Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: o5uT34aHnMuOMoMCbM7DHT6YVW/Zk5+zflJsn5p32+E=
Subject key identifier: 1F:C3:35:04:BB:0A:C1:86:B0:2F:8C:CA:20:CD:0C:82:F2:ED:2C:2E
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019CE4B5F52A2F8C568CB12D7B7DC94E5C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 186A
Signing time: Fri 13 Mar 2026 01:00:55 +0000
Manifest this update: Fri 13 Mar 2026 01:00:55 +0000
Manifest next update: Sat 14 Mar 2026 01:00:55 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: Kr8f0CRmsdXmUiGw6Bq5aJCtYhyuTJxAQqAKorslaDA=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:f5:2a:2f:8c:56:8c:b1:2d:7b:7d:c9:4e:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Mar 13 01:00:55 2026 GMT
Not After : Mar 14 01:00:55 2026 GMT
Subject: CN=1fc33504bb0ac186b02f8cca20cd0c82f2ed2c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:b3:ed:19:dc:29:3c:f8:34:7d:c6:a3:f2:
86:9d:66:61:aa:c2:00:03:39:6b:41:91:74:62:d8:
e1:df:ba:e7:95:58:45:25:c8:c0:d3:7c:42:f1:3b:
28:3d:e6:bd:61:bc:67:f2:33:b6:0d:88:0a:1e:4d:
82:e8:88:ff:3f:0d:6c:82:9a:9e:55:2f:0d:52:26:
32:73:b5:ee:c9:85:3b:77:68:5d:7e:ab:4a:05:34:
80:52:b7:f1:2e:a2:e8:e5:44:fa:11:cd:92:7f:0b:
e9:1c:8e:0f:f7:6e:f3:a0:90:7f:ad:35:ab:2b:a8:
28:e4:e1:24:df:ef:26:33:6e:50:91:76:23:ed:e9:
a7:38:f4:9d:b6:d0:8c:d3:35:a0:43:05:44:f4:fa:
c7:55:94:93:dd:83:41:5c:87:61:dd:d9:46:b3:0d:
80:cc:f0:f5:f5:64:6f:c6:24:5b:50:47:fb:7d:a1:
9a:a9:51:7c:3d:b2:4e:5f:fe:6e:36:99:ae:5e:ab:
23:2a:49:52:7c:24:8c:04:b7:92:04:17:8d:89:01:
bc:83:23:b6:99:25:33:67:12:50:56:9e:dc:dc:9a:
ec:3e:13:28:2b:00:8c:20:bb:8c:7f:a4:3a:c3:84:
46:24:15:c3:7d:0f:9b:94:93:94:cc:e3:62:93:f1:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:35:04:BB:0A:C1:86:B0:2F:8C:CA:20:CD:0C:82:F2:ED:2C:2E
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:da:d1:4b:ce:80:93:fa:d0:9d:a0:56:ad:40:73:cc:20:
60:cc:9e:14:0b:2a:19:1e:6f:c4:35:cd:d8:f0:39:2d:ba:54:
fd:d1:e5:a3:6f:57:4b:d2:05:1d:b7:90:86:16:de:d2:df:18:
d4:63:52:cf:7e:ec:c2:6b:61:c7:b9:5a:0d:69:2a:d8:d3:e1:
f1:ba:40:3c:25:62:91:84:85:1c:fa:f0:9c:f5:4d:f8:3b:39:
3a:d0:38:9a:79:33:f3:65:cd:b3:73:54:17:0f:e8:e6:26:0e:
57:37:a8:62:48:0c:ca:18:51:53:99:ff:37:77:60:33:3a:67:
b6:09:c6:2d:99:90:c5:95:4f:70:70:98:4e:1c:f5:f2:cd:4a:
55:fc:1f:5a:08:e2:a2:d0:52:02:b8:2a:43:01:bd:8c:a0:28:
71:ce:b7:fb:16:f6:9a:ad:8c:59:77:4c:a4:a3:f8:78:2a:a5:
2a:d9:96:77:37:5a:03:a2:da:7e:f0:fe:6a:1c:01:9c:79:0e:
57:8a:75:c2:69:b0:cf:12:af:c4:ce:cb:df:6b:f3:07:a4:4d:
9e:24:57:0a:96:af:56:e3:14:30:d3:d9:61:53:4e:c1:e2:16:
42:7e:b6:90:57:33:ff:62:22:98:ad:2b:07:a2:7f:71:bb:ce:
3a:bb:6b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:20:32 2026 by rpki-client