
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: VaubbKz0UMb8t8gG/TmY+Fpa39spBtV8kwELkIJmzrc=
Subject key identifier: 63:27:37:6E:E9:15:03:F8:A9:EE:8A:D6:24:BA:D3:DC:49:AE:3E:95
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019D98F42EB7013E557FE276CADFDE77794B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0837
Signing time: Fri 17 Apr 2026 01:00:32 +0000
Manifest this update: Fri 17 Apr 2026 01:00:32 +0000
Manifest next update: Sat 18 Apr 2026 01:00:32 +0000
Files and hashes: 1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: ugJK5d1cnXM3/4vlL7yhlAupL6owTonP2RGx3d1t3BI=)
4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:2e:b7:01:3e:55:7f:e2:76:ca:df:de:77:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Apr 17 01:00:32 2026 GMT
Not After : Apr 18 01:00:32 2026 GMT
Subject: CN=6327376ee91503f8a9ee8ad624bad3dc49ae3e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:ad:b6:ce:ce:48:e9:51:d3:a9:76:46:5e:
54:e3:4e:a3:cd:37:51:7b:f7:49:7a:4b:dc:c2:e6:
db:1b:3e:62:e7:df:d9:af:32:41:44:12:a5:4a:8e:
47:24:1d:36:01:74:ff:e4:bc:f6:58:2c:33:be:5f:
26:ff:b2:46:42:79:16:cd:18:0b:06:9e:c5:97:8d:
ce:84:5e:db:eb:60:84:8d:6e:ca:10:7a:9f:08:a1:
b5:fe:08:be:29:a4:8b:66:17:16:bd:d2:ce:b4:6a:
f5:25:e9:43:58:55:75:8e:7b:1f:de:2b:d4:14:0e:
29:f7:56:31:bf:67:64:ba:d9:16:a5:81:d0:02:d1:
d4:56:4d:81:06:37:e3:bb:64:cc:40:f5:de:80:e9:
2c:0a:c4:d6:6c:9b:e0:b9:bc:dd:ef:a3:49:c3:07:
4a:e1:13:cd:0a:cc:7f:37:a6:2b:84:59:5c:cd:2a:
90:48:ba:bd:93:30:c1:dd:bb:55:9b:14:77:ca:18:
1e:60:fd:ec:be:a0:2b:70:5a:13:99:b5:93:13:f8:
58:4f:f1:e7:fd:f0:47:41:4c:fc:fe:6d:e5:19:4c:
21:eb:35:0e:ed:aa:ff:bf:63:70:7a:51:d0:f7:f9:
70:3f:a0:83:a1:eb:84:94:bb:be:44:52:47:6d:bf:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:27:37:6E:E9:15:03:F8:A9:EE:8A:D6:24:BA:D3:DC:49:AE:3E:95
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:46:27:5c:90:a8:18:e1:f5:6c:27:5a:53:5b:05:70:67:91:
96:cb:3e:2c:d2:e9:3e:ff:b2:0f:a4:6d:9f:05:74:41:4d:8b:
e2:15:23:ef:96:a1:8a:b0:1c:ac:58:a8:cb:58:92:c7:d9:ed:
b1:2a:a8:fe:7f:38:0a:b2:b9:31:be:e3:75:da:8e:35:f4:99:
db:4c:b5:96:13:31:4f:34:e6:91:79:e5:69:94:a5:f5:52:51:
03:1c:2f:c1:13:ff:7f:af:a0:fc:1a:67:d5:e5:6c:1e:de:1c:
c9:5c:c6:00:7e:63:52:70:9f:e5:41:ec:a2:08:18:ef:41:69:
df:1a:cb:b3:c0:87:f3:e7:4a:7d:ab:42:d3:aa:ad:c4:07:7f:
71:4e:31:09:ab:6b:5c:0b:1f:c9:4f:15:6f:a7:f9:b4:8b:af:
06:6b:2d:02:b5:33:ed:42:22:45:d3:eb:85:ae:a1:a8:49:e7:
89:ce:7e:38:f3:f3:d3:7b:1e:44:64:5b:76:63:d0:70:f3:60:
e3:cd:cd:8d:3f:e5:95:99:17:ae:b6:f5:39:7e:80:3d:a7:dc:
ea:a3:c2:cf:18:f6:1a:ce:a1:56:76:88:be:a3:bc:36:5f:8c:
da:4d:8c:48:4e:ce:eb:43:37:92:68:e5:1b:6d:15:48:f8:ad:
10:25:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:58 2026 by rpki-client