Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: hNUHw9io5MklvQdJTf5Jsiz0SZppqqviXUZ1tL5UbW4=
Subject key identifier: 54:21:C8:C5:2E:9B:9A:73:D7:65:B2:5A:3F:E7:07:C9:29:B4:CB:F2
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 01A1404C511A84C6C57B3A4C91EE0E4D6CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 16:01:45 +0000
Manifest this update: Thu 15 Oct 2026 16:01:45 +0000
Manifest next update: Fri 16 Oct 2026 16:01:45 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: ZR2/EVVOCU8wn/cjGOoSVFjLelaU5vm85DaB184fJUg=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:51:1a:84:c6:c5:7b:3a:4c:91:ee:0e:4d:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Oct 15 16:01:45 2026 GMT
Not After : Oct 16 16:01:45 2026 GMT
Subject: CN=5421c8c52e9b9a73d765b25a3fe707c929b4cbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:ef:0d:a0:ac:55:50:ed:9b:5c:7f:ca:7d:
2a:68:38:8f:7b:3a:03:4b:e1:23:3b:77:8f:5f:de:
c4:c9:ce:24:a8:47:eb:f3:c6:49:25:47:20:b5:65:
dd:2c:3e:b0:a1:97:66:ee:31:67:9d:2d:15:77:8d:
bb:b7:5f:c9:14:cd:9f:4c:d9:c1:a7:f4:c1:3c:82:
59:dd:61:b2:5e:f8:95:20:69:c8:c7:65:9d:01:f7:
75:fa:e5:b5:4c:8a:3a:5e:2d:1e:57:0e:85:ec:33:
89:b8:72:c2:f9:89:dc:17:6d:c1:7b:72:58:54:84:
63:c9:15:39:d9:ee:b9:42:73:b6:2b:2a:de:a6:b6:
e9:41:da:0d:d1:eb:a5:cf:e7:dd:17:11:90:12:5f:
0f:94:fa:4d:0a:fc:ba:07:1f:33:65:84:03:0c:9e:
17:ed:5c:e9:fd:c2:6b:20:72:3c:e8:8b:72:1e:ce:
1f:f3:70:f4:e0:00:4b:a5:3f:c4:3e:fd:38:40:e9:
9b:7f:df:22:a7:70:d9:1a:b9:5a:9e:94:d1:68:25:
57:1d:ec:1e:31:e7:05:a8:7f:a1:30:ab:cc:6d:55:
c9:fd:67:25:df:8a:2c:2a:7f:8c:80:56:3a:dc:e9:
78:34:35:06:3a:8e:e4:77:15:40:83:c7:f6:0f:a8:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:C8:C5:2E:9B:9A:73:D7:65:B2:5A:3F:E7:07:C9:29:B4:CB:F2
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3b:73:3f:84:e4:0a:bd:99:ad:18:c8:2e:8c:e3:c2:a9:2d:
b6:80:1f:a7:cb:fb:8a:7e:8c:55:75:ef:aa:41:78:35:21:11:
0f:26:d3:76:9e:ae:2f:a3:1b:06:31:1d:65:67:d3:44:a4:79:
e5:06:e6:94:2b:65:d6:bc:7f:7c:2e:27:98:9c:83:c0:e7:c3:
e6:53:b0:9f:95:f5:36:53:bc:05:18:14:9b:cf:b8:1c:37:12:
79:5f:17:f5:36:f4:08:aa:23:d5:b1:2e:b8:cd:e2:90:6c:86:
82:80:e3:6b:4f:56:99:09:ea:ca:ac:20:9f:99:97:41:0a:14:
c4:8b:ec:0b:5a:ad:49:30:f1:eb:f2:df:f3:10:42:e9:e9:fe:
15:3b:3e:10:41:fb:ac:59:28:a2:f5:ee:bb:5d:9c:65:e7:0c:
10:03:80:fa:9b:a9:66:53:d8:6d:36:f4:52:f5:f9:5b:4b:ed:
e5:41:87:32:7d:53:3f:80:f0:bd:e6:99:4c:b7:3d:cd:08:55:
dc:7b:bf:8b:78:10:81:8e:79:79:46:27:3e:35:d8:06:9c:e8:
1f:d2:fd:04:09:89:d0:8d:17:27:f1:b2:c8:46:0f:74:7d:c7:
79:fe:93:b6:99:3b:22:38:4d:dc:23:2c:89:f9:20:12:a1:be:
99:28:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:20 2026 by rpki-client