Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: uCT7Y3SvyKBo8gKFE+G9ASL6/xN68TY3TeRKFbeEJaI=
Subject key identifier: 84:7E:96:5A:BB:43:05:6D:33:D4:C8:10:1B:FA:DA:1A:79:60:B2:E7
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 019FA974AB028730E541DD3BE94E0EE2CD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 16:00:23 +0000
Manifest this update: Tue 28 Jul 2026 16:00:23 +0000
Manifest next update: Wed 29 Jul 2026 16:00:23 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 5WwyDljsAVr+8JFnkYVtNOV4uYX5jW+C2kKWHU8ss7Q=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ab:02:87:30:e5:41:dd:3b:e9:4e:0e:e2:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Jul 28 16:00:23 2026 GMT
Not After : Jul 29 16:00:23 2026 GMT
Subject: CN=847e965abb43056d33d4c8101bfada1a7960b2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:29:80:32:c4:fc:0d:82:54:2e:dc:4d:84:
2a:97:9e:41:b1:d8:e8:f8:57:9e:08:7f:ff:87:bc:
9a:f4:bc:10:94:9f:ad:f4:ba:be:57:d4:38:e1:53:
e7:a8:cc:36:d8:c1:2f:6a:8f:8f:92:44:88:de:6c:
08:0c:bb:fc:21:66:02:f1:b6:b4:00:05:98:96:57:
87:3e:06:a7:ca:9d:ef:e2:30:13:76:78:d0:07:a7:
e3:f3:63:7f:0c:c1:b1:24:a9:af:92:ce:d7:b6:f6:
45:56:fa:a5:e5:3c:e8:9d:c8:77:bd:ab:1a:05:ad:
8d:be:62:5c:b0:bd:b8:89:9b:34:11:b0:a9:57:bd:
73:72:55:dd:fe:7e:8f:c1:ca:9c:df:e7:d2:56:5b:
e4:ea:5d:63:76:cd:4e:09:cc:23:43:37:8f:0f:7e:
b6:4b:64:d7:bf:71:a8:e1:d2:0c:7e:c4:6f:6f:b4:
fa:27:33:ea:e2:7c:28:c7:83:39:bf:62:af:0c:c2:
6e:4f:35:f7:21:fc:59:13:84:56:8f:76:2d:eb:65:
9d:61:44:a8:35:a1:89:cb:5e:23:02:86:e4:3b:5b:
d8:73:47:cd:2d:26:a9:37:0a:c6:da:bf:68:72:44:
47:81:bf:e5:ad:6c:9a:55:0d:78:fd:e9:de:49:81:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:96:5A:BB:43:05:6D:33:D4:C8:10:1B:FA:DA:1A:79:60:B2:E7
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:33:03:b4:eb:2e:30:c2:29:46:53:98:b6:4d:0e:0f:51:32:
99:97:21:39:d8:65:12:30:b5:cc:ce:9e:a7:84:32:f0:54:21:
d8:eb:3a:b2:20:13:b2:b9:8a:72:1d:71:36:87:04:4c:91:f1:
07:86:70:5e:0a:b7:ad:df:e3:d5:7f:0a:fb:7b:b7:c5:4a:b9:
a6:47:00:66:b0:14:01:a8:b6:37:e5:b6:e3:80:f4:b1:c4:08:
15:02:42:46:37:c1:6d:73:35:e5:21:b6:f4:f1:7d:2d:a4:a0:
a5:04:43:92:94:c6:c1:22:f2:27:b1:e9:b0:9d:78:00:14:84:
ee:a9:8a:ab:81:e8:a8:27:f6:de:a2:88:3e:bc:22:ab:e2:94:
84:5a:c7:ba:1e:6c:38:5a:82:4c:4b:fd:b9:ef:65:64:88:f8:
73:a7:6d:48:72:8d:ac:03:aa:12:66:93:01:bd:42:0f:ea:8f:
04:30:c2:e1:2d:b3:75:f5:88:45:c5:1b:00:4a:f4:f9:b8:9c:
a0:f2:68:d5:7a:c1:a0:fe:6c:3d:c9:f2:3d:94:55:58:b9:43:
c7:ef:07:19:3b:c4:d9:77:3f:c4:f2:e4:ea:10:58:cb:f7:3d:
37:b4:b4:ad:47:ac:5a:e3:79:ad:50:2a:9c:2a:bb:ba:ff:77:
bb:87:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:06:23 2026 by rpki-client