYlHxhkv2G7wxFbB2b8tWVcdcespy2BiSBs4U8=)
2: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: rJN/JvqL9NUOtsKbrKh5jfEGJYbrHY3eby8dKkZt5PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:a0:d3:ab:bc:51:64:16:d7:6d:e0:c0:db:96:1e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Oct 12 01:01:16 2026 GMT
Not After : Oct 13 01:01:16 2026 GMT
Subject: CN=3de532347e36a4d10c6930e9c89b3e44a9ed7bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:64:f9:22:e2:c9:a8:02:c4:9c:e1:bd:41:72:
60:1d:3e:57:70:4e:56:68:18:65:f8:cb:40:71:d8:
2d:1e:1f:46:b5:30:19:f4:bf:40:41:a9:12:a9:7f:
e5:dc:55:ce:08:6e:d3:3e:dd:b5:d7:e4:9f:2d:19:
d1:0d:b2:8a:65:5f:63:cd:40:a6:c3:55:71:c5:c6:
4c:aa:a1:67:2a:5d:c8:44:fd:8f:e2:ec:3f:93:f2:
40:ed:a1:a2:f4:67:83:f1:f7:3b:4c:aa:0a:57:47:
6e:cd:6a:3b:52:5e:95:5a:37:91:fa:99:27:e6:5a:
c7:85:66:4b:e2:d9:d5:11:e2:a6:74:7d:e3:c2:e1:
22:5b:3e:90:97:18:42:3a:3a:ba:10:2d:76:08:e9:
12:f6:83:6c:b7:af:cc:da:dc:ac:49:6b:fd:3b:49:
8f:f1:f9:cf:59:ae:fc:85:ba:3e:60:83:07:e9:a4:
77:a2:51:84:1f:fe:11:87:57:b2:03:83:4a:c7:5a:
f7:eb:de:a1:77:94:57:bc:d8:93:dd:69:ea:c7:4c:
fb:8d:79:7d:cb:5c:10:b2:d2:d0:7c:19:1b:42:9c:
74:ee:80:e8:88:8d:9c:37:86:50:e1:8b:d9:67:9d:
46:7b:8c:0a:72:33:29:e1:22:89:cd:e6:17:61:17:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E5:32:34:7E:36:A4:D1:0C:69:30:E9:C8:9B:3E:44:A9:ED:7B:DD
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:18:bd:01:a6:b8:36:ee:5d:ca:52:83:e1:3f:61:40:57:5a:
59:bd:86:f9:d4:f8:42:6d:f3:1b:53:0e:dc:b3:00:7c:b0:88:
2e:ef:17:8a:e7:3b:84:cc:1c:d0:9c:92:89:3e:d7:9a:e2:af:
ec:a3:45:2c:65:b3:9e:29:09:ec:66:bb:e4:80:f9:e2:73:f4:
79:57:a2:60:2a:ff:42:32:3d:0a:70:89:e8:53:ea:47:3a:e8:
d4:2d:a7:3a:fc:01:17:66:ea:26:4c:bc:85:25:37:93:22:c3:
8e:c6:e1:90:5c:d0:5c:f5:b7:3c:43:c5:ba:c7:ee:1a:4c:e5:
c2:d3:75:dc:60:7d:d7:f5:ea:76:28:cc:04:93:64:5f:1e:e8:
0e:46:59:ac:ab:3c:94:9b:ea:ff:da:10:16:44:69:7f:ec:d1:
58:88:a9:48:33:0d:61:d0:19:dd:04:ea:9b:72:8f:6d:9c:42:
c1:22:a6:de:d3:ad:5d:85:df:2f:4f:0e:79:3c:e3:d6:71:b6:
38:14:84:a3:45:21:e9:3e:2b:40:58:30:0a:25:41:be:b6:76:
eb:4a:f7:b7:6d:22:c9:53:42:b7:69:57:10:6d:8a:ff:3f:f3:
a2:31:1b:50:2d:37:76:16:a0:af:7e:e8:76:df:cc:67:6c:86:
e8:81:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:24:45 2026 by rpki-client