Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: u4RlZIWMer0ewePdMknJGTOlB4TjMJM4CGqzudU6cPI=
Subject key identifier: 40:D6:5A:8C:86:8C:A6:1D:84:A8:0C:E5:A5:A1:02:C9:21:55:98:CF
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019FA22934344CFCC3585B4FD5B9544E5DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 06:00:37 +0000
Manifest this update: Mon 27 Jul 2026 06:00:37 +0000
Manifest next update: Tue 28 Jul 2026 06:00:37 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: Q0832UfjxEkO27Zkcvou9uoC9s1r9CrNAtuVIXZnKYc=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:34:34:4c:fc:c3:58:5b:4f:d5:b9:54:4e:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Jul 27 06:00:37 2026 GMT
Not After : Jul 28 06:00:37 2026 GMT
Subject: CN=40d65a8c868ca61d84a80ce5a5a102c9215598cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:00:3f:89:af:85:d7:fc:05:b3:43:b7:8f:
12:63:66:f6:30:7d:33:b2:d2:3f:37:a1:09:e6:a3:
88:a5:6b:63:52:e8:f6:5d:c9:77:62:1b:9f:a6:ac:
8a:b4:ea:77:b1:67:44:c9:44:07:42:d8:36:20:99:
fb:99:7b:98:d4:0c:d3:ca:84:ab:ec:0e:12:22:c6:
d9:36:61:22:9f:7e:dd:18:a8:ee:a6:d9:7d:c6:15:
7a:f2:2d:4e:ce:30:e3:df:d4:ca:b0:4f:09:38:e0:
59:e2:98:fe:97:be:f8:67:29:39:1f:60:20:a9:a2:
ce:a8:d4:b3:ca:5d:89:40:8c:92:5c:dd:4e:4a:56:
a8:86:01:54:f4:04:ce:06:1e:3b:cb:8d:a3:02:4c:
5e:38:d2:aa:d1:cb:f6:8d:d6:de:d7:3f:64:9f:cf:
d4:ad:3d:28:09:ae:95:b3:71:37:28:b7:6b:16:17:
e2:40:47:3a:33:94:57:8b:5e:a4:aa:33:7c:49:a4:
54:fd:54:b5:a3:af:7f:8e:a8:98:e7:d6:07:ce:89:
a0:9c:cf:07:23:6a:a4:85:97:b4:7b:27:2a:c2:93:
4f:71:8d:63:55:54:c7:14:7a:66:8e:27:57:94:d4:
dd:e2:2a:1d:ad:be:59:e8:f6:19:64:c9:7a:8e:1b:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:5A:8C:86:8C:A6:1D:84:A8:0C:E5:A5:A1:02:C9:21:55:98:CF
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:e3:fb:63:f8:6d:40:6e:5c:14:0d:0e:26:e6:cf:aa:b8:
b2:45:6e:d2:ea:63:81:28:a0:4c:e8:15:9d:ce:3e:c4:ad:95:
f8:6c:60:d2:b9:28:31:49:85:e8:5b:e6:05:8e:7f:ad:f6:53:
16:12:4f:4f:ea:16:34:d7:82:04:d1:1b:a9:7c:c5:2d:c9:1d:
1a:89:de:ee:35:00:55:5b:14:94:b3:c6:27:11:bc:16:85:f5:
cf:33:c0:94:7b:d5:9c:d3:b3:e4:59:65:ba:89:12:7b:b2:8e:
3c:0b:56:d1:6b:9e:e1:2b:61:c6:74:02:af:5c:f7:47:eb:43:
95:ce:44:bd:e3:2d:d1:cf:db:37:c3:35:54:4f:71:2d:e9:0f:
05:e4:09:3e:a6:19:aa:84:38:a8:1b:80:2a:b8:ad:c1:d1:92:
ee:ab:ef:3d:90:70:84:a0:e6:a6:08:0b:c6:cc:63:3c:27:8b:
28:15:02:50:ad:42:bb:ba:bb:0f:7e:54:07:f9:1c:68:3b:76:
06:1e:c6:d9:25:a1:21:99:c5:7a:f9:4a:c9:7c:a7:15:92:2e:
1c:f9:ec:2b:3e:97:1e:67:2f:c6:b0:eb:b9:67:70:31:73:34:
b8:9f:b1:f5:66:18:20:cf:19:e7:39:e0:f6:ed:08:9b:87:75:
59:c9:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:32:37 2026 by rpki-client