Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: T/t7XR3s2UOZXjvdz2EVRZJnOUiZFk3/Kb7uhuqXi1o=
Subject key identifier: 12:4F:F4:CF:35:7B:B4:5F:D5:77:C0:34:FA:BE:16:C1:FF:84:DA:9B
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 019D39099A974E3DD3518BB02E69640357C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: Uq2Z7k+2DwVLg4CvkgJsgwAgPQIef+FzpPGWsFAIlbA=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9a:97:4e:3d:d3:51:8b:b0:2e:69:64:03:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=124ff4cf357bb45fd577c034fabe16c1ff84da9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:65:cc:eb:00:cc:b2:f2:5f:d8:97:d3:64:e1:
22:08:49:cd:5b:eb:c7:5d:07:14:c1:1b:94:5c:86:
3c:78:42:38:35:ee:a6:91:e9:a6:f7:39:24:49:75:
1d:b5:79:be:26:04:6c:bb:f1:cd:25:82:67:44:d0:
42:7a:36:6c:fe:80:06:a9:43:2f:d9:8d:76:ec:05:
d8:b4:fe:e9:ba:0d:e4:63:3f:cf:03:98:3b:be:4a:
7d:30:16:c4:b0:d3:f6:0a:ab:ad:cb:dd:a4:72:14:
cd:83:fe:ac:27:b1:8c:8f:93:89:28:a0:02:c4:9f:
ab:9c:a6:55:3e:83:73:33:3d:0a:50:77:10:4e:a0:
e7:de:cb:53:e4:01:2e:b1:9f:45:bc:b3:c4:a0:27:
ea:46:a1:47:6d:e8:cc:78:12:42:48:77:f5:a5:b3:
f3:3c:3f:d1:fc:35:dc:58:61:18:7d:df:34:5b:2b:
2d:49:3b:05:67:3d:42:2e:e7:b1:a2:e0:10:43:a4:
6d:db:27:d3:7f:8a:c2:dd:07:90:17:31:b9:97:e8:
46:27:9d:eb:09:5b:5b:1a:03:6b:2a:c6:74:a9:eb:
a9:c4:af:a4:2c:af:b2:46:4f:20:74:b0:e6:8d:0d:
df:e8:d3:09:76:f2:fa:cf:5f:68:5f:62:48:8f:2b:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:F4:CF:35:7B:B4:5F:D5:77:C0:34:FA:BE:16:C1:FF:84:DA:9B
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c5:3c:b5:41:b7:15:16:52:63:2d:c8:c5:49:44:7e:48:51:
44:60:32:43:93:af:32:ce:04:84:3a:a8:14:4b:62:06:40:6c:
ec:cc:bf:f0:c0:fc:bf:cf:73:6e:da:48:c2:4f:33:e3:55:4b:
49:62:9d:78:d9:f7:a4:48:1a:77:5b:4d:00:3a:a5:07:70:82:
d1:c9:f5:06:91:aa:01:13:c9:2a:de:9e:ea:9c:06:d4:ee:f7:
18:b4:bf:7b:c9:9b:4e:25:01:ae:5a:2f:91:0e:52:0b:73:b6:
21:5f:e8:88:ae:4c:1b:3d:c4:07:b3:fc:e6:de:58:8e:d4:de:
5f:0c:c9:a3:de:29:cc:50:6c:ec:32:25:52:04:52:4f:28:d7:
fc:c9:c4:a7:61:66:09:ef:5e:82:88:4f:71:85:74:0a:86:63:
94:78:a9:b8:1d:48:71:f0:7a:06:14:4f:5e:ca:60:05:c5:9f:
34:e1:98:70:fd:e4:09:43:18:bd:76:b5:a6:37:04:01:2a:47:
4e:2b:c1:a3:ac:17:33:74:bb:b4:e0:44:0f:dc:01:1d:dd:c4:
4d:fa:7d:b4:32:75:51:17:96:ec:5d:98:54:37:c2:9d:3a:bf:
91:c2:9e:af:f9:a0:ac:89:31:2b:69:40:f1:c2:7a:e7:2f:bc:
2f:1f:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:10 2026 by rpki-client