Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: jBstkxvk2dx2qygRXhIputaa7yxpGcWIcpJluLDrKXw=
Subject key identifier: 96:36:66:53:BC:4E:B0:67:55:9C:80:B9:D5:91:F2:99:B3:1E:6F:1F
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 019F17F93E7ACCEA458762B895A5CEFDF850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 10:00:38 +0000
Manifest this update: Tue 30 Jun 2026 10:00:38 +0000
Manifest next update: Wed 01 Jul 2026 10:00:38 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: RVvy47xXJncgXltgbvv35X4IKIg4kbsq2bH8H4C0m7M=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:3e:7a:cc:ea:45:87:62:b8:95:a5:ce:fd:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jun 30 10:00:38 2026 GMT
Not After : Jul 1 10:00:38 2026 GMT
Subject: CN=96366653bc4eb067559c80b9d591f299b31e6f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:53:6f:f6:49:ed:f1:32:00:69:d7:0c:4f:
88:fe:6a:17:6b:df:d3:73:cc:d2:c2:33:f5:bf:cd:
24:36:26:65:4f:42:93:50:32:33:24:47:23:39:60:
09:e2:88:ee:0c:1b:30:2b:11:68:0b:db:e6:d3:ac:
c5:20:43:93:51:2f:60:72:c1:39:13:a4:51:b6:8c:
ea:7d:e0:fe:2d:d7:2c:4d:60:ce:f8:0f:dd:cd:d0:
2a:7f:e0:42:12:f3:73:d3:0c:83:bd:06:13:f9:ab:
cc:41:c6:35:34:9b:ab:02:f4:5d:4a:71:5f:d1:f9:
23:b5:bb:94:23:18:00:c9:91:85:08:1f:d3:ab:2a:
8e:a1:1e:f8:f6:a4:8e:3d:f0:b9:5b:f9:1d:73:bf:
33:14:5d:a6:69:80:d6:0b:3f:df:1d:8b:1d:8f:d8:
f5:fe:d6:ed:2e:25:74:ca:2e:59:97:dc:61:e5:fc:
fc:dd:a0:93:63:ea:06:0b:10:fb:87:43:ef:02:aa:
ec:90:d1:e0:19:73:40:de:0d:30:52:74:21:04:99:
11:d8:d2:b2:87:1b:21:d3:81:2c:08:76:2d:0b:8d:
8c:1c:a7:08:ad:5e:c3:51:8f:cd:d4:31:6f:f9:c1:
d4:6d:47:21:35:aa:61:3c:60:5c:d4:ba:ff:9b:dc:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:66:53:BC:4E:B0:67:55:9C:80:B9:D5:91:F2:99:B3:1E:6F:1F
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:18:39:2d:da:02:ea:2e:11:31:48:58:8e:d8:49:3c:4d:0b:
22:19:fb:30:fa:20:dc:05:e7:fa:0b:e7:be:e1:5a:6b:3b:6b:
83:a7:b1:c2:d3:96:fa:73:94:5c:c4:df:c5:e4:8a:1a:bf:39:
4f:b6:e1:f8:22:bc:67:1e:23:01:4b:41:b8:4e:87:eb:cf:dc:
5c:de:8b:a7:05:87:f2:5d:e4:03:c4:eb:99:36:5c:f5:e2:22:
6d:76:85:be:6f:41:00:5e:6f:ff:db:d1:b5:67:99:48:e3:8c:
c3:b4:f8:4f:35:31:c9:fd:ca:b5:6a:d1:35:c6:ef:b2:65:85:
d7:64:34:41:9a:10:fc:6b:90:2f:66:42:8c:03:30:3b:76:d3:
92:33:09:33:04:85:f6:c8:64:2a:51:1d:b5:ae:b8:88:08:ab:
f9:22:21:84:53:c4:c3:2a:70:73:e6:0d:5c:d0:00:0a:21:b7:
75:97:c9:35:5a:b0:11:62:5c:93:8f:fa:8c:08:fc:d0:ca:99:
4c:f6:ca:a7:ee:e7:c6:37:52:c3:fc:7a:12:c4:1f:5e:b5:09:
6d:c0:a2:31:8c:51:57:11:7b:d2:13:9b:ab:96:b1:0c:d6:8c:
fb:fa:3e:d1:61:ce:71:d0:09:ec:73:50:9a:59:36:ad:a7:0c:
da:e8:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:14 2026 by rpki-client