Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: 6KnFXu6CBpuFudQxyVPQ7lDAk27T9NzP05nFcfRVoM4=
Subject key identifier: 4F:05:C0:FC:96:77:AF:89:1F:CD:0F:42:4D:76:F4:85:E0:FB:4F:7E
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 019D389C2DBED548489E2678A1F84F55AB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 0255
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: mmjOQMxUkV/XPEd09kr74rZzzES105u0QTCIT8j9C0Y=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2d:be:d5:48:48:9e:26:78:a1:f8:4f:55:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=4f05c0fc9677af891fcd0f424d76f485e0fb4f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:62:f5:2f:23:80:0b:31:53:ae:c2:7c:19:
1e:26:db:43:96:8b:42:d5:70:90:7a:fb:a8:d9:4f:
f5:68:6a:f8:5c:81:95:e6:53:b1:2c:8f:5f:18:c2:
9e:a9:b5:9c:16:e3:3b:05:df:f7:ed:04:f5:a0:16:
6f:ea:bc:c4:aa:4f:af:95:64:00:b6:a7:c8:bc:6d:
de:e9:12:4b:0f:fe:4f:e8:49:2b:8b:4d:6d:08:df:
fe:3c:1e:ce:ae:5b:15:74:94:89:aa:a8:75:6c:29:
9d:0b:80:23:b9:f5:b3:fc:41:c5:6b:d1:cb:97:c1:
0e:d5:85:95:16:d8:b2:8c:93:bd:a6:30:0c:20:d8:
8a:20:38:28:3f:37:cc:1d:5c:34:05:60:3f:05:59:
70:53:6c:94:e5:c8:ff:2a:5d:cc:3b:a2:f8:78:19:
0b:72:9a:6f:96:f6:e6:6e:91:4d:da:e0:47:08:1f:
6f:85:ef:fe:58:da:db:5e:cf:ef:bf:1b:11:b6:92:
0b:74:32:15:8c:2b:be:56:82:e7:3d:8e:6d:ae:85:
6d:3a:87:dd:80:26:13:40:fe:38:32:c1:64:9f:81:
cc:88:4c:8a:a4:00:94:e1:b3:f0:9f:d5:f3:48:bc:
bf:ee:1a:66:17:16:bd:ce:f1:1a:f6:34:43:c6:64:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:05:C0:FC:96:77:AF:89:1F:CD:0F:42:4D:76:F4:85:E0:FB:4F:7E
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:42:4f:54:35:70:d9:26:92:ad:40:57:7d:29:ee:8f:05:05:
1f:9a:9a:a6:3b:ae:f9:e4:be:e0:26:a9:85:f1:51:7c:7b:4c:
0d:bb:ae:cd:c4:71:99:e7:0c:ca:89:be:9b:0b:5f:16:9f:82:
1a:88:cb:80:51:7c:d7:c1:50:4d:9f:bd:65:eb:00:64:69:ba:
19:e3:1a:37:24:47:f8:d9:b6:02:c8:13:c1:3a:b4:bd:91:00:
6e:4b:54:a8:f5:86:7b:bf:21:7b:db:ad:c5:38:ca:42:fb:52:
42:56:5d:77:97:56:87:80:0b:cf:eb:32:04:d9:ad:84:1f:31:
2d:3b:47:d8:bc:50:00:37:83:1a:43:e6:c2:b6:95:15:cf:3d:
2e:a3:57:8a:22:b8:be:1a:3b:d5:57:c2:00:82:76:06:d9:d4:
8a:27:2f:e7:c9:5a:75:ef:fa:eb:46:f9:ee:ea:95:d2:7a:af:
ac:38:0a:51:0a:45:75:71:d6:98:07:43:20:d2:01:d8:3e:b0:
2a:70:d1:b7:6a:04:96:a2:0f:84:a2:ae:e6:00:a9:db:f1:35:
99:72:38:5b:cf:ba:4c:e7:4d:1f:b8:a3:f7:b4:39:9e:ca:ec:
f0:27:f9:55:62:19:8c:25:c2:eb:bc:f3:01:44:55:3a:34:73:
52:5e:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:52 2026 by rpki-client