Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
File: m_duqO3gk8p7UNTh216dQaIqnhc.mft (raw, json)
Hash identifier: I+mj8dtHJxxIc6OirpKHHsOlLFXRVPJv0T2BpWvB1Mo=
Subject key identifier: 83:20:41:D2:97:DC:2F:23:23:9E:5D:7B:CD:84:BA:EB:96:E1:1E:CD
Authority key identifier: 9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
Certificate issuer: /CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Certificate serial: 019FA03AE6289D0DFD79C2822935B59051D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
Manifest number: 52
Signing time: Sun 26 Jul 2026 21:00:42 +0000
Manifest this update: Sun 26 Jul 2026 21:00:42 +0000
Manifest next update: Mon 27 Jul 2026 21:00:42 +0000
Files and hashes: 1: bOGl1-6EedmnZ4zucIcjUxvlS0Y.asa (hash: Q6krfBDjlGauofXs7gP/pmJni/QaEEcGfQXEECmRFnI=)
2: m_duqO3gk8p7UNTh216dQaIqnhc.crl (hash: 4iZd6qNegzLsU3SRgiIJV3cXyf6cHWnW4g/m6SdmDtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:e6:28:9d:0d:fd:79:c2:82:29:35:b5:90:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Validity
Not Before: Jul 26 21:00:42 2026 GMT
Not After : Jul 27 21:00:42 2026 GMT
Subject: CN=832041d297dc2f23239e5d7bcd84baeb96e11ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:ba:06:66:e8:33:0a:d7:8f:97:43:16:a3:
0f:5c:66:a4:ad:5d:78:13:a1:46:ae:11:21:18:8a:
5a:8a:e0:d9:2a:23:6e:d6:ee:d6:2b:e2:1c:63:59:
ec:ec:e0:b5:3d:0a:20:6f:4d:67:25:84:28:5c:f6:
3d:a6:e0:0b:f3:86:9f:a9:5e:26:7d:95:17:35:c1:
4c:24:3b:83:40:2c:bc:66:33:5a:b1:83:d2:46:81:
85:b8:94:fd:f5:3c:2c:2b:ea:e9:20:e5:9a:cc:50:
74:41:0e:14:57:3b:15:8f:1e:54:bf:8e:0b:ce:0d:
86:60:2e:d3:7a:d0:99:b5:e3:38:d7:e3:55:26:b2:
55:17:1c:e3:5c:6d:48:a3:e9:e6:57:28:86:95:c0:
00:12:14:2f:a0:69:cf:c4:2b:ba:af:59:97:fc:92:
76:be:65:ef:8a:41:9e:ec:98:37:44:b5:6c:bd:69:
58:46:cc:65:04:45:35:b7:72:85:33:a1:35:3d:ac:
c5:0c:89:68:10:06:ca:e0:2d:e2:8c:fd:81:07:49:
3c:ab:23:7f:09:df:66:3a:49:59:74:47:67:e4:07:
6b:4f:79:23:92:09:30:25:69:12:5d:f5:92:72:c3:
63:0e:70:9d:5d:9f:92:80:bc:8d:b2:c2:94:09:cb:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:41:D2:97:DC:2F:23:23:9E:5D:7B:CD:84:BA:EB:96:E1:1E:CD
X509v3 Authority Key Identifier:
keyid:9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b9:6d:e3:bf:7d:79:f2:df:a8:a5:35:a5:d0:3a:a7:6b:9e:
c1:90:2d:5b:2f:1a:34:34:ee:19:f9:a8:b9:5d:0b:db:14:f9:
3f:3d:4a:36:87:d4:5f:6e:12:53:3b:24:cd:94:91:39:eb:97:
d3:8c:39:66:7c:c9:af:4f:ce:23:24:c2:cd:5d:8a:f1:64:78:
9f:71:6e:aa:3d:8d:d3:b7:b4:87:6a:d5:c6:2f:57:d1:22:dc:
34:5c:5b:5a:cf:20:2c:c4:0f:1e:5c:9b:28:95:5c:d8:32:42:
2a:15:c8:26:73:6a:25:d0:77:0c:24:8f:ff:06:98:89:22:a0:
7d:8b:e1:b0:99:ca:f2:2a:0f:b7:b2:28:79:1d:7b:46:bf:eb:
8d:8f:d1:41:d6:83:68:ae:2c:24:2c:ba:78:a8:b2:93:a0:88:
70:25:a6:d6:48:ae:4a:55:09:08:f3:a6:05:75:3e:b8:ae:af:
2d:90:62:2d:49:48:8d:e9:07:44:a8:4f:3d:b0:f5:af:99:3a:
6d:46:a0:2f:47:17:f3:a4:f3:13:85:0c:58:9a:83:31:43:14:
c5:37:9b:53:10:b3:86:3e:93:12:89:87:d7:30:94:40:fc:10:
50:6e:67:36:4a:12:4a:4c:0c:a8:d9:4e:d3:07:36:fc:b2:70:
5a:32:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:32:27 2026 by rpki-client