Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: Ht0gwAXEM56hVvKjr6ZO8M/zp1MFQG6T9R4NGEAyb1I=
Subject key identifier: 69:FB:87:A4:EA:1D:46:3E:31:2D:B3:FF:75:3F:6F:60:5B:06:46:B5
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 01A001A6257C14DBB0BC9E673669EB6241B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 19:01:00 +0000
Manifest this update: Fri 14 Aug 2026 19:01:00 +0000
Manifest next update: Sat 15 Aug 2026 19:01:00 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: x/lD4SxJj8HLHpi2l2S+xCY2TSOin+CvXirPKq09DtU=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:25:7c:14:db:b0:bc:9e:67:36:69:eb:62:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Aug 14 19:01:00 2026 GMT
Not After : Aug 15 19:01:00 2026 GMT
Subject: CN=69fb87a4ea1d463e312db3ff753f6f605b0646b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:aa:ab:78:92:b9:6d:36:92:2a:98:95:44:
2b:38:b6:b6:ee:d9:3d:8e:8c:5d:79:87:36:87:75:
45:75:15:13:1a:eb:da:33:fa:30:38:3e:b6:53:5a:
ba:1b:d6:e7:1b:5c:45:e1:65:cb:54:3a:be:93:e8:
c8:c0:f2:0b:53:95:51:8b:41:4c:92:4f:04:33:94:
9b:e0:aa:93:30:be:38:38:fc:c5:92:f0:4e:02:a4:
7f:f1:7d:2f:8e:0b:10:78:ed:74:6a:2d:9d:f2:ca:
0d:02:0f:b5:ea:d5:5f:c6:18:fc:8a:8d:b7:16:9e:
07:4d:d4:d2:79:4a:ae:d1:c0:40:cb:c2:ab:c4:3b:
5c:e6:1d:af:58:dd:4b:d5:02:91:01:62:b9:f9:83:
de:72:e4:45:f5:66:c1:41:a6:73:dc:23:77:e4:55:
ad:1c:b1:7b:9c:d1:48:0f:c9:8f:4e:f5:24:fe:5b:
95:ce:6b:83:da:2f:84:68:70:b7:3a:f2:12:81:dd:
ec:e1:3e:42:d7:51:fb:4b:86:79:17:5d:44:d9:e4:
cc:d9:e8:9d:c0:4d:17:16:c6:18:06:30:15:b5:86:
f2:17:fc:70:71:a7:8c:a4:b2:40:21:7a:41:6a:99:
da:79:9e:61:7f:55:32:b9:d8:fb:f9:13:4e:a5:41:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FB:87:A4:EA:1D:46:3E:31:2D:B3:FF:75:3F:6F:60:5B:06:46:B5
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ca:90:8f:8b:32:06:f1:51:46:ae:46:b1:86:be:d9:bb:a9:
e3:49:0f:b8:21:44:cf:ed:f9:19:90:d0:2f:33:60:ea:74:13:
06:4f:79:57:a3:70:53:c7:59:c7:20:e5:ae:a9:33:02:64:a9:
7f:78:77:ed:87:76:ff:de:ad:07:f6:d3:a0:b7:5c:33:ab:d7:
e1:a4:bc:68:a0:14:f3:4a:aa:84:a9:46:56:37:fe:35:68:5d:
64:ab:07:44:27:84:4b:7b:7a:a8:78:d8:cc:a5:30:2f:73:6c:
a4:b3:86:34:5a:0e:77:4a:7f:c1:78:28:4d:44:dc:c5:39:e7:
ea:f3:df:fc:ad:c2:ad:33:f8:d9:1f:79:50:6c:d5:74:43:3b:
d1:77:8d:78:48:71:5d:68:b2:df:fd:d1:03:f1:9c:bd:23:dc:
09:cd:3e:ae:b8:db:0d:90:88:de:73:dd:57:09:9a:e3:fc:a8:
0e:49:42:48:48:b9:e4:68:76:11:84:4a:47:d8:9c:c7:b9:e0:
5b:8a:f8:d5:67:37:51:19:d1:90:08:96:64:8b:1b:f6:56:5d:
97:2a:84:28:65:1b:50:a2:65:9e:e8:52:02:0e:3b:f4:d7:57:
b0:b6:a7:ba:2f:c4:24:70:26:47:ff:d0:3b:30:20:fd:67:22:
27:a1:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:00 2026 by rpki-client