Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
File: DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft (raw, json)
Hash identifier: X/qq71ffAGdIj53CTFmjY08iwQPVduqF20L82BA6bms=
Subject key identifier: 12:A0:AD:2B:8F:4A:F2:07:2B:47:A8:44:2E:E0:BE:97:52:31:1F:FD
Authority key identifier: 0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D
Certificate issuer: /CN=0d4531777febf988e5305a2d299f9c548e8d501d
Certificate serial: 019D389C5BE6C2ECE5C6CAC69349463D6B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
Manifest number: CD
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl (hash: fv4SLD81PHxkg/f2c4UrPKA+QXCkFeJLXmrs3N+wZu4=)
2: U6voxKN65jQH_hLBK3btXjUs3XA.roa (hash: Q/KwQqI2oZ064L8UakL1/UvH01OXvIiI/6cQL59DWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5b:e6:c2:ec:e5:c6:ca:c6:93:49:46:3d:6b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4531777febf988e5305a2d299f9c548e8d501d
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=12a0ad2b8f4af2072b47a8442ee0be9752311ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:23:18:f0:f8:bd:b7:98:98:3d:2e:bf:88:
60:3a:76:cf:a6:1a:f6:70:0b:0a:90:b6:49:3a:77:
a4:03:12:de:c8:22:5a:4c:11:6c:f3:42:78:86:5d:
20:b6:e3:1c:e9:f9:96:8b:82:2e:0a:c3:ef:7f:18:
53:11:b3:5f:0f:cd:d9:7e:98:cd:b8:05:6c:61:52:
5a:f8:b3:ad:a8:12:85:8d:1b:f8:49:0a:d3:6d:e9:
95:76:9c:f6:cc:10:93:bf:9d:c8:93:77:c0:33:0a:
6d:36:27:79:a7:6e:0e:b2:bb:8c:7d:48:45:f5:b9:
0e:8b:17:1d:c7:40:0f:18:e8:ca:45:b4:e7:ed:7c:
e8:fe:4d:e3:79:f5:22:d9:b9:55:79:d1:88:5f:19:
56:2f:d2:eb:80:db:c3:98:3d:91:01:1c:64:de:62:
b5:b6:fc:98:a6:a5:dd:25:35:0a:2f:99:84:f4:9e:
b5:a4:19:19:d7:c8:f4:ae:8b:5c:f9:d2:a3:ff:c6:
fc:d4:68:91:ed:4e:1d:f3:46:0d:61:ba:64:1f:23:
99:1e:93:bc:ac:ec:b3:8c:19:22:c0:d5:b5:6b:17:
14:19:db:0a:3c:d9:21:12:55:8e:3a:9e:32:f7:56:
f2:51:7e:5d:95:22:90:79:40:f6:83:16:12:bc:8d:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:AD:2B:8F:4A:F2:07:2B:47:A8:44:2E:E0:BE:97:52:31:1F:FD
X509v3 Authority Key Identifier:
keyid:0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:82:ba:92:cf:dd:e4:5b:61:92:f3:6b:8e:aa:6c:f9:2e:bf:
50:ba:5e:07:09:34:f4:40:f3:c5:d3:de:f0:f9:26:e5:75:b3:
c4:8a:d5:a8:24:df:72:ca:67:44:48:43:78:f2:72:9a:b2:4f:
4f:5d:16:51:ff:2e:d3:48:d0:73:56:df:cc:b9:24:20:da:40:
3c:d2:dc:5c:1b:a6:4f:1c:91:a2:39:ce:0c:01:8f:96:0e:99:
68:c7:8a:f0:17:ad:bd:d3:9d:a1:3b:92:ff:9f:13:26:4c:34:
97:1a:67:14:77:cb:c2:ef:bd:d6:6b:d9:14:b5:82:50:dd:4a:
b5:13:6d:59:41:2a:e0:e7:d2:0d:bf:4f:70:e7:24:2f:62:c5:
88:21:67:27:3c:5a:f1:4b:8b:21:68:0d:32:5b:5e:39:7a:1d:
1d:46:f3:f9:69:5e:14:e2:14:c5:1b:dc:ce:70:df:dd:65:2e:
af:94:25:2d:84:9d:bb:fe:72:7e:d9:f1:7b:ac:a5:33:06:7f:
ae:c2:3d:00:d9:da:9c:cb:06:6e:bf:93:c7:9f:9d:78:7b:58:
e4:3e:4f:b9:f8:34:df:64:00:44:76:fd:31:bf:03:bd:ce:62:
2f:2a:34:5c:be:1f:32:24:a2:7c:f0:c7:cb:a1:7b:28:da:57:
ca:c5:c3:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFvmwuzlxsrGk0lGPWsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNDUzMTc3N2ZlYmY5ODhlNTMwNWEyZDI5OWY5YzU0OGU4
ZDUwMWQwHhcNMjYwMzI5MDgwMTA0WhcNMjYwMzMwMDgwMTA0WjAzMTEwLwYDVQQD
EygxMmEwYWQyYjhmNGFmMjA3MmI0N2E4NDQyZWUwYmU5NzUyMzExZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqojGPD4vbeYmD0uv4hgOnbPphr2
cAsKkLZJOnekAxLeyCJaTBFs80J4hl0gtuMc6fmWi4IuCsPvfxhTEbNfD83ZfpjN
uAVsYVJa+LOtqBKFjRv4SQrTbemVdpz2zBCTv53Ik3fAMwptNid5p24OsruMfUhF
9bkOixcdx0APGOjKRbTn7Xzo/k3jefUi2blVedGIXxlWL9LrgNvDmD2RARxk3mK1
tvyYpqXdJTUKL5mE9J61pBkZ18j0rotc+dKj/8b81GiR7U4d80YNYbpkHyOZHpO8
rOyzjBkiwNW1axcUGdsKPNkhElWOOp4y91byUX5dlSKQeUD2gxYSvI3gGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKgrSuPSvIHK0eoRC7gvpdSMR/9MB8GA1UdIwQY
MBaAFA1FMXd/6/mI5TBaLSmfnFSOjVAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVVeGQzX3ItWWpsTUZvdEtaLWNWSTZOVUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTQwZDUtNDBlZS00MTA4LTliMTIt
YjNlZjJhMmY2MWI0LzEvRFVVeGQzX3ItWWpsTUZvdEtaLWNWSTZOVUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hMTQwZDUtNDBlZS00MTA4LTliMTItYjNlZjJhMmY2MWI0
LzEvRFVVeGQzX3ItWWpsTUZvdEtaLWNWSTZOVUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIK6ks/d
5FthkvNrjqps+S6/ULpeBwk09EDzxdPe8Pkm5XWzxIrVqCTfcspnREhDePJymrJP
T10WUf8u00jQc1bfzLkkINpAPNLcXBumTxyRojnODAGPlg6ZaMeK8BetvdOdoTuS
/58TJkw0lxpnFHfLwu+91mvZFLWCUN1KtRNtWUEq4OfSDb9PcOckL2LFiCFnJzxa
8UuLIWgNMlteOXodHUbz+WleFOIUxRvcznDf3WUur5QlLYSdu/5yftnxe6ylMwZ/
rsI9ANnanMsGbr+Tx5+deHtY5D5Pufg032QARHb9Mb8Dvc5iLyo0XL4fMiSifPDH
y6F7KNpXysXDMw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:27 2026 by rpki-client