Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: FbNRTl7VP2HaEt/NPNDkkaq8VRzKDqj2CqXWJWOb50s=
Subject key identifier: 97:D1:64:AF:15:87:02:E5:FC:A2:B3:7D:9E:35:37:C4:AF:32:E7:96
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 019CCA1AC230DDF2DF9882A3A884F1F6A723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 010B
Signing time: Sat 07 Mar 2026 21:01:17 +0000
Manifest this update: Sat 07 Mar 2026 21:01:17 +0000
Manifest next update: Sun 08 Mar 2026 21:01:17 +0000
Files and hashes: 1: czHbFV3pd9Iq_WN0w5mTIXs5ZFI.asa (hash: 2rLgWbVZfymSzH61TfuH87Belcn87DaW2n+susN61eA=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: 8q9U5NHZAMV6+97j4ncAP2L+a6wEBf0Lf4XhbJfHRrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:1a:c2:30:dd:f2:df:98:82:a3:a8:84:f1:f6:a7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Mar 7 21:01:17 2026 GMT
Not After : Mar 8 21:01:17 2026 GMT
Subject: CN=97d164af158702e5fca2b37d9e3537c4af32e796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:b2:07:0d:f7:a2:a9:7f:1c:2f:6a:44:c0:
95:cf:5f:7d:39:20:27:6b:d5:2f:9b:90:05:fd:19:
29:19:df:f9:48:de:e4:c2:47:ac:89:c6:6c:ba:86:
d7:f1:0f:52:cc:98:d2:40:09:a2:ec:1a:b5:38:56:
fe:80:dd:36:19:96:c7:ff:5c:08:f9:af:43:81:45:
0d:c0:91:fa:aa:c2:67:f0:a4:e3:b3:61:ca:d2:7c:
26:5e:d6:b1:b6:70:6d:8f:1e:be:3c:47:84:ff:d6:
51:18:99:26:43:d2:62:f2:86:d6:93:e0:04:db:d9:
af:31:f8:bd:7e:45:eb:0c:90:a8:e8:1e:47:1f:50:
65:30:8a:31:a6:2a:5f:63:e7:73:7f:ac:6f:33:42:
a6:e0:e6:d4:19:75:1e:42:be:d6:e6:40:e8:76:20:
22:ca:b9:65:4d:0a:1b:f0:f1:18:80:eb:d9:37:d3:
54:44:1e:b9:d3:d6:30:ab:60:dd:83:42:87:fe:f4:
df:6b:02:17:7b:3b:ba:64:96:be:82:ce:e1:f4:10:
df:ac:31:32:04:0c:1f:4f:25:f4:0b:80:03:74:e5:
43:34:db:a2:85:3a:c6:c4:c1:dc:9c:1c:9c:75:f0:
17:79:8f:da:fb:67:2f:eb:f2:f0:55:29:1d:08:22:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:64:AF:15:87:02:E5:FC:A2:B3:7D:9E:35:37:C4:AF:32:E7:96
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:e1:f3:6f:2c:9c:eb:da:66:b3:4c:98:93:a9:20:6a:bf:
a3:1f:21:81:d2:40:df:76:2a:11:4d:92:1b:10:b0:58:4f:ea:
87:af:86:66:c6:d1:b9:d0:f1:9c:24:fd:05:7e:da:a2:26:a4:
e8:5e:04:f1:02:42:52:e4:2d:13:e0:a3:2b:09:4a:f2:ec:e3:
34:30:e0:72:b0:11:db:de:9f:f8:19:45:1c:1a:5f:5a:ac:c7:
df:38:f3:21:51:f1:29:6a:2e:8c:8a:01:a6:8c:41:9b:6e:41:
bd:79:e5:f8:10:07:36:5b:0f:92:71:91:4c:ea:22:3b:b2:2d:
79:ec:9e:b5:0e:d1:0a:1d:17:ce:7c:a5:3c:8d:77:29:f0:e5:
7d:4a:5b:60:de:5e:93:91:56:33:b5:11:4e:85:d8:cc:bd:75:
ec:23:1b:71:98:08:76:01:2a:4f:fe:25:75:30:38:84:26:71:
7b:23:74:46:2c:3d:c8:a6:2b:58:f2:44:d9:82:12:a5:db:f7:
c4:a3:e0:18:91:86:e3:45:84:a5:3b:69:8a:46:d5:cd:a4:eb:
30:ca:56:6b:0d:89:79:9c:bd:a6:41:b5:7f:45:91:e8:44:4c:
de:0e:74:3c:2b:0c:77:fe:10:bd:1e:25:bb:15:bd:85:b6:30:
be:2b:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:16:58 2026 by rpki-client