Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: Dq8rv52y7s3Tg7/BuAHxMt/7jO0a6YL6RKWnilSvo0E=
Subject key identifier: 84:66:6B:28:12:44:FC:31:93:FC:93:59:54:4E:B3:59:E2:C3:7F:41
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 01A18B9C81E4DDCF72FFDB945207225388F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 1A5F
Signing time: Fri 30 Oct 2026 07:00:52 +0000
Manifest this update: Fri 30 Oct 2026 07:00:52 +0000
Manifest next update: Sat 31 Oct 2026 07:00:52 +0000
Files and hashes: 1: URJzBUsEISSG4FG2wK4plKVqkbA.roa (hash: d/U8BrAHZytlsN3OdFaMGxSnxJz7rd2AErfm0Q8DI8Y=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: 1xGSiGaKdpE79fI3UZpVjFXrj3fJeBQsftyCMqv/g98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:81:e4:dd:cf:72:ff:db:94:52:07:22:53:88:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Oct 30 07:00:52 2026 GMT
Not After : Oct 31 07:00:52 2026 GMT
Subject: CN=84666b281244fc3193fc9359544eb359e2c37f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:97:f1:7e:2f:a7:ab:46:a2:91:7f:29:2a:
75:26:33:4e:bb:99:02:2e:83:7e:d8:98:c1:6c:da:
bd:fc:fe:7a:f7:b4:84:67:89:10:25:61:60:9e:f0:
75:ba:1a:1b:38:8c:d9:9c:b5:09:38:9a:5c:f4:33:
be:62:89:ef:6a:9a:0e:11:34:6c:f3:07:46:93:17:
24:7f:e6:b5:54:c1:83:a3:7b:2a:6f:be:d5:d6:ed:
30:4e:4a:29:c5:a6:9f:57:a3:0e:81:0b:eb:98:f3:
68:55:6b:2c:a8:28:37:5f:57:f6:6d:68:d8:5a:57:
e0:3e:67:5f:53:c6:ba:8e:76:4d:1c:cb:d5:43:8d:
70:d6:43:3a:1d:b4:13:19:7b:49:96:10:51:11:94:
58:a9:81:87:1d:c9:a1:fc:ca:31:61:3d:7d:68:85:
0b:a7:78:84:de:91:f8:51:89:2e:2e:58:98:03:f5:
6c:c1:5e:bf:d9:a6:6a:57:0c:c4:11:ab:a3:76:6c:
28:20:64:57:4b:da:07:17:e6:72:9f:b4:e8:72:5b:
4c:c6:c1:4c:e4:53:10:13:36:8c:9f:4c:dc:69:b6:
d1:d9:c6:e9:60:95:78:68:9c:4a:2c:55:03:b0:dc:
74:98:33:76:3e:83:c8:15:bf:83:1f:09:20:7e:55:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:66:6B:28:12:44:FC:31:93:FC:93:59:54:4E:B3:59:E2:C3:7F:41
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:fd:e0:ac:18:64:57:cf:8a:c5:87:20:cb:1f:77:9f:99:
c7:71:ac:9d:01:a4:95:3d:87:4c:0d:73:8e:e5:86:3b:23:6e:
de:c6:c0:b0:17:b7:4a:35:36:7d:5b:f8:a4:65:2d:a6:0b:43:
59:97:04:8d:70:b0:b0:70:00:af:a5:13:a1:6e:3f:b6:b2:ab:
83:9c:59:e6:7c:fd:6f:93:a4:fd:dd:ff:6b:82:b3:03:49:4f:
ef:67:70:e0:cf:9b:1b:91:40:7d:96:30:c7:43:c1:28:64:5c:
32:f6:d8:3f:89:85:2f:cb:41:9b:93:8e:9b:d8:b0:07:6d:39:
9d:72:20:be:51:90:d3:b1:c5:ce:3d:a0:ce:5d:9e:9c:b9:b6:
8f:76:46:2a:39:34:70:8c:f3:f5:cb:64:e8:d1:88:1d:b5:42:
83:a3:ce:4c:db:05:2e:f1:b8:c1:3c:7e:9c:b4:7e:1f:74:f7:
34:0b:99:54:fd:83:3d:eb:73:c5:e3:c7:eb:ad:56:8c:e3:f9:
6f:f9:15:09:37:85:21:47:7a:6e:23:6f:01:cf:d5:b1:90:38:
a4:03:73:0a:73:18:69:02:c3:d8:a7:8f:fd:72:7a:c7:2a:6e:
61:57:59:be:1b:d3:3e:8c:5b:de:51:27:8e:5a:54:d4:f2:10:
3d:f2:bc:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGLnIHk3c9y/9uUUgciU4j3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZTA1ZTllZTU5NDc3ZTAxNTVmYzFlZGMwYTE4MzA3Mjk3
NjZlODgwHhcNMjYxMDMwMDcwMDUyWhcNMjYxMDMxMDcwMDUyWjAzMTEwLwYDVQQD
Eyg4NDY2NmIyODEyNDRmYzMxOTNmYzkzNTk1NDRlYjM1OWUyYzM3ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7eX8X4vp6tGopF/KSp1JjNOu5kC
LoN+2JjBbNq9/P5697SEZ4kQJWFgnvB1uhobOIzZnLUJOJpc9DO+YonvapoOETRs
8wdGkxckf+a1VMGDo3sqb77V1u0wTkopxaafV6MOgQvrmPNoVWssqCg3X1f2bWjY
WlfgPmdfU8a6jnZNHMvVQ41w1kM6HbQTGXtJlhBREZRYqYGHHcmh/MoxYT19aIUL
p3iE3pH4UYkuLliYA/VswV6/2aZqVwzEEaujdmwoIGRXS9oHF+Zyn7TocltMxsFM
5FMQEzaMn0zcabbR2cbpYJV4aJxKLFUDsNx0mDN2PoPIFb+DHwkgflWxoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRmaygSRPwxk/yTWVROs1niw39BMB8GA1UdIwQY
MBaAFHbgXp7llHfgFV/B7cChgwcpdm6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQt
YjUzM2Y0OTQxYWZlLzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQtYjUzM2Y0OTQxYWZl
LzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+H94KwY
ZFfPisWHIMsfd5+Zx3GsnQGklT2HTA1zjuWGOyNu3sbAsBe3SjU2fVv4pGUtpgtD
WZcEjXCwsHAAr6UToW4/trKrg5xZ5nz9b5Ok/d3/a4KzA0lP72dw4M+bG5FAfZYw
x0PBKGRcMvbYP4mFL8tBm5OOm9iwB205nXIgvlGQ07HFzj2gzl2enLm2j3ZGKjk0
cIzz9ctk6NGIHbVCg6POTNsFLvG4wTx+nLR+H3T3NAuZVP2DPetzxePH661WjOP5
b/kVCTeFIUd6biNvAc/VsZA4pANzCnMYaQLD2KeP/XJ6xypuYVdZvhvTPoxb3lEn
jlpU1PIQPfK8Mg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 11:16:28 2026 by rpki-client