Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: 7utg9W4oUeHPqHyy/9n4sMhItii7HG2GtfxySxG6igM=
Subject key identifier: 4B:F6:69:78:01:58:FB:97:FD:D7:11:1F:14:BE:0F:99:1D:DF:1F:D2
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 01A17A71D28AD482172E3376506C87B45FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 037B
Signing time: Mon 26 Oct 2026 23:00:42 +0000
Manifest this update: Mon 26 Oct 2026 23:00:42 +0000
Manifest next update: Tue 27 Oct 2026 23:00:42 +0000
Files and hashes: 1: TB2o93JdI3_5bR6pFMnn0o3Vigs.asa (hash: tU5Nk49tozCWJHFaeKvDt9q8L3Ki/m4tjnKrcr2Wp1E=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: 63rFO/pfgvoMNsikz3dEWch9l0g4P/GbdyRYw/QQ16U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:d2:8a:d4:82:17:2e:33:76:50:6c:87:b4:5f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Oct 26 23:00:42 2026 GMT
Not After : Oct 27 23:00:42 2026 GMT
Subject: CN=4bf669780158fb97fdd7111f14be0f991ddf1fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:c7:8a:12:da:9b:84:bd:1b:55:4f:c1:7f:
56:ee:36:fd:d2:fe:15:5c:f5:fc:4d:fa:8d:0c:2f:
a3:e7:87:e7:e0:f3:a8:2a:00:91:f5:a9:a7:d1:1f:
8b:74:31:07:29:63:18:fe:fe:ce:53:23:09:65:32:
2f:15:7a:8d:67:16:fd:33:18:6d:bd:b9:8d:f9:0f:
54:78:92:f4:9d:bf:3f:ab:4b:d1:e8:f8:eb:7d:e8:
cb:1d:05:cf:41:fd:b9:ee:69:58:70:59:d9:be:9c:
8e:74:f6:6a:1d:b4:52:36:d8:24:53:0a:b2:e8:61:
7c:f9:03:13:37:71:2b:ec:c5:05:d0:bb:75:e8:07:
ac:5d:25:99:0a:1a:67:28:93:68:77:9c:25:6c:b5:
44:e1:8a:f1:d9:f3:b8:05:88:cc:71:20:ca:59:1d:
1f:af:fe:f7:5b:89:95:af:87:dd:6b:d9:04:17:ef:
f6:be:b5:8d:f5:21:75:ec:93:78:77:49:56:cc:58:
f8:9a:d1:e6:e4:96:2e:fa:17:51:10:14:41:fc:6d:
0c:07:6e:8c:27:5e:a7:7a:a1:5a:ac:09:7a:2e:ce:
25:8a:96:31:2e:26:8f:24:62:b1:8c:a2:ae:65:dc:
04:bf:91:90:8f:3d:3f:06:9f:6c:61:02:ae:6d:f3:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F6:69:78:01:58:FB:97:FD:D7:11:1F:14:BE:0F:99:1D:DF:1F:D2
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:50:28:44:49:68:22:1b:5a:c1:75:d2:d9:7d:e4:85:72:d6:
e0:82:f4:5a:ca:47:4b:0d:e1:b8:e1:56:66:fd:16:cd:db:b3:
ee:da:03:f3:da:cd:d3:aa:4f:1a:95:3c:ad:a1:05:77:e7:ee:
5c:38:b2:12:de:c6:61:01:63:5a:79:a8:f8:80:3a:bb:33:77:
54:2d:23:69:d1:27:ef:02:6f:33:5f:b5:68:7d:d9:c8:95:cb:
2f:a1:da:93:4c:e1:8d:e5:02:64:25:d5:c4:01:bf:db:44:4a:
fe:48:c9:63:ea:a6:0a:d6:cf:50:df:46:a7:5d:dc:34:49:fd:
2f:75:1c:3f:06:19:28:8b:7d:88:25:b8:c0:78:5f:48:a9:76:
89:a9:b6:c2:e8:23:00:b2:99:5b:62:21:b3:11:07:e6:92:eb:
6a:1e:a6:21:30:07:fc:21:de:6e:7b:a3:2d:e4:24:12:71:a6:
ea:b4:e3:06:ea:8e:8c:85:46:ba:b6:37:be:29:07:f2:b6:4b:
eb:86:a8:1c:ba:05:bd:42:85:1a:2f:c0:7e:8c:06:9c:94:0c:
2c:84:e4:f0:81:e2:3c:11:40:53:5e:00:ca:f6:de:39:40:2f:
5e:b2:25:f1:53:d5:d9:e7:ab:b2:bf:73:cb:be:ae:f3:cf:34:
1b:99:41:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6cdKK1IIXLjN2UGyHtF/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjZiZjBlOGM2ZWZjNGFmZmFmNzI2Mjg4NDY5Y2FmZjQx
N2RlNjYwHhcNMjYxMDI2MjMwMDQyWhcNMjYxMDI3MjMwMDQyWjAzMTEwLwYDVQQD
Eyg0YmY2Njk3ODAxNThmYjk3ZmRkNzExMWYxNGJlMGY5OTFkZGYxZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6HHihLam4S9G1VPwX9W7jb90v4V
XPX8TfqNDC+j54fn4POoKgCR9amn0R+LdDEHKWMY/v7OUyMJZTIvFXqNZxb9Mxht
vbmN+Q9UeJL0nb8/q0vR6PjrfejLHQXPQf257mlYcFnZvpyOdPZqHbRSNtgkUwqy
6GF8+QMTN3Er7MUF0Lt16AesXSWZChpnKJNod5wlbLVE4Yrx2fO4BYjMcSDKWR0f
r/73W4mVr4fda9kEF+/2vrWN9SF17JN4d0lWzFj4mtHm5JYu+hdREBRB/G0MB26M
J16neqFarAl6Ls4lipYxLiaPJGKxjKKuZdwEv5GQjz0/Bp9sYQKubfMARwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv2aXgBWPuX/dcRHxS+D5kd3x/SMB8GA1UdIwQY
MBaAFJn2vw6MbvxK/69yYohGnK/0F95mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEt
ZTg4Njk1OTU0NzBkLzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEtZTg4Njk1OTU0NzBk
LzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlAoRElo
IhtawXXS2X3khXLW4IL0WspHSw3huOFWZv0Wzduz7toD89rN06pPGpU8raEFd+fu
XDiyEt7GYQFjWnmo+IA6uzN3VC0jadEn7wJvM1+1aH3ZyJXLL6Hak0zhjeUCZCXV
xAG/20RK/kjJY+qmCtbPUN9Gp13cNEn9L3UcPwYZKIt9iCW4wHhfSKl2iam2wugj
ALKZW2IhsxEH5pLrah6mITAH/CHebnujLeQkEnGm6rTjBuqOjIVGurY3vikH8rZL
64aoHLoFvUKFGi/AfowGnJQMLITk8IHiPBFAU14AyvbeOUAvXrIl8VPV2eersr9z
y76u8880G5lBUw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:49:53 2026 by rpki-client