Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
File: dU79gbTukUeAKK41pBT0apG9L-4.mft (raw, json)
Hash identifier: w4+H2Hckt9OCwzepDm8n7TNmSp8WwJgHqVz5j/EtW0w=
Subject key identifier: C4:8D:01:BA:7A:9F:AE:A8:B7:9D:AB:FD:0E:20:17:35:81:1E:51:B1
Authority key identifier: 75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
Certificate issuer: /CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Certificate serial: 01A16A237FE9510085AB31C6DF101DD5C485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
Manifest number: D3
Signing time: Fri 23 Oct 2026 19:01:13 +0000
Manifest this update: Fri 23 Oct 2026 19:01:13 +0000
Manifest next update: Sat 24 Oct 2026 19:01:13 +0000
Files and hashes: 1: OyjkYccu_CLKgxrEV7g_bFW-ous.roa (hash: /S7gHpDK0DxMjnQ0e8Y2GVl3yAnFF9lshq6UILw6034=)
2: dU79gbTukUeAKK41pBT0apG9L-4.crl (hash: rgnmed2fnz0+FOfGFT6GFtdKHYP4LefZ5tJ/bXNldyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:23:7f:e9:51:00:85:ab:31:c6:df:10:1d:d5:c4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Validity
Not Before: Oct 23 19:01:13 2026 GMT
Not After : Oct 24 19:01:13 2026 GMT
Subject: CN=c48d01ba7a9faea8b79dabfd0e201735811e51b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:4d:da:62:55:ff:e7:93:51:30:45:1e:83:
47:8a:5f:ab:a7:e9:f5:7c:b9:b7:0e:6c:1c:68:d6:
8b:65:30:28:03:4e:15:2e:e9:d0:da:c2:b5:34:84:
5a:e7:b1:de:f0:b3:64:ad:9c:da:30:43:8b:3e:c5:
35:59:8a:11:ad:92:4e:f0:f5:24:42:9b:bc:ab:cd:
59:7f:af:cf:cf:69:1b:87:e2:36:51:fa:96:6e:da:
ac:2c:2e:55:65:e2:c9:f9:31:95:1c:eb:04:38:05:
af:07:44:43:dd:cd:59:ac:7d:08:c2:37:9e:0f:09:
db:48:3f:74:a9:3e:03:1b:92:77:d8:5b:86:dd:98:
90:38:cf:1c:33:d7:0d:fd:23:b9:3f:a5:34:7c:5a:
40:ce:25:a5:2a:4d:85:ff:2a:25:29:3b:ce:e6:b5:
89:e2:cb:e4:20:f3:15:2f:0f:c9:25:34:80:03:93:
8a:0c:35:68:57:97:05:67:74:77:21:98:5c:e4:cd:
ef:b3:62:30:15:a5:33:00:0d:ce:78:07:69:2f:df:
20:59:97:63:84:d6:7f:dc:2c:3b:3d:d3:1c:f9:d5:
25:b7:7a:f3:1d:3a:96:91:f5:6a:83:6d:1c:08:48:
a5:5f:82:93:ba:31:8e:c3:06:29:86:37:60:aa:7f:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:01:BA:7A:9F:AE:A8:B7:9D:AB:FD:0E:20:17:35:81:1E:51:B1
X509v3 Authority Key Identifier:
keyid:75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:3b:ca:81:97:cb:2e:63:23:e4:dc:50:18:64:0d:92:11:
26:2f:ab:c2:e9:b0:34:d2:6d:05:65:fb:76:b6:1c:24:99:e3:
96:38:9e:88:1d:42:1f:bd:7e:24:53:8e:8b:a0:4f:87:c0:fb:
18:70:51:da:23:c6:cc:9f:4b:a6:60:fd:6a:f0:d7:cf:9a:a6:
bf:e0:6e:40:9f:24:6f:9f:b7:81:d1:48:95:ea:2d:cd:22:40:
b9:db:7a:e6:68:e0:76:9d:62:aa:9d:f0:5a:e4:65:ee:6d:bf:
2d:c8:df:a2:88:b6:1a:f4:af:7f:26:2d:46:1f:c3:86:7e:9b:
f7:ef:b8:6c:65:f0:4c:b0:f9:5b:8a:a6:a7:ea:f8:86:55:51:
31:43:75:72:a5:92:6c:a8:05:be:69:c4:f2:09:4d:dc:0b:ac:
40:b5:39:2b:47:fc:12:52:f1:95:ff:c1:0e:4c:ea:ac:b1:61:
13:80:09:65:74:f0:26:2d:33:f3:00:1e:f2:2e:26:34:9b:97:
28:09:a2:ed:38:dd:9b:4a:e2:15:3c:81:f3:3d:f4:d2:3f:e8:
8b:ac:89:23:bc:44:eb:ca:cc:b6:fb:62:4a:09:fb:ad:57:6e:
7a:11:fb:13:1b:18:60:65:58:8f:42:30:34:b2:5a:bc:5e:6d:
da:7e:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:49 2026 by rpki-client