Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
File: DUHQpubfLhjCVnMjaNbnaCiTExA.mft (raw, json)
Hash identifier: 81vXeZVu2OMCtwtklHC0gKoOLq8pycVOLa70E1St7Eg=
Subject key identifier: 43:5C:13:50:E1:0E:E6:59:73:39:62:BE:22:C2:65:6E:79:FE:69:BA
Authority key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
Certificate issuer: /CN=0d41d0a6e6df2e18c256732368d6e76828931310
Certificate serial: 01A13E261BA98BF5A39C153AA5104BE9DCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
Manifest number: 13EC
Signing time: Thu 15 Oct 2026 06:00:47 +0000
Manifest this update: Thu 15 Oct 2026 06:00:47 +0000
Manifest next update: Fri 16 Oct 2026 06:00:47 +0000
Files and hashes: 1: DUHQpubfLhjCVnMjaNbnaCiTExA.crl (hash: NBxQITItDAbtmrfRDLI8Edq1BzdXGWXRLWOYnvKCpW4=)
2: gQCK6BeO-j5lVpUt90LH641D-Do.roa (hash: IdvQ6sUh6mIJW4ddDEmtmONm3UtG6O5w53GtVLTmX/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:1b:a9:8b:f5:a3:9c:15:3a:a5:10:4b:e9:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d41d0a6e6df2e18c256732368d6e76828931310
Validity
Not Before: Oct 15 06:00:47 2026 GMT
Not After : Oct 16 06:00:47 2026 GMT
Subject: CN=435c1350e10ee659733962be22c2656e79fe69ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:a5:22:fa:8b:f8:fc:2c:f0:4b:73:68:19:
6c:a4:e9:d5:ab:fd:29:31:15:b0:35:a5:87:16:c4:
a2:86:c7:f1:64:2b:61:09:0e:72:5a:a8:17:50:a4:
4a:4d:5b:7f:72:8a:ad:89:b6:ab:1a:c7:bd:8f:da:
48:1f:40:15:c5:a1:fb:60:77:53:aa:1e:cc:cf:01:
33:67:6b:cc:8b:14:0e:6f:bc:1d:83:b3:be:e4:1e:
b4:e5:51:a0:25:37:62:e3:ef:d6:ea:54:53:b6:c2:
93:e4:d3:9b:e0:4e:98:52:fa:04:5e:ba:21:ce:5b:
29:18:9a:1f:ec:6c:3a:cd:fb:18:4a:2c:ee:e0:70:
b9:4c:9a:37:7a:5f:1a:72:87:17:51:e8:b2:e4:11:
70:87:e7:47:2f:92:9a:86:fb:53:ba:d1:e1:cb:3b:
f6:7b:dc:37:e4:39:3f:bf:5d:d2:b3:8e:05:37:1e:
4b:17:46:8f:56:9b:65:66:5e:cc:fe:5b:c5:69:c4:
a4:6e:e1:d1:bb:db:2e:8c:c9:b2:80:48:e4:32:9b:
ec:35:f9:42:5e:e4:45:b5:4b:3f:7e:e5:cc:d9:d5:
a0:ee:0c:a0:9a:66:ff:26:86:fa:3c:94:e9:1b:9c:
96:3b:bf:88:68:9a:d8:b1:2e:33:05:8a:ff:e9:b0:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:13:50:E1:0E:E6:59:73:39:62:BE:22:C2:65:6E:79:FE:69:BA
X509v3 Authority Key Identifier:
keyid:0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:fd:db:64:16:84:d8:e7:16:1b:71:50:d0:fa:36:24:1e:
b2:83:21:a8:20:d5:a8:69:df:0b:2b:3c:40:fb:cf:b8:cb:d4:
79:4f:24:1a:bb:2f:04:98:25:05:9d:b0:63:6e:e1:ae:5f:ee:
00:23:a9:fa:cf:a5:99:6e:43:0f:96:0b:9e:97:ba:bd:e0:90:
51:a5:60:dd:9d:be:21:f9:2e:9d:2a:13:fd:4b:e4:16:c0:37:
95:0f:d4:39:55:00:1a:ad:c5:99:7e:d0:24:ce:5b:7d:61:44:
be:47:40:d1:c1:9b:27:9f:11:6e:68:0e:2b:0c:8c:dc:f6:2c:
97:5a:7c:68:bb:78:61:41:30:9b:4f:8c:bf:5a:f9:26:9b:70:
36:dc:bc:01:dc:b7:03:95:3b:d9:72:9b:70:55:d1:ca:67:03:
77:6f:61:d0:09:a5:9b:28:13:de:ee:3e:70:13:63:ff:fb:24:
1e:6e:bd:b0:17:21:d1:3b:68:14:13:6f:cf:ed:e6:62:5b:a6:
e8:92:f8:59:38:4b:94:f7:be:d9:2f:ef:d0:71:ff:69:8f:68:
65:26:51:e3:f0:ba:2b:c7:d0:5c:cb:dd:ce:b4:24:be:1b:8c:
bb:03:27:67:75:2b:9e:f5:89:6f:91:5e:d0:3e:9e:70:4b:0e:
ed:a6:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:33 2026 by rpki-client