Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: M/KN2yjRI8M0S/DPRdK7nnHDXK8WtqFPogLP1tkiYRo=
Subject key identifier: E0:1B:7D:81:B1:80:AA:CB:CF:D0:B6:E6:69:55:36:03:CB:88:B1:F5
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019DD05088EA94C3AAEC1459B41E8621B44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 18E4
Signing time: Mon 27 Apr 2026 19:00:31 +0000
Manifest this update: Mon 27 Apr 2026 19:00:31 +0000
Manifest next update: Tue 28 Apr 2026 19:00:31 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: 8DLtqhTNFxOQ6DG/cw1CPRrTsU04HwSMhjXkOlf4y9g=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:88:ea:94:c3:aa:ec:14:59:b4:1e:86:21:b4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Apr 27 19:00:31 2026 GMT
Not After : Apr 28 19:00:31 2026 GMT
Subject: CN=e01b7d81b180aacbcfd0b6e669553603cb88b1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:03:f5:fe:b4:85:20:f4:3b:9a:11:fb:25:
85:2e:e1:3b:da:23:a9:85:e2:b2:0c:44:b7:21:4f:
e4:b5:11:03:c7:97:e4:e7:52:e7:6a:3a:fc:77:fb:
16:b5:77:b6:75:32:ea:45:5c:a9:a3:40:74:d7:66:
35:ec:d1:cd:3c:79:32:b7:8d:20:99:ec:73:cb:d2:
33:a8:3d:e1:d5:b5:9c:ef:86:32:70:a4:48:49:26:
49:cb:d2:02:05:90:45:52:d6:80:79:56:cf:e7:15:
ef:2c:19:68:d3:17:d0:87:9a:9b:d7:9a:6a:80:6b:
97:ca:3e:d1:91:7b:1e:e0:a5:98:95:08:a3:23:d3:
0a:ed:5c:c1:ba:52:bb:4b:42:8d:50:10:b8:bb:33:
67:66:4e:3e:5c:88:22:74:fc:fb:0b:88:4d:35:de:
4d:b8:56:05:c1:61:72:12:da:83:fe:5f:5f:5a:01:
1d:fb:40:d8:11:0e:86:f3:8a:0f:88:ae:ec:19:b3:
27:eb:c9:49:3b:c7:11:30:73:19:8e:b2:07:69:6c:
50:e3:dd:3e:69:9e:31:d9:c2:5a:ee:bb:39:94:79:
78:70:12:62:1c:70:93:ab:74:37:4a:92:d2:a9:0b:
f1:1c:1e:d8:74:24:86:18:9d:85:ea:0c:b1:49:56:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:7D:81:B1:80:AA:CB:CF:D0:B6:E6:69:55:36:03:CB:88:B1:F5
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:28:2c:5e:c9:06:60:80:5b:2b:8d:26:93:16:77:08:1c:ac:
01:00:56:39:a3:95:68:a7:cf:38:ed:9c:eb:5f:5f:6d:20:65:
cd:e8:b6:d9:ed:fc:c2:46:6f:11:11:8d:c3:96:07:b2:10:4a:
2d:4d:8b:d9:a0:fc:d8:9a:82:09:3f:3e:4a:e4:90:88:f8:c9:
93:56:4b:41:ce:5a:a7:f2:a4:08:ef:19:31:7d:a0:f6:55:00:
2b:e3:81:7b:d3:b4:c1:13:65:30:e7:0d:50:25:cf:98:35:d7:
97:03:bf:f5:ec:2b:75:7c:f5:29:58:77:01:42:8d:cc:15:31:
88:05:94:2d:f3:85:8d:25:ea:87:21:4b:c1:47:af:6e:c5:b6:
43:ad:cc:99:1e:68:aa:2b:5e:4c:1e:d7:31:7b:fb:01:62:1a:
a8:b3:b6:30:1d:67:7f:b1:9a:3a:18:fd:96:da:31:58:3f:f2:
ad:73:b1:a4:ba:c8:0a:12:a5:ca:87:29:e3:ff:d9:2f:0e:ce:
32:da:d1:5c:31:e3:3e:37:2e:2d:c6:13:98:ca:49:d8:1c:0b:
2f:41:d4:0a:17:28:8b:99:17:da:be:ce:94:7d:45:2b:50:80:
e4:3e:55:7b:f0:01:f1:71:d1:e4:6a:86:0e:3b:35:cd:f7:41:
39:c5:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:26:13 2026 by rpki-client