Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier: nzMRmLmsC2/pHnBI6B5NDeyQMC5V3eztD79zk9LrN8M=
Subject key identifier: 5F:43:C2:11:56:B3:A7:8C:69:FD:D2:83:3E:28:89:A1:E9:38:B2:D9
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 019D37C08CE6B2FC2C8C02D77E855E7B0040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:58 +0000
Manifest this update: Sun 29 Mar 2026 04:00:58 +0000
Manifest next update: Mon 30 Mar 2026 04:00:58 +0000
Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: vxryw4dqDJwJz3YeLCYK9O4hVsgfbWDXkjR0pX4+xKc=)
2: YJY4ynuuiedvHHvTSK2Y99WgTKA.roa (hash: vAaOsQ/R4WjdxzIXlSEYb3gqw5HoiLYG5de2yPVuZNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8c:e6:b2:fc:2c:8c:02:d7:7e:85:5e:7b:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Mar 29 04:00:58 2026 GMT
Not After : Mar 30 04:00:58 2026 GMT
Subject: CN=5f43c21156b3a78c69fdd2833e2889a1e938b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:b3:b3:82:e0:bb:58:da:eb:9d:c1:2c:e8:
85:c0:00:74:73:ec:ff:27:53:af:c9:ae:c0:a8:a8:
dc:65:a5:3e:c7:85:f3:2a:48:11:4e:54:d2:5f:2a:
24:ef:9e:b3:18:50:e4:94:60:d6:9c:e5:6e:f8:20:
9d:7a:65:6e:95:eb:c8:3b:4c:9a:76:c0:49:53:b6:
7a:59:70:63:28:e4:04:87:a1:01:46:e7:b0:a7:7a:
d4:b1:ed:74:f9:1d:20:25:64:3d:3d:cf:3e:43:88:
d2:47:78:19:a5:ed:df:b1:3e:3e:00:e3:5e:28:d0:
ba:88:d3:67:84:fa:01:35:98:70:84:e3:12:c0:bd:
0a:35:69:97:2b:03:0e:22:5b:4d:77:d4:43:1b:94:
45:c1:f5:80:70:52:51:bf:7b:66:2a:82:be:e3:32:
97:00:8a:11:81:5d:90:2a:12:0f:75:d8:03:55:a4:
ee:25:2a:3f:dd:31:00:09:07:cf:c4:ab:8e:45:85:
49:17:9c:dd:d2:37:7f:be:87:89:5b:68:4b:b1:ad:
ed:32:7e:c2:16:27:ac:eb:94:c2:2d:fe:34:e5:78:
b1:cf:e6:5a:01:a2:7f:76:a7:be:7a:75:68:a5:2c:
a0:c3:40:bf:b3:6d:c4:ae:2a:b3:10:57:0e:03:28:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:C2:11:56:B3:A7:8C:69:FD:D2:83:3E:28:89:A1:E9:38:B2:D9
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:8c:ec:d3:43:0b:eb:42:c6:1e:71:81:0f:89:c9:26:3d:
c6:48:92:3f:30:72:59:a2:c6:61:78:f4:11:ce:41:15:ae:cb:
f8:c3:86:d3:95:11:8d:91:e3:fd:30:6f:6c:55:4e:df:5a:52:
be:e0:57:69:4f:eb:b3:c4:78:92:d2:53:58:90:46:17:70:5b:
1c:c3:ff:89:ef:1b:3f:45:1b:6f:23:f8:05:ec:2c:e7:04:d2:
8a:ef:03:65:c8:23:7a:51:6f:d8:da:c7:44:fc:dc:b6:e1:15:
d0:84:b3:1b:a6:12:66:0a:53:d8:a6:9b:d8:97:f6:44:4d:2e:
f5:79:d5:97:66:47:40:d2:29:ed:55:a7:b4:ed:10:b2:88:80:
f6:87:bc:5c:df:a0:d2:a9:36:dc:95:7e:e8:4e:ff:c7:53:61:
15:c6:2e:8f:d0:df:93:67:0b:20:c4:1b:b7:5b:96:c0:48:66:
46:4e:48:93:40:30:e2:04:0e:d5:c7:e0:7e:e2:33:62:dd:94:
c7:62:69:95:fd:e7:f2:7d:68:6b:33:d8:67:e9:97:12:b6:f6:
b5:d2:dc:c4:db:ac:ce:89:36:8e:ec:ba:f2:a1:13:6a:bf:79:
58:2c:25:b9:e7:01:17:36:cf:18:a7:8d:0e:05:65:12:0e:b6:
08:47:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:47 2026 by rpki-client