Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: HxdV+5BHCXDgmFvFQ1Oug3h8i7p9RhbYKm3Z7w76SPw=
Subject key identifier: 25:85:A2:D3:EC:7C:6A:E2:E9:CA:3A:08:49:A9:1C:B7:9B:B6:4E:75
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 019D39AE5D90935B99A2F50703EC0C49D68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:00:21 +0000
Manifest this update: Sun 29 Mar 2026 13:00:21 +0000
Manifest next update: Mon 30 Mar 2026 13:00:21 +0000
Files and hashes: 1: HuM-fqgyJipWVuJxhHWn42tWfGs.roa (hash: U6kHpEw2y7t9pxRNfk/+X/Y6S7JlFdwGGwL7w7s/5Yo=)
2: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: 417oXqcVk3T+jZijyWk63csTbQNSTMqvEG87iWx/RX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5d:90:93:5b:99:a2:f5:07:03:ec:0c:49:d6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Mar 29 13:00:21 2026 GMT
Not After : Mar 30 13:00:21 2026 GMT
Subject: CN=2585a2d3ec7c6ae2e9ca3a0849a91cb79bb64e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:f1:a2:ef:cf:64:16:b0:bb:f8:9a:43:97:
28:16:32:d8:49:cf:d7:8e:63:f9:ed:71:db:b7:22:
38:a4:90:61:f4:0b:4a:be:98:37:b6:d4:d6:39:ae:
d1:2b:09:2a:37:2d:63:95:cb:bc:f8:5b:75:e3:89:
d0:db:5c:78:ba:45:23:ed:45:07:2e:29:6a:8b:5f:
6b:c0:7e:d8:45:20:3a:68:11:5e:b7:7c:93:57:f1:
ed:dd:35:9c:02:3f:f2:c2:6f:d1:f5:2c:fb:69:0d:
70:b4:02:f3:71:39:a8:94:09:e7:eb:61:c6:a5:45:
81:c0:d7:e4:78:bd:d5:b2:fe:7b:2e:bc:87:29:09:
11:e0:15:18:4c:5c:9e:88:a4:c6:94:5c:7b:d6:10:
fa:38:3f:bb:c9:61:6d:24:27:9a:99:2c:d9:b0:77:
01:57:c3:d6:b6:72:e1:ac:4c:43:94:dd:b5:b7:37:
eb:5c:d3:65:d4:6a:8a:58:c7:c0:39:1f:53:d7:d1:
8c:5e:58:58:db:0c:3d:3e:fd:8f:0a:65:b1:bd:fa:
11:9c:81:33:78:12:19:0f:a1:7c:f8:2e:59:5e:31:
2a:39:6d:c5:b9:7b:6d:3e:82:4f:4c:d6:ce:2d:74:
01:87:66:25:7e:53:e9:7b:f5:3e:46:5a:8e:13:85:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:A2:D3:EC:7C:6A:E2:E9:CA:3A:08:49:A9:1C:B7:9B:B6:4E:75
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f2:61:7d:17:d4:11:2b:5d:fc:ce:db:3b:cc:68:4a:06:0b:
cf:e2:1c:08:28:f2:cb:c5:3a:70:92:4b:db:2b:62:73:e9:0e:
fd:9c:b2:00:af:33:c9:1f:24:06:c1:5d:ba:7b:4a:a5:a7:0a:
fb:32:a2:8e:56:16:45:f5:fe:ae:a1:15:1b:66:26:e7:15:c8:
57:d9:01:5a:f7:9f:aa:f9:a7:9e:7e:9f:6b:53:03:f0:4d:35:
58:d7:3b:90:f1:96:b4:fa:81:09:b3:2c:32:b2:bc:ed:97:95:
49:dd:2a:d2:14:2f:9a:62:a4:a7:8e:e8:28:e5:64:5c:10:1f:
7d:0e:a8:2f:20:4c:84:46:c1:d0:f6:ad:a3:1c:a2:ab:38:47:
a7:37:c8:e2:af:5f:62:a9:10:26:71:c1:d6:e9:9b:9a:3f:89:
df:38:66:17:6d:5a:1a:d7:9e:54:fa:bf:2d:06:4c:fe:48:be:
38:22:ba:fc:1a:cc:36:d9:93:44:8d:20:4a:8b:16:90:88:f2:
9e:03:ec:2a:f2:6e:aa:1f:16:b2:57:e7:3d:0d:ca:43:35:8e:
af:70:8a:03:44:57:10:c3:eb:c3:6b:89:bb:26:0d:9e:0d:eb:
5e:0d:15:c8:f9:ee:9f:a7:f7:8d:cc:47:2c:73:f8:ba:23:51:
8d:3f:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:54 2026 by rpki-client