Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: p73snwplzKKl0A2WKUl6WuoHpNUs9tLVwFbHNO7FRow=
Subject key identifier: 3C:21:B3:04:52:2A:A4:08:0D:7D:2F:F4:23:78:F8:DD:99:CE:DB:81
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019DCED02EAD2302671F7E5BCF2EC58C9AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 12:00:43 +0000
Manifest this update: Mon 27 Apr 2026 12:00:43 +0000
Manifest next update: Tue 28 Apr 2026 12:00:43 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: 405PLTlcV9U/EgUz+Esz97ndqVVhZFj0akycl9u1LjM=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:2e:ad:23:02:67:1f:7e:5b:cf:2e:c5:8c:9a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Apr 27 12:00:43 2026 GMT
Not After : Apr 28 12:00:43 2026 GMT
Subject: CN=3c21b304522aa4080d7d2ff42378f8dd99cedb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:d8:5f:85:b3:de:ac:ab:91:24:d5:f2:7f:
0f:47:57:09:38:f3:58:30:ab:42:a4:13:ae:51:ce:
02:b4:b0:75:33:62:d1:af:0f:df:db:06:d8:07:e6:
1c:63:ec:ff:86:0d:6d:8c:89:7e:a9:f4:8d:70:61:
3a:3f:c3:20:b3:4c:61:2b:ab:03:07:2b:71:d8:3c:
b4:09:dc:f6:9e:42:67:3e:26:0a:6a:42:bd:a2:00:
2d:97:6f:d0:3b:a5:aa:84:1f:93:11:93:5b:55:7f:
ff:ba:1b:0d:7e:c3:3c:0a:f3:b2:90:d0:eb:0d:16:
bb:aa:a8:0b:63:8b:f2:33:0d:36:fc:7a:d6:4c:c3:
de:b4:cf:db:22:27:39:8f:84:07:d6:66:10:74:b4:
4f:bc:de:c7:7f:0b:b1:2e:31:25:9b:e3:08:dd:5e:
a6:0f:76:b7:a4:22:68:d4:39:f4:c1:fb:cc:33:ea:
a4:98:0e:8d:40:d2:aa:65:d7:31:d5:d5:ae:4a:28:
12:04:64:3f:4f:0e:b1:24:13:73:78:49:e9:3d:4c:
ec:6d:d8:b0:65:b1:4e:f2:a6:ca:73:55:4a:e1:ca:
f3:a4:e2:af:ab:d6:a4:7a:c9:62:a4:3c:57:7a:5a:
df:7e:d3:40:a6:55:71:d9:33:f8:1e:07:da:80:7d:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:B3:04:52:2A:A4:08:0D:7D:2F:F4:23:78:F8:DD:99:CE:DB:81
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c5:c3:ef:91:c6:ea:6b:ac:26:dd:75:c3:7b:0d:6e:3b:f5:
a7:47:96:7c:82:12:11:70:37:f5:67:1c:c6:f5:7f:86:b1:27:
cb:fd:e1:ff:0c:5e:87:89:c1:6b:d8:57:f2:ce:85:4a:46:66:
13:a4:d6:c8:3c:e2:01:ff:af:ef:35:5b:dd:1f:2b:ef:d1:cc:
42:84:cc:d0:34:16:3a:35:f9:0b:47:da:c7:af:61:57:ac:d2:
38:83:6f:48:20:77:71:0a:f1:d4:8b:59:bc:29:c8:12:82:e9:
ec:1d:ee:0e:77:e1:07:6e:47:15:7d:cf:4a:ea:43:07:fb:78:
b8:24:da:cc:ad:20:09:2e:82:5e:27:1f:8b:a3:c7:aa:44:98:
e8:06:78:81:ee:c3:69:90:5d:6f:ab:17:e5:9b:92:bc:f7:b6:
a0:7e:1d:94:e6:12:ef:ac:e5:c2:9c:be:80:13:df:7b:83:65:
d1:55:b5:87:d3:20:33:df:5d:77:4b:4a:2e:c0:7c:dc:af:ff:
d2:b9:66:ba:df:7e:43:4c:c7:f8:8f:06:3b:84:03:60:0d:31:
b8:08:0d:b1:75:5b:06:73:1f:9a:06:8b:9c:fb:fd:61:c9:7f:
37:f5:bd:a8:09:62:5a:40:94:1f:3a:19:9d:46:b6:40:ad:6b:
d9:cb:00:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0C6tIwJnH35bzy7FjJqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNDRkYTVjMTkwNDA5NTg2MGU4NjgxODA1NzNlZTNjODk1
YTdiNDUwHhcNMjYwNDI3MTIwMDQzWhcNMjYwNDI4MTIwMDQzWjAzMTEwLwYDVQQD
EygzYzIxYjMwNDUyMmFhNDA4MGQ3ZDJmZjQyMzc4ZjhkZDk5Y2VkYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJfYX4Wz3qyrkSTV8n8PR1cJOPNY
MKtCpBOuUc4CtLB1M2LRrw/f2wbYB+YcY+z/hg1tjIl+qfSNcGE6P8Mgs0xhK6sD
Bytx2Dy0Cdz2nkJnPiYKakK9ogAtl2/QO6WqhB+TEZNbVX//uhsNfsM8CvOykNDr
DRa7qqgLY4vyMw02/HrWTMPetM/bIic5j4QH1mYQdLRPvN7HfwuxLjElm+MI3V6m
D3a3pCJo1Dn0wfvMM+qkmA6NQNKqZdcx1dWuSigSBGQ/Tw6xJBNzeEnpPUzsbdiw
ZbFO8qbKc1VK4crzpOKvq9akeslipDxXelrfftNAplVx2TP4HgfagH1ggQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwhswRSKqQIDX0v9CN4+N2ZztuBMB8GA1UdIwQY
MBaAFA1E2lwZBAlYYOhoGAVz7jyJWntFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTct
MjdmYjU4MjJiMzJkLzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTctMjdmYjU4MjJiMzJk
LzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8XD75HG
6musJt11w3sNbjv1p0eWfIISEXA39WccxvV/hrEny/3h/wxeh4nBa9hX8s6FSkZm
E6TWyDziAf+v7zVb3R8r79HMQoTM0DQWOjX5C0fax69hV6zSOINvSCB3cQrx1ItZ
vCnIEoLp7B3uDnfhB25HFX3PSupDB/t4uCTazK0gCS6CXicfi6PHqkSY6AZ4ge7D
aZBdb6sX5ZuSvPe2oH4dlOYS76zlwpy+gBPfe4Nl0VW1h9MgM99dd0tKLsB83K//
0rlmut9+Q0zH+I8GO4QDYA0xuAgNsXVbBnMfmgaLnPv9Ycl/N/W9qAliWkCUHzoZ
nUa2QK1r2csATw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:46:30 2026 by rpki-client