Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: m2uLVw5R2qMrARpD2nTTyWgsEWZKWtdRgwSEAOkVKq8=
Subject key identifier: 54:FF:75:63:61:2A:B5:3C:3F:19:5A:03:51:94:E6:69:46:B0:84:C0
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 019FA2970AC8614AFBC6A4B2C3B8B361B835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 0395
Signing time: Mon 27 Jul 2026 08:00:35 +0000
Manifest this update: Mon 27 Jul 2026 08:00:35 +0000
Manifest next update: Tue 28 Jul 2026 08:00:35 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: xZ+3kI5siuEAvMYkW14ppIjQDYqa8IhuW1NOdPhoYFI=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:0a:c8:61:4a:fb:c6:a4:b2:c3:b8:b3:61:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Jul 27 08:00:35 2026 GMT
Not After : Jul 28 08:00:35 2026 GMT
Subject: CN=54ff7563612ab53c3f195a035194e66946b084c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:35:c8:6a:9a:9c:21:65:78:a6:60:fd:9b:
9c:d2:42:ee:8d:bf:8b:e4:b2:e5:a4:34:49:12:16:
43:49:11:5c:f4:16:90:f1:c2:0d:9e:bf:69:03:f9:
8e:0e:a7:5d:66:d4:37:f9:76:70:a2:07:e2:27:c1:
fd:8b:ea:f4:7b:99:5b:cf:9a:fd:09:eb:58:64:17:
ae:d9:e5:a6:a0:18:70:6e:59:9d:3a:85:7d:9d:b5:
a4:4d:f1:f3:93:91:b2:77:29:3a:b3:44:85:d7:91:
c5:1f:07:20:a0:1e:f9:3f:4b:23:3e:7e:8c:25:f8:
a7:93:4e:ba:9c:4f:2d:98:46:c2:54:20:3c:1f:c9:
35:b4:25:e7:b0:dd:d9:05:57:e5:29:e6:c8:35:e2:
95:57:f9:24:94:ae:3b:6d:2a:b3:52:f0:46:e0:5e:
7e:e5:55:53:3c:22:65:3e:30:20:40:82:b2:87:e3:
8f:e0:d4:5d:8d:56:83:17:9d:14:5c:a8:86:ab:d3:
5b:ad:85:49:b4:ac:c5:6f:4d:ab:85:d3:5a:20:1e:
fa:a5:d5:98:2b:3f:5f:7b:79:35:bc:39:68:bb:b0:
58:4c:b6:4a:09:10:a8:f9:2b:a0:5a:01:df:e0:ff:
13:02:27:3a:96:8c:61:ef:24:12:a3:4a:54:3a:68:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:75:63:61:2A:B5:3C:3F:19:5A:03:51:94:E6:69:46:B0:84:C0
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:14:38:2b:bf:6e:26:76:12:1b:9f:db:c1:e2:98:68:9f:35:
aa:04:07:c8:1e:93:fb:59:fe:7d:9f:f0:53:47:3a:a0:19:13:
1d:bf:2d:8d:15:c1:b7:55:59:60:0a:0c:fe:d5:47:32:3b:94:
e0:5b:58:e6:39:94:e1:25:63:44:65:f5:d5:11:22:0b:c9:f3:
5f:60:fd:f0:30:33:94:a5:b2:4d:13:3d:29:c1:5b:9e:f1:21:
3a:ae:e0:82:fa:05:01:ab:3c:93:af:0a:7f:a9:9a:6f:c7:e8:
b2:65:d1:aa:56:af:ab:0e:92:95:e8:ed:28:51:59:78:07:c8:
e3:2d:11:0a:e0:4a:72:66:cd:a4:7e:a5:e2:4c:ca:d9:fb:93:
f0:61:53:4f:0d:2f:24:35:e7:fe:36:15:58:51:ef:b1:49:9a:
66:c7:d0:15:41:e5:8c:7a:cb:6f:90:2c:57:8c:c9:4b:f0:48:
c1:46:4c:e3:55:9d:85:88:3f:2b:0e:6c:8a:1e:62:4e:53:cd:
14:71:5d:af:c4:42:8a:3d:b0:b5:eb:85:69:db:c4:90:31:90:
ac:21:0c:8f:5b:e5:95:d1:ec:ec:45:16:f2:d7:49:52:d0:64:
b1:1f:6d:4d:eb:94:bc:8b:e7:96:d8:07:67:2f:69:0f:33:6b:
f6:c6:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:07:13 2026 by rpki-client