Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: bMJoQImlP13poIQyy39xDaQZRi/97YYN80rgyT90puM=
Subject key identifier: 7D:E4:E9:6C:4D:16:7C:E2:3B:37:86:FE:00:6D:FB:49:4B:57:0E:F8
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 01A17C607B8A3BE1D426556E9A6A95EF6715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 037C
Signing time: Tue 27 Oct 2026 08:01:00 +0000
Manifest this update: Tue 27 Oct 2026 08:01:00 +0000
Manifest next update: Wed 28 Oct 2026 08:01:00 +0000
Files and hashes: 1: TB2o93JdI3_5bR6pFMnn0o3Vigs.asa (hash: tU5Nk49tozCWJHFaeKvDt9q8L3Ki/m4tjnKrcr2Wp1E=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: f8JoVIWgXkVdGFHvDaE6MjOzRXoLRWIOaNKcJ4oEjj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:7b:8a:3b:e1:d4:26:55:6e:9a:6a:95:ef:67:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Oct 27 08:01:00 2026 GMT
Not After : Oct 28 08:01:00 2026 GMT
Subject: CN=7de4e96c4d167ce23b3786fe006dfb494b570ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:35:fb:c1:26:12:c4:f9:62:b1:d1:82:a6:
3c:b6:82:d4:44:bc:08:f2:f9:e3:e6:7b:0c:a5:6f:
7b:15:b8:7b:e3:66:58:17:88:10:0c:d5:40:4e:70:
01:39:9d:99:30:38:84:a1:bc:69:87:da:f9:1d:1e:
0a:59:a7:27:56:24:07:0b:77:a2:93:c2:21:89:6f:
35:f7:07:b2:94:c5:4e:18:1e:cf:6e:86:94:fd:4c:
1c:87:b6:ea:77:6a:6f:31:5f:cd:d2:f8:ba:5b:b3:
38:98:66:8e:8d:8d:7d:63:61:b2:f8:1a:83:ac:d2:
9f:59:a9:19:06:ea:5d:b7:31:ba:35:e7:ee:23:ee:
4e:63:66:b3:da:84:73:5f:2b:ed:bb:70:14:cb:4c:
5b:a6:5e:ba:f1:dd:76:db:37:92:11:ad:30:db:61:
aa:f0:f6:2c:f3:5a:92:ad:ef:7a:b2:ba:5c:cd:56:
bb:7c:93:d9:a5:97:49:88:61:cb:63:b4:06:a6:ed:
12:4f:d3:db:18:b7:da:e8:e2:b0:80:91:53:b4:54:
50:57:68:26:7d:0a:06:5e:8e:08:0b:07:c9:bf:82:
0f:dd:50:be:fc:ba:2b:6b:66:8f:b6:ee:95:a2:ef:
25:75:23:e9:fd:50:22:3b:a9:e9:04:dd:47:eb:b9:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:E9:6C:4D:16:7C:E2:3B:37:86:FE:00:6D:FB:49:4B:57:0E:F8
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:62:ce:e2:b1:9f:a3:35:89:48:bf:29:79:3d:44:48:0f:
9a:d4:bb:7d:2f:66:69:2d:b2:4c:c5:b9:fd:78:90:7f:d4:8b:
d8:99:9a:8f:a6:4a:fc:8c:ba:5d:46:f9:88:c2:04:0b:59:e3:
78:9e:c7:c4:2b:65:5c:47:08:27:d1:fc:9b:32:e4:b1:55:44:
31:0f:cf:92:bc:e7:62:a0:9d:6a:f0:9f:69:19:be:f1:69:e1:
04:1b:08:18:f8:de:e8:21:db:a2:7b:e1:6c:73:10:17:85:82:
0a:57:c6:81:96:7f:45:c5:89:fd:dd:30:9e:53:c2:b5:26:9a:
a9:3b:1e:21:a2:eb:ed:d3:50:82:17:f3:ee:7b:93:c3:de:80:
33:61:3a:3a:cb:7e:ee:e3:ff:09:ef:83:e0:02:dd:dd:bb:62:
17:4b:82:8e:ee:e3:d4:9b:9c:92:15:d8:db:b7:47:23:9b:47:
a7:6e:62:57:c3:d1:81:70:14:09:d9:c4:e8:61:b6:aa:6c:3c:
d6:47:c0:8a:6b:e2:29:a6:91:2f:7e:e4:8f:d6:30:6b:1f:60:
17:c9:78:da:16:0f:bc:fe:9e:f3:5d:a5:e9:4a:31:12:07:97:
0d:8d:9b:b0:97:08:9c:7a:8a:60:8b:e3:89:71:e8:6b:76:35:
a4:b4:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:12 2026 by rpki-client