Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: R79+6hk6BjLHjHoanMNpD3eba5bfyZdenox5ZLqjSoE=
Subject key identifier: 62:39:57:EB:21:34:89:8A:88:B8:6B:34:21:15:E9:32:19:FC:0E:2A
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 01A17D3C72F80F97EFAB90EED84DA3278BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 12:01:15 +0000
Manifest this update: Tue 27 Oct 2026 12:01:15 +0000
Manifest next update: Wed 28 Oct 2026 12:01:15 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: YpPiqB0qP7InTn3nXTf5pkv3lVqZeqcJq/dGDjPoey4=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:72:f8:0f:97:ef:ab:90:ee:d8:4d:a3:27:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Oct 27 12:01:15 2026 GMT
Not After : Oct 28 12:01:15 2026 GMT
Subject: CN=623957eb2134898a88b86b342115e93219fc0e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:f0:44:78:8c:ac:1a:c7:9c:88:cc:68:cf:
70:bf:e8:72:7a:be:53:33:7b:a5:c6:45:67:55:67:
2d:cb:7d:d4:71:14:54:eb:1b:8b:fa:23:6b:83:da:
44:5f:32:7d:15:d1:93:fb:ab:80:86:4b:47:c5:3f:
b5:f3:23:8f:d4:30:a7:c5:1f:14:d2:0d:30:5c:51:
6f:a9:84:6c:49:48:bd:8f:e3:c2:fa:93:8c:d6:5a:
ef:17:4e:fd:8b:90:ec:17:2d:1f:f9:e1:c5:54:92:
86:50:35:bb:02:be:ef:b5:53:3f:3e:63:57:94:cd:
b1:4f:e7:39:07:61:86:ea:6b:d4:2c:4a:b2:5f:6d:
b8:0e:ae:d5:91:34:f9:b1:d8:7c:fb:dd:11:d7:2a:
65:1e:75:be:57:fd:0e:67:45:b5:55:5d:4a:09:2b:
b9:56:5c:4c:14:11:bf:85:01:cb:9e:2e:37:a8:09:
d3:63:3d:70:fa:f0:82:82:56:19:29:d7:e7:a3:c7:
b0:a2:bc:85:00:f5:0a:1b:f9:5c:01:a8:1a:c8:85:
36:ae:cc:b8:77:42:92:6c:ef:70:f1:ad:25:35:8f:
4e:c2:f8:a9:29:e1:b7:07:6a:16:e1:be:ba:28:69:
3a:1b:bd:70:f2:02:57:76:70:48:dd:3c:99:9e:89:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:57:EB:21:34:89:8A:88:B8:6B:34:21:15:E9:32:19:FC:0E:2A
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1a:b6:99:27:f4:fa:68:ec:f9:b4:40:3a:df:86:30:c1:0e:
1d:36:04:b6:40:b5:26:79:64:3c:04:6a:8f:ee:0b:7a:5d:23:
fd:bc:68:62:82:6c:b7:55:39:ae:22:05:56:66:5c:05:3c:8c:
51:e7:41:62:41:0a:8d:17:74:c5:33:6c:ef:e7:03:41:87:c7:
fd:fc:1e:59:ae:dd:c0:b7:9b:ec:ab:c3:54:fc:1f:b9:96:1f:
c3:25:44:12:b2:75:d8:be:49:c3:80:99:47:89:2d:c4:e0:bd:
a9:6c:41:9b:56:60:29:32:9c:7c:84:d4:2b:61:92:d3:15:41:
de:6a:61:3f:34:0a:bc:22:da:44:32:52:25:91:5b:d7:d8:3b:
02:3b:b8:65:3c:c0:b1:93:2a:18:86:a6:2a:f6:4b:b3:5f:41:
49:2d:cc:3c:de:29:4b:f9:22:27:4f:14:e7:2b:92:d3:3a:76:
95:84:a4:fe:a7:c3:b6:6e:af:88:78:19:05:83:32:bc:c8:83:
29:c6:b2:1d:6f:20:f6:ab:68:fe:80:a1:c1:6a:cc:6a:4a:39:
45:ac:a9:39:0f:5d:d1:d4:02:43:43:92:b3:b0:f9:1f:0f:dd:
5f:f9:7e:20:18:58:4d:f8:ac:09:1b:04:ab:5f:2b:98:46:ce:
6e:8f:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:20:27 2026 by rpki-client