Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: IEeI0IWO5zC9FU+ZvbT4yu+lDqm0JKIWd9cC1wIIUmM=
Subject key identifier: 62:37:1C:4B:B2:22:39:9F:9F:3D:DD:95:1A:E1:CD:98:A6:65:02:FA
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 01A08C443B7609342BF0219147864C50290C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 040E
Signing time: Thu 10 Sep 2026 17:01:16 +0000
Manifest this update: Thu 10 Sep 2026 17:01:16 +0000
Manifest next update: Fri 11 Sep 2026 17:01:16 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: lkWqFE2F4DoINWpqBeh3YcVMPUNA7OaK0xjvOFsPIPc=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:3b:76:09:34:2b:f0:21:91:47:86:4c:50:29:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Sep 10 17:01:16 2026 GMT
Not After : Sep 11 17:01:16 2026 GMT
Subject: CN=62371c4bb222399f9f3ddd951ae1cd98a66502fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:8b:98:70:83:d8:99:44:69:56:97:db:eb:
4d:49:ec:f8:5d:32:62:1b:c5:fa:9a:58:77:83:48:
96:5a:2a:b7:a2:5c:fe:b5:55:90:01:46:cf:24:e0:
4f:d5:33:bd:10:5a:64:16:cf:28:bf:ed:96:61:75:
e6:d4:08:40:a1:d8:3b:16:23:ac:c5:0d:56:b8:61:
2b:1b:8e:96:90:0c:56:30:b6:bd:c0:88:12:9a:9c:
47:b8:43:3f:f1:a4:64:2d:df:06:48:42:49:b8:7e:
da:7b:6d:c9:2b:88:e0:c0:78:d7:9a:42:01:18:82:
83:e8:7f:93:a5:98:1b:d2:b4:be:af:9d:61:8c:14:
72:5c:8f:25:79:0d:28:6c:ac:e1:2b:14:4b:74:8c:
9c:14:b9:de:30:c0:4b:12:3c:50:cd:94:6f:69:51:
4c:ce:42:03:dd:18:22:68:c1:78:fc:b9:70:2c:18:
df:3e:ce:00:ac:1c:0a:78:b2:d0:d6:51:65:88:03:
e0:5e:76:3a:b3:4f:7b:5b:e6:d4:eb:10:71:96:41:
1a:b4:12:3a:a5:0b:27:f0:bd:60:cc:1b:00:93:1a:
6b:eb:c9:a3:77:bb:40:d8:7a:3a:cc:62:12:cf:6b:
08:1f:b4:bd:7c:54:6d:bf:0c:17:de:6c:3a:9d:73:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:37:1C:4B:B2:22:39:9F:9F:3D:DD:95:1A:E1:CD:98:A6:65:02:FA
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c8:9e:62:16:d8:d9:df:46:69:39:ff:d1:2a:00:28:de:1f:
af:0d:25:09:c8:a3:6a:81:5e:42:59:12:42:b5:d3:63:f8:e4:
cb:2d:43:1c:24:b1:50:00:99:90:9e:65:d7:76:5f:e7:04:ac:
53:85:02:0b:ab:a1:ca:ba:5b:6e:7f:e1:82:bd:fc:ff:72:da:
86:db:9c:14:8f:72:f4:69:62:c7:61:95:da:be:0d:d4:64:35:
34:9e:80:c6:86:c5:15:16:3c:69:08:8b:82:bd:98:c5:d4:55:
bf:7b:4f:19:bb:06:13:37:da:16:8c:a2:91:05:fa:fe:c2:cf:
97:89:b1:c8:9e:25:34:b2:bd:b2:39:88:12:12:83:1e:aa:af:
b9:54:75:5c:47:ab:ab:ef:bf:87:22:25:1e:a0:8b:08:47:c3:
5b:3d:29:70:e4:66:ba:21:6d:20:18:38:4f:4d:2d:53:c6:4d:
62:5d:31:d1:6f:58:b9:3d:52:54:02:90:35:2f:58:c7:4d:ca:
3e:1a:3a:91:af:65:50:2b:83:8f:c8:79:06:8c:85:66:06:64:
8e:98:bc:5f:15:98:3f:22:92:90:10:76:00:6b:14:96:2f:b9:
a8:2c:5e:27:a7:b3:51:0f:39:03:fd:5c:30:59:d6:2e:15:16:
e6:15:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:49 2026 by rpki-client