Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier: /YtpctlLeoCwL0/WcnkANz8rnAKrz4ftcUfqX0e4Io4=
Subject key identifier: 31:40:C4:80:A9:CE:B9:9C:B8:50:E1:0C:AB:70:FC:15:AD:CD:D1:F9
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 019F17F9C524D1CC7667D817CE5541072703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 10:01:12 +0000
Manifest this update: Tue 30 Jun 2026 10:01:12 +0000
Manifest next update: Wed 01 Jul 2026 10:01:12 +0000
Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: 9fFQXte91ntu4bso4Fwu4S7Sjrr0C1qo4p/vfPBa60A=)
2: i_Qquj6nRcMisyx39z1OUJv2DJE.roa (hash: OFGpzKu1pqQoshvsXPppirI5cw0o6HEcqfCjMg44qso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:c5:24:d1:cc:76:67:d8:17:ce:55:41:07:27:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Jun 30 10:01:12 2026 GMT
Not After : Jul 1 10:01:12 2026 GMT
Subject: CN=3140c480a9ceb99cb850e10cab70fc15adcdd1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:0c:7e:73:0d:b0:c8:27:af:bc:0b:b6:6b:
16:2d:ec:74:1d:4f:d8:57:65:07:f0:61:c5:10:95:
55:48:41:8d:22:1a:ad:44:44:f0:a6:14:24:ca:3c:
53:88:bf:e4:93:89:24:22:09:55:b6:11:ec:17:ef:
b3:38:4b:6c:10:03:06:76:22:99:29:28:35:c8:60:
0d:6d:e3:1c:83:d8:87:55:f9:49:18:00:30:2d:0a:
b6:77:7a:22:e2:5e:e3:dc:cf:22:33:08:52:42:4a:
7f:53:fb:59:58:cd:43:2d:88:51:1c:f4:43:de:53:
91:4c:99:29:4f:e2:3f:fe:7b:c6:0a:62:88:90:37:
a9:3f:4d:62:25:30:e1:eb:43:e3:5e:ed:7b:b7:40:
60:6a:4e:59:73:62:e4:ab:46:d4:55:08:c2:f7:e4:
51:a2:1d:bd:15:6c:e9:3c:09:17:c4:02:4b:0a:4b:
0a:7c:ea:4c:a5:dd:25:63:2f:4b:3c:eb:7d:5d:71:
c0:6c:aa:e9:9c:05:3f:7c:92:b6:a3:7b:75:f9:5f:
88:10:a4:34:f7:66:10:5c:ce:88:32:ac:13:65:da:
c5:8b:43:64:01:d9:0c:b1:60:a9:a4:ff:c8:8e:ff:
cb:d3:ca:d5:0b:5e:1f:5d:ff:dc:6b:a3:ba:df:f2:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:C4:80:A9:CE:B9:9C:B8:50:E1:0C:AB:70:FC:15:AD:CD:D1:F9
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:33:b8:5f:39:94:37:60:60:0a:23:ef:e9:27:fa:33:23:
38:7b:d7:f1:23:01:56:3b:9f:0c:3f:96:d8:65:c5:d9:8e:00:
43:18:74:de:46:76:e6:ea:d6:0a:61:dd:06:14:aa:b1:c6:ab:
14:c8:8c:a4:33:42:5b:bf:d8:bc:c9:8d:ae:e5:f2:e0:7f:40:
3c:fa:e5:af:b7:0d:3f:56:ee:10:65:92:aa:d5:a6:c5:fc:fe:
6c:08:7e:43:82:1a:bf:1a:4b:96:53:82:7d:c7:ce:28:ac:2f:
2a:ea:93:9a:04:fa:c2:5a:85:51:90:33:dd:df:25:cf:a0:4a:
97:9b:2c:c1:83:27:69:fa:ab:c3:56:9c:bd:e2:16:ee:7c:ec:
4f:0b:12:c4:d9:64:45:08:b4:b6:a9:69:33:86:6d:ea:b0:60:
dc:d8:1a:a7:48:b6:4b:10:8b:00:54:56:df:b2:ed:96:56:e9:
3b:85:97:28:ff:29:d3:9e:69:66:b7:3a:d8:31:09:3d:00:29:
99:5e:81:a4:69:a1:f9:7e:65:f9:15:8b:4b:e6:a0:10:80:9f:
45:8e:79:f6:f2:ae:b6:f0:92:45:fa:53:02:dc:23:59:37:b7:
b8:81:7f:d0:5c:97:d9:4a:aa:7e:03:3c:c9:8d:29:01:b9:c9:
2c:7a:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:19 2026 by rpki-client