Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: eb36a5qKnkgmCZ9TqWMVX+DlniYWyoMjVmYjzHyL6Ec=
Subject key identifier: 72:7E:32:B9:15:91:82:84:64:AD:68:DF:43:5B:26:10:E3:9A:5F:3E
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 01A17BBB2A71D7B4E822798579949F18B6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 048A
Signing time: Tue 27 Oct 2026 05:00:25 +0000
Manifest this update: Tue 27 Oct 2026 05:00:25 +0000
Manifest next update: Wed 28 Oct 2026 05:00:25 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: KcU66gDeoOhr/J0I2pQW0wlQxjoIu4K3yOQ0g3CND0w=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:2a:71:d7:b4:e8:22:79:85:79:94:9f:18:b6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Oct 27 05:00:25 2026 GMT
Not After : Oct 28 05:00:25 2026 GMT
Subject: CN=727e32b91591828464ad68df435b2610e39a5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:cb:da:cf:04:c4:f4:27:af:1d:e1:1f:b2:
c0:14:8f:ba:a6:9c:98:d2:0a:c4:db:c3:4e:af:bf:
9e:05:bf:42:70:39:73:c3:25:86:3b:29:ca:c8:49:
34:5d:5f:cf:ec:f5:48:4b:71:fa:78:9f:f1:ed:d3:
61:0f:a5:4b:21:58:8d:9a:23:6f:a8:08:75:70:c4:
a0:0a:30:85:d3:d4:98:03:ff:08:fc:6b:fa:17:ac:
8f:0f:78:7e:ff:ed:91:3c:89:12:9c:be:d4:5f:90:
9b:54:d0:69:fd:22:00:c1:04:22:a1:b4:77:eb:26:
4b:87:8d:12:d5:f8:fb:d0:30:7e:1e:2e:aa:e0:c4:
9a:e1:8d:82:8d:58:77:d1:14:47:e0:95:f2:76:7d:
09:dc:31:ad:66:70:fa:ae:8c:9f:9b:b0:d9:30:b3:
2b:c3:2b:f9:34:58:d1:42:ff:13:4f:b1:c9:ad:e6:
08:a8:84:ca:77:4c:09:e8:ce:cb:32:f0:37:d0:d4:
07:60:f8:77:81:4e:12:80:97:81:5b:d4:fc:92:86:
1d:f4:ed:f2:ce:38:41:b2:05:dd:74:f0:8c:a1:d0:
5a:57:c5:a5:8d:d9:a2:d4:eb:a9:3b:69:78:77:d4:
7f:0d:63:92:e9:a1:c0:87:85:51:c0:97:dc:0f:46:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:32:B9:15:91:82:84:64:AD:68:DF:43:5B:26:10:E3:9A:5F:3E
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e8:f9:07:cf:ca:df:f9:ca:4d:63:5f:1d:3c:7b:87:12:47:
2a:f9:f2:47:1c:ca:b2:ed:56:7d:e9:f2:b4:17:38:5e:3c:73:
f6:ba:36:15:7e:0f:ef:60:ca:a6:a2:fd:74:e1:1d:f6:5a:ae:
05:dc:10:c3:8e:5e:c9:c2:5e:2c:61:1b:9d:86:5e:8f:2f:85:
ff:b8:90:97:5e:96:3b:5a:bf:2e:81:64:e2:1b:2d:d0:8c:9b:
70:f5:d1:91:0b:18:da:ac:d2:13:5d:3b:b0:35:25:59:8e:08:
99:ce:4e:d7:6f:5a:38:0f:5b:ae:da:ac:bc:a6:c8:b3:36:2e:
bb:99:7f:d1:fa:91:61:be:d4:7e:d6:66:09:ea:0b:f4:07:67:
4f:4b:8b:68:05:c1:b9:77:8b:57:4b:26:78:70:fc:da:a2:fb:
ed:f4:dc:3c:78:fd:7c:63:b3:f6:3a:6d:c8:fe:84:8f:bc:31:
85:5c:a1:4c:a2:da:f2:4e:40:bb:b1:af:5a:6b:fb:52:65:67:
97:94:57:6a:dc:a7:7d:81:af:7e:19:5b:11:23:ca:c8:af:64:
24:68:b0:2d:93:92:8e:01:56:84:67:ac:82:ff:d7:6d:95:1c:
9d:4d:05:b1:9c:6d:bf:d6:38:92:b8:60:3f:09:7c:c7:19:f8:
6a:c7:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:34 2026 by rpki-client