Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: rmgw0z51aR7hjtB2PUzs4cmZ/F6kv/EoMb8pSa/+SUI=
Subject key identifier: 70:54:4E:BB:C7:F0:97:1B:A6:B7:4E:81:BB:F4:5F:9D:5F:5A:AC:84
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 01A08979CA2F8CA694011DADCD20777BBCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 04:00:55 +0000
Manifest this update: Thu 10 Sep 2026 04:00:55 +0000
Manifest next update: Fri 11 Sep 2026 04:00:55 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: utcXQ25GTipgNooY3NwSr8m2x3nSJ+L0vhDE0AVSF/w=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:ca:2f:8c:a6:94:01:1d:ad:cd:20:77:7b:bc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Sep 10 04:00:55 2026 GMT
Not After : Sep 11 04:00:55 2026 GMT
Subject: CN=70544ebbc7f0971ba6b74e81bbf45f9d5f5aac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:92:c2:d5:13:34:2e:b8:11:af:5d:8f:34:
02:9b:90:b6:06:c5:53:4a:85:94:70:bc:7e:e3:90:
8c:97:fc:0c:a7:09:9b:b1:88:4b:5b:3f:66:ed:bd:
9e:cd:8e:18:12:cb:4a:6a:27:91:b8:e9:ef:e0:c4:
6d:1c:8e:d6:4c:49:18:59:84:6e:8e:33:20:0b:2d:
70:71:5b:ea:54:b6:05:ab:b7:ae:8d:13:eb:0e:7e:
00:f5:5b:e1:91:3a:6a:fd:89:1b:ff:21:cc:83:66:
1d:83:e9:7c:5e:0e:12:35:3a:b8:24:6b:e7:d1:71:
91:e3:66:bc:70:18:20:51:df:f3:d8:f8:61:f1:c4:
72:c8:04:e2:e2:a4:f7:1e:08:4a:85:58:9c:eb:90:
6e:d0:aa:4d:0a:2b:d8:87:7b:e1:73:2a:79:e2:e8:
e0:e1:79:da:35:aa:a4:1b:ed:9a:18:b4:41:6c:5d:
89:ee:a4:11:1c:bc:ab:a9:cd:59:7f:88:49:53:f9:
ff:b8:f6:3d:1a:3c:25:0a:10:d4:52:e6:22:7d:55:
08:6a:9d:bc:77:f7:31:4c:09:f8:43:6d:65:84:2d:
62:66:91:45:a5:1f:45:dc:c9:78:c1:fd:ba:9f:82:
09:c2:77:fc:94:e3:a1:f0:99:ac:36:9d:93:11:2f:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:4E:BB:C7:F0:97:1B:A6:B7:4E:81:BB:F4:5F:9D:5F:5A:AC:84
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:03:a2:d4:4c:94:32:09:11:0b:60:6b:dc:b2:0c:7f:75:
6f:67:db:c3:e0:9c:ee:65:41:fd:ee:e8:56:28:fa:6b:13:11:
7f:8f:20:bc:c8:fc:9a:16:d1:b7:bd:8d:b3:22:4e:eb:68:68:
58:07:60:fe:a6:f8:5d:a8:5f:e5:c7:66:46:90:70:32:bc:46:
60:4b:2a:58:c5:8a:0c:8e:41:11:30:e1:14:ef:bc:87:8e:99:
c2:13:e6:fc:67:7e:3e:f1:8e:f3:78:62:97:b5:78:f8:42:a0:
b8:f0:1e:b6:46:a5:39:80:20:b5:a1:8e:ca:0e:c4:f8:18:c6:
cf:2c:a4:85:c2:e2:52:5c:b8:3b:21:d9:81:75:c9:c7:df:95:
55:2d:2c:d5:58:57:3f:a2:3b:bc:10:b8:57:b8:b8:5b:bc:9f:
96:dd:4a:93:b0:57:a1:af:12:9f:7d:ca:ad:00:df:e0:74:49:
e7:e7:2d:44:4b:a0:d3:fd:f7:d4:8d:4a:f6:54:de:c2:d6:f5:
f5:15:2f:63:2f:1a:6c:c8:40:74:c8:86:e7:00:f7:91:fd:3d:
26:14:22:ab:c5:92:0c:9d:2e:81:f3:9b:b6:fd:76:33:fc:bd:
43:e5:c8:1a:ce:72:54:da:ec:e0:31:65:fb:66:a7:a9:56:cb:
f4:1a:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:33 2026 by rpki-client