Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
File: DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft (raw, json)
Hash identifier: sUZ/drZGWcokEBX0yYSzDtCXeoWf+lUCRAwXCkIOI8U=
Subject key identifier: C5:B4:A5:B4:A2:DC:AC:57:E7:78:8B:A8:E6:FC:49:A2:7D:3E:39:E4
Authority key identifier: 0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
Certificate issuer: /CN=0ee592621d18309312c014c1122d94a4211fa82b
Certificate serial: 019F826812F7CCE9832A568F2681E44ECD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
Manifest number: DF
Signing time: Tue 21 Jul 2026 02:01:26 +0000
Manifest this update: Tue 21 Jul 2026 02:01:26 +0000
Manifest next update: Wed 22 Jul 2026 02:01:26 +0000
Files and hashes: 1: 6OjM-NFIW04K7l_eQoGJACK0VDI.roa (hash: TkZ3uhaW+2MZizAuYJdx0Vwq0vHR9nefDhvzxZzuG3I=)
2: DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl (hash: uKiI18ZJCa9zXH8cLhMaa1PdkSSSJv5c2gHLRmbbqUw=)
3: KSUNvWYBdy4YdVAnXzSA_dxlq3c.roa (hash: r+AYd5x4wloqbdcvcL3nVXv/9WOqz9qSDvAaU5o0QB0=)
4: xCTkLKibXwn7kJuskGFKNRORLDI.roa (hash: HzbQo8dOuYm/UXqOkIfkXlPnBODZYHsqopp3VQ9t2D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:68:12:f7:cc:e9:83:2a:56:8f:26:81:e4:4e:cd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee592621d18309312c014c1122d94a4211fa82b
Validity
Not Before: Jul 21 02:01:26 2026 GMT
Not After : Jul 22 02:01:26 2026 GMT
Subject: CN=c5b4a5b4a2dcac57e7788ba8e6fc49a27d3e39e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:70:ba:8b:93:bb:e5:ea:20:69:de:90:70:
34:8c:33:81:0e:3d:83:c3:57:06:ef:cc:16:f3:b9:
da:57:d2:27:e8:7c:80:97:e6:fc:22:16:75:2d:1c:
46:bf:3f:7a:16:39:6b:01:b4:0d:61:0c:82:16:0d:
34:9f:ef:27:b2:b6:bd:f9:7d:72:25:9e:69:57:1b:
c1:45:97:87:64:9f:ab:35:6d:f2:2f:6e:c4:0a:f7:
db:94:5d:b1:e8:76:3e:29:27:59:1e:03:31:22:cd:
14:83:16:d1:fd:22:83:df:7e:77:ae:32:48:2a:c9:
f0:b5:df:a1:c6:09:51:85:51:2d:b6:a4:22:64:81:
9c:13:2d:9f:7d:72:f5:ef:7b:67:1c:15:66:aa:30:
5a:5f:40:ad:9a:3e:75:a6:67:9a:88:98:e0:55:2a:
25:d9:99:e8:f4:00:b7:b4:e1:4f:0a:48:ba:7d:b1:
ed:b9:77:ed:3c:1a:32:ff:b1:8f:1f:1e:d2:ee:fb:
a8:58:af:8c:23:f3:35:c8:76:c7:b6:51:bb:9f:c9:
af:d2:b0:a0:b3:aa:3e:82:ba:46:6f:f9:a1:36:ab:
38:cc:56:42:72:27:37:d7:71:b6:3b:23:21:c0:46:
ad:6c:94:cb:d8:53:55:33:f8:8d:86:51:80:0f:77:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B4:A5:B4:A2:DC:AC:57:E7:78:8B:A8:E6:FC:49:A2:7D:3E:39:E4
X509v3 Authority Key Identifier:
keyid:0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fd:bd:4c:e1:b1:ca:53:14:f7:4c:e9:df:c6:f4:ae:06:7b:
0e:8c:ca:68:c8:13:f2:ee:e0:a5:2c:bc:ff:46:ab:ce:b4:a2:
3f:1f:8d:fe:35:17:b9:cb:f0:1b:18:fe:e6:8d:61:66:03:51:
49:6b:de:61:1f:4f:0c:bd:43:56:0b:a5:16:ac:bb:56:92:7c:
aa:db:2e:70:34:3b:59:28:bc:17:c4:69:c3:3f:b8:f6:01:68:
75:ae:fe:94:d3:62:3a:28:af:ce:d2:0f:fd:c5:5c:f6:85:29:
4d:b1:11:c2:38:a4:6f:24:06:87:c8:c6:7c:18:97:7b:16:d0:
90:2d:2a:e1:5f:9a:ff:b9:86:70:30:ac:8f:55:6e:13:8e:9a:
a7:8e:be:58:1b:30:95:3e:c2:a2:55:eb:d8:55:0d:b4:69:5e:
f7:7b:9e:52:7e:c6:f0:dc:08:74:24:f4:97:0e:fd:17:d5:6a:
e1:08:56:a5:4e:dd:6f:b3:23:a9:7d:54:db:bc:30:7d:26:a7:
a2:05:df:60:5c:ad:68:44:da:bd:53:b9:3f:7d:36:b4:05:0e:
84:b3:56:54:61:29:57:83:6c:8c:ce:20:a5:18:f7:28:90:14:
94:f0:05:4e:17:cc:28:bf:f7:69:4d:48:d2:07:f4:dd:75:f8:
b3:9a:5a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CaBL3zOmDKlaPJoHkTs0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTU5MjYyMWQxODMwOTMxMmMwMTRjMTEyMmQ5NGE0MjEx
ZmE4MmIwHhcNMjYwNzIxMDIwMTI2WhcNMjYwNzIyMDIwMTI2WjAzMTEwLwYDVQQD
EyhjNWI0YTViNGEyZGNhYzU3ZTc3ODhiYThlNmZjNDlhMjdkM2UzOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeBwuouTu+XqIGnekHA0jDOBDj2D
w1cG78wW87naV9In6HyAl+b8IhZ1LRxGvz96FjlrAbQNYQyCFg00n+8nsra9+X1y
JZ5pVxvBRZeHZJ+rNW3yL27ECvfblF2x6HY+KSdZHgMxIs0UgxbR/SKD3353rjJI
Ksnwtd+hxglRhVEttqQiZIGcEy2ffXL173tnHBVmqjBaX0Ctmj51pmeaiJjgVSol
2Zno9AC3tOFPCki6fbHtuXftPBoy/7GPHx7S7vuoWK+MI/M1yHbHtlG7n8mv0rCg
s6o+grpGb/mhNqs4zFZCcic313G2OyMhwEatbJTL2FNVM/iNhlGAD3eK3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW0pbSi3KxX53iLqOb8SaJ9PjnkMB8GA1UdIwQY
MBaAFA7lkmIdGDCTEsAUwRItlKQhH6grMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mOTQyYTEtYzAwNC00NDg0LWJjMWQt
NmI4NTgyMDliNWVlLzEvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mOTQyYTEtYzAwNC00NDg0LWJjMWQtNmI4NTgyMDliNWVl
LzEvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP29TOGx
ylMU90zp38b0rgZ7DozKaMgT8u7gpSy8/0arzrSiPx+N/jUXucvwGxj+5o1hZgNR
SWveYR9PDL1DVgulFqy7VpJ8qtsucDQ7WSi8F8Rpwz+49gFoda7+lNNiOiivztIP
/cVc9oUpTbERwjikbyQGh8jGfBiXexbQkC0q4V+a/7mGcDCsj1VuE46ap46+WBsw
lT7ColXr2FUNtGle93ueUn7G8NwIdCT0lw79F9Vq4QhWpU7db7MjqX1U27wwfSan
ogXfYFytaETavVO5P302tAUOhLNWVGEpV4NsjM4gpRj3KJAUlPAFThfMKL/3aU1I
0gf03XX4s5paSw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:50:55 2026 by rpki-client