Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: IqUNovaEOZ7EChx+NLhkl4Z7PduhTOIeST8GJD8nbbQ=
Subject key identifier: 06:17:50:7F:DB:5E:F8:C1:D9:92:C3:29:B3:C8:73:5E:D0:82:D6:0C
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 01A13748B02830EAA659129211E3B9E29BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 22:01:12 +0000
Manifest this update: Tue 13 Oct 2026 22:01:12 +0000
Manifest next update: Wed 14 Oct 2026 22:01:12 +0000
Files and hashes: 1: 9pt3MDCay7srVLLtOW6VihLRgqg.roa (hash: t8waBrYlHxhkv2G7wxFbB2b8tWVcdcespy2BiSBs4U8=)
2: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: e7bedP8Bz0WvosxldL6+VHnB7XhNB6fdAh0pQr2HEtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:b0:28:30:ea:a6:59:12:92:11:e3:b9:e2:9b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Oct 13 22:01:12 2026 GMT
Not After : Oct 14 22:01:12 2026 GMT
Subject: CN=0617507fdb5ef8c1d992c329b3c8735ed082d60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:b4:f4:41:c9:42:cc:b1:87:0a:a7:fe:6b:
2b:3c:c5:8d:38:9f:2b:4b:2c:fb:da:5b:64:2d:27:
02:cc:9a:bc:e1:5e:c0:bc:6a:28:a2:47:c1:bb:2a:
e3:a4:33:16:66:f1:14:59:58:8b:3c:e0:0b:cd:24:
31:26:93:aa:cc:f4:44:a3:28:ee:ff:77:ad:17:b3:
53:7a:7c:0a:f7:c3:9a:f4:5f:a8:75:a1:84:ad:fd:
ce:21:9d:9b:3a:0c:58:43:39:f7:52:5a:1e:b8:65:
57:0a:4e:47:9e:e8:05:df:27:3a:b8:9d:ac:b9:7b:
9e:bb:e4:fc:69:e0:15:28:ef:a4:36:bc:30:22:a5:
fd:b4:db:22:be:f3:78:3d:f3:de:75:d5:64:1c:2b:
f0:00:b7:20:c0:54:aa:78:6d:4d:8b:14:fa:90:66:
65:1e:13:50:da:53:cb:68:66:ee:45:8b:36:2d:0b:
75:44:a2:28:29:eb:91:af:9b:09:f2:a0:90:0b:8a:
ed:95:9f:2f:37:f3:fd:9f:8c:31:4b:b2:75:d0:1a:
20:84:d7:b9:47:07:83:3a:74:48:06:71:e8:0b:d6:
8b:29:18:6a:1b:ae:70:62:24:4b:94:1f:fd:20:66:
05:eb:d3:87:29:d7:24:8f:e5:dc:f1:76:18:b4:7f:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:50:7F:DB:5E:F8:C1:D9:92:C3:29:B3:C8:73:5E:D0:82:D6:0C
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ca:35:25:6e:f3:52:56:bc:df:5a:70:5c:4a:d2:65:7a:59:
98:1f:90:bf:ad:ba:af:4d:18:13:4b:ef:55:20:7f:bc:99:8f:
f3:b4:0f:d7:d2:e4:e9:82:cb:b3:c3:24:31:f7:61:c8:6f:ad:
f8:a4:25:ce:c3:7c:68:56:5c:c7:fe:ee:32:fd:18:c6:1b:fa:
1b:e8:11:fd:50:a9:66:9f:90:ae:62:36:e9:4a:7f:4e:e0:80:
2e:69:11:a3:67:82:e0:ba:1e:67:56:00:64:01:29:5d:dc:79:
07:35:0e:a3:c6:f7:08:3a:c5:37:e8:98:93:c7:36:07:b8:61:
08:9c:7a:05:05:84:6e:49:d0:22:b5:12:7d:ee:c0:63:52:45:
de:7d:b6:78:c0:38:49:48:3d:78:8d:e5:7e:3a:d6:c7:12:46:
28:46:22:01:45:ad:01:9a:90:17:14:b7:87:6c:67:54:7a:b8:
05:00:d1:30:dd:c9:f9:e8:a2:5c:50:a2:b7:47:34:a4:e0:07:
00:f5:63:a4:5c:9c:d0:fb:4b:a1:b0:85:87:b3:19:8b:b2:2c:
06:f5:f9:95:a7:07:09:84:f0:33:42:10:ac:8d:a8:1a:14:35:
35:a6:54:45:35:b9:b2:43:7e:c3:0a:91:a7:a9:52:c6:65:e9:
59:37:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:04 2026 by rpki-client