Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
File: m_duqO3gk8p7UNTh216dQaIqnhc.mft (raw, json)
Hash identifier: JQtkAttW7UOJpqJHGGJpfAVKT6VG88rVbdkxZoHuq08=
Subject key identifier: 95:CC:69:C2:7B:57:03:FA:13:E7:65:41:DD:85:F5:E0:87:CC:09:9A
Authority key identifier: 9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
Certificate issuer: /CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Certificate serial: 01A18F0B5B66691FD9A5494373F40F3E654A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
Manifest number: 0153
Signing time: Fri 30 Oct 2026 23:00:48 +0000
Manifest this update: Fri 30 Oct 2026 23:00:48 +0000
Manifest next update: Sat 31 Oct 2026 23:00:48 +0000
Files and hashes: 1: CjhHfksX_V_SdQUfM0SgRx_hkMs.asa (hash: NOZLcv27XZSi1ZcEGYFc8cYQPVIhU6kNJHUso451mdk=)
2: m_duqO3gk8p7UNTh216dQaIqnhc.crl (hash: kxIJdDDBBJh4YjzP4g+trBnHW8NZ6i6uZyysSBY2B0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:5b:66:69:1f:d9:a5:49:43:73:f4:0f:3e:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Validity
Not Before: Oct 30 23:00:48 2026 GMT
Not After : Oct 31 23:00:48 2026 GMT
Subject: CN=95cc69c27b5703fa13e76541dd85f5e087cc099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:a5:be:12:96:17:64:2e:c8:46:49:31:5f:
b2:4d:f6:36:ac:dd:13:c0:c4:e6:0a:10:da:b2:8b:
a3:c4:03:3e:26:24:2e:73:19:2f:6c:28:19:0d:6b:
3f:f4:9e:40:27:7c:07:12:ba:05:27:a0:26:22:b1:
6c:29:27:b0:ec:8a:26:19:c8:72:8e:fe:4b:8e:2a:
9a:49:08:f9:8b:8b:4c:e1:29:85:55:14:44:ff:14:
34:07:b6:b7:f9:72:ab:95:30:55:90:6b:df:8b:68:
cb:ab:89:0e:7d:39:d8:a2:27:1b:86:fa:a8:62:cf:
96:53:1e:98:dd:3d:8e:fb:7f:19:a1:54:b6:49:42:
fa:1b:c9:45:4b:7b:5f:65:4c:eb:17:0a:bf:ae:8f:
19:a8:47:12:7b:19:b4:f0:ad:9e:ba:f7:90:5e:71:
d7:dc:30:0f:e6:43:ff:11:91:11:15:88:da:0f:61:
b8:47:ac:b9:cf:58:59:5b:d9:4d:c0:e8:be:ea:1e:
4a:96:3f:9a:0e:50:f5:11:90:34:40:93:fc:57:2b:
d2:e8:f8:b0:76:bf:aa:47:a4:40:c0:6a:17:b0:53:
0b:f9:2a:e2:1b:8b:8f:6c:fd:93:b3:7d:3f:eb:47:
0f:e2:ee:95:bb:03:e4:69:ec:00:cf:31:16:20:c0:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:69:C2:7B:57:03:FA:13:E7:65:41:DD:85:F5:E0:87:CC:09:9A
X509v3 Authority Key Identifier:
keyid:9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:71:83:71:18:3b:d4:0c:7e:a8:dc:41:83:b1:fe:d7:95:a9:
0a:3c:15:2d:d1:52:5f:93:fc:1b:c0:bc:0d:71:6f:29:25:c9:
17:f6:8e:e8:4f:8b:56:40:0c:96:f7:33:51:2f:42:2e:62:bb:
f4:81:28:bd:7e:2e:3d:12:86:af:e0:73:6e:40:e9:57:12:56:
3c:4b:0c:d5:84:05:2a:fc:53:a0:c7:f8:c1:da:68:26:66:b0:
c0:31:f6:ef:71:63:85:5e:5c:ba:f4:0e:1c:ea:e4:73:42:84:
2e:84:6e:23:e1:02:f4:d1:e6:c2:5b:e6:76:3e:f8:31:7a:42:
b8:1f:4c:08:96:a4:93:66:ed:c6:77:c9:f3:57:03:91:fd:b4:
cc:1e:de:06:32:6c:6f:ac:37:83:9e:80:70:fc:e2:00:ab:d7:
ef:e0:a8:41:73:72:dd:47:31:f3:04:22:56:fa:46:3c:c4:88:
e3:02:fc:cb:8e:c4:d2:4b:2d:29:34:b6:8d:9a:ae:69:69:83:
59:fb:b0:15:c8:6f:87:d1:da:f0:a7:2f:aa:2d:64:28:cd:63:
1b:0c:2e:72:9d:f5:e8:2e:6a:00:4b:0e:e1:08:03:c3:c6:2c:
8f:dd:9d:ad:7f:81:3f:a4:3e:d4:d5:24:ac:49:bb:d9:2e:28:
c2:94:02:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPC1tmaR/ZpUlDc/QPPmVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZjc2ZWE4ZWRlMDkzY2E3YjUwZDRlMWRiNWU5ZDQxYTIy
YTllMTcwHhcNMjYxMDMwMjMwMDQ4WhcNMjYxMDMxMjMwMDQ4WjAzMTEwLwYDVQQD
Eyg5NWNjNjljMjdiNTcwM2ZhMTNlNzY1NDFkZDg1ZjVlMDg3Y2MwOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvelvhKWF2QuyEZJMV+yTfY2rN0T
wMTmChDasoujxAM+JiQucxkvbCgZDWs/9J5AJ3wHEroFJ6AmIrFsKSew7IomGchy
jv5LjiqaSQj5i4tM4SmFVRRE/xQ0B7a3+XKrlTBVkGvfi2jLq4kOfTnYoicbhvqo
Ys+WUx6Y3T2O+38ZoVS2SUL6G8lFS3tfZUzrFwq/ro8ZqEcSexm08K2euveQXnHX
3DAP5kP/EZERFYjaD2G4R6y5z1hZW9lNwOi+6h5Klj+aDlD1EZA0QJP8VyvS6Piw
dr+qR6RAwGoXsFML+SriG4uPbP2Ts30/60cP4u6VuwPkaewAzzEWIMDT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXMacJ7VwP6E+dlQd2F9eCHzAmaMB8GA1UdIwQY
MBaAFJv3bqjt4JPKe1DU4dtenUGiKp4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV9kdXFPM2drOHA3VU5UaDIxNmRRYUlxbmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lNzI0NGEtMmM2Yy00MmVlLThlMjIt
ZmFiNGM1NmQzMDEzLzEvbV9kdXFPM2drOHA3VU5UaDIxNmRRYUlxbmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lNzI0NGEtMmM2Yy00MmVlLThlMjItZmFiNGM1NmQzMDEz
LzEvbV9kdXFPM2drOHA3VU5UaDIxNmRRYUlxbmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHGDcRg7
1Ax+qNxBg7H+15WpCjwVLdFSX5P8G8C8DXFvKSXJF/aO6E+LVkAMlvczUS9CLmK7
9IEovX4uPRKGr+BzbkDpVxJWPEsM1YQFKvxToMf4wdpoJmawwDH273FjhV5cuvQO
HOrkc0KELoRuI+EC9NHmwlvmdj74MXpCuB9MCJakk2btxnfJ81cDkf20zB7eBjJs
b6w3g56AcPziAKvX7+CoQXNy3Ucx8wQiVvpGPMSI4wL8y47E0kstKTS2jZquaWmD
WfuwFchvh9Ha8Kcvqi1kKM1jGwwucp316C5qAEsO4QgDw8Ysj92drX+BP6Q+1NUk
rEm72S4owpQCRQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 01:09:32 2026 by rpki-client