Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: 7r91NvhFXSxjnUB8bGmlcupe2OMrahiqG3lO+GbAQVk=
Subject key identifier: BB:79:E5:14:0C:AF:52:A4:13:FE:4D:C8:C0:25:93:3C:E2:80:48:CB
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 019D9A3E358E62BC736EF58D789ACB1C10AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: VooZVILPKW7FqTneAndtKq2ZYfcF5S+JWe2xpi+g/8E=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:35:8e:62:bc:73:6e:f5:8d:78:9a:cb:1c:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=bb79e5140caf52a413fe4dc8c025933ce28048cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:54:5d:8a:98:03:6b:89:cf:2e:03:ae:8f:
98:3e:ec:75:2e:f7:1f:ad:fb:39:ee:7c:a5:de:d0:
0b:9b:50:fa:f4:14:f2:39:47:b1:19:1b:a6:9a:65:
45:8c:28:ea:dd:7c:04:9a:98:47:11:57:04:2c:93:
bb:11:cc:07:78:14:42:30:0f:77:d9:64:72:cb:10:
6b:cf:5f:b8:9d:78:97:33:1a:83:68:7b:87:7d:2a:
da:20:39:c8:47:d7:b9:a1:57:2b:38:f7:46:d3:9b:
57:5c:e9:e1:17:5d:50:9c:36:2d:e1:eb:80:60:8a:
4c:e1:92:d8:87:b6:3c:51:ac:ed:cc:ef:ed:72:fc:
c3:76:51:89:a8:8e:8b:60:ec:de:93:6c:57:13:0a:
47:a8:f3:b1:02:5f:d9:7d:bd:86:dd:7c:26:4d:70:
a9:c1:c2:4c:6d:97:1e:3c:4f:de:ef:7b:d8:3a:17:
d4:0d:a1:b2:d4:e1:49:b2:bf:da:42:91:22:ff:e7:
7d:10:43:74:c4:2e:28:d1:44:c5:18:2c:1c:b7:d6:
50:76:99:83:71:fc:d1:1e:0c:1e:cf:34:31:1e:cd:
58:e9:df:b1:8b:f8:d3:27:db:49:cf:b0:8b:00:a6:
64:b0:ed:6f:87:b7:bc:dc:2f:46:98:6b:ae:12:69:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:E5:14:0C:AF:52:A4:13:FE:4D:C8:C0:25:93:3C:E2:80:48:CB
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:60:8f:a4:f1:03:d9:e6:5e:84:8c:7e:78:7d:76:3b:4c:e7:
5c:18:e8:11:f2:b6:bf:02:98:ac:8c:a3:a0:0a:aa:cb:58:3f:
05:ae:11:ab:03:f5:23:b2:fb:fa:d4:cd:d1:23:96:1b:b8:42:
7d:1c:51:38:3e:ef:61:0e:42:a1:4c:fa:cc:64:0d:80:d2:60:
06:14:4c:c8:fe:39:dd:1f:06:27:0f:6a:7f:32:b9:a9:1a:fe:
e2:22:61:25:c1:b4:a8:34:4e:4d:23:9c:7c:80:f9:02:09:00:
21:52:07:fe:87:8e:2f:fd:5e:da:3a:f1:97:1d:be:c5:d9:59:
72:0d:d3:a1:26:ca:02:2f:5b:3f:e7:41:11:88:a0:4f:c8:7f:
47:ed:86:67:b9:70:00:37:ea:73:8f:4b:4b:92:9a:f7:17:dc:
7a:24:bf:a0:8d:dc:d9:16:74:2a:ee:00:c4:ee:4c:5c:5d:8c:
0c:f7:fd:2c:34:9d:6c:80:e4:fc:10:b3:08:81:8c:02:9b:4d:
37:95:1e:3e:18:3d:32:be:2e:75:60:22:c0:dc:ea:a6:67:a0:
82:ff:df:fd:33:0e:85:0d:26:1b:f2:5a:6b:01:f0:f4:5d:1e:
e9:45:c4:a8:bc:39:f1:04:bd:1f:ae:17:e4:4b:ee:2c:d0:73:
86:31:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:30 2026 by rpki-client