Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: STK0h7y/iO8wzz+Vak5/SoywqP+RIk3S8VjltCocSAA=
Subject key identifier: FF:0B:8B:B1:61:9D:C9:05:9B:26:70:42:B5:F8:D0:79:EB:32:EE:6A
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 01A0C7468410D3DFC464FBAE70270D618E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 04:01:22 +0000
Manifest this update: Tue 22 Sep 2026 04:01:22 +0000
Manifest next update: Wed 23 Sep 2026 04:01:22 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 31k8uxpiCQPwo61ckaWOQFCAz20ZEYhX4pELKWeMgBQ=)
2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:84:10:d3:df:c4:64:fb:ae:70:27:0d:61:8e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Sep 22 04:01:22 2026 GMT
Not After : Sep 23 04:01:22 2026 GMT
Subject: CN=ff0b8bb1619dc9059b267042b5f8d079eb32ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:94:c5:63:e8:b6:2e:40:f2:0c:f1:24:ee:
08:c0:f4:18:03:1a:42:17:91:b5:e0:89:48:6f:93:
b7:23:dc:26:07:b3:1c:77:04:91:89:1c:fb:e2:d4:
8c:54:a7:8d:cf:70:e6:d6:eb:0f:6b:cf:d4:d5:e3:
62:14:94:39:83:ac:27:c7:86:0b:a1:6e:f0:ec:3a:
8f:bc:59:37:99:3e:1b:96:e2:39:db:07:5f:08:ab:
da:5d:c3:04:7c:f3:c8:55:57:b8:a3:dd:99:fe:bc:
9f:c8:be:04:90:50:86:65:8f:d4:8f:68:57:29:93:
7f:ae:67:01:62:24:1a:58:71:77:b1:5e:fb:0c:e4:
19:9b:87:5d:1d:e2:46:94:91:32:01:2b:0b:3d:92:
23:19:42:9b:de:f1:81:82:55:ef:68:73:37:8c:36:
9d:e0:4c:c9:6f:f0:b1:2d:50:3e:11:d9:4b:74:13:
69:c4:fd:e3:cb:80:95:9f:33:df:4d:69:35:4e:e5:
86:2c:06:1a:e6:28:d8:75:42:1f:ce:a0:30:63:ef:
49:d9:72:9a:87:11:7d:d2:e4:f3:b2:1c:eb:8d:a0:
d9:9b:d1:23:5c:d5:b4:2b:41:02:00:5a:10:29:c7:
e5:4e:21:8a:2e:c4:5b:34:2f:34:4e:39:64:8d:96:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:8B:B1:61:9D:C9:05:9B:26:70:42:B5:F8:D0:79:EB:32:EE:6A
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0d:3e:90:c6:28:7c:2b:35:36:b6:a0:6b:86:4b:f4:b0:91:
42:02:64:cf:8a:9b:56:b0:0e:f7:43:87:41:cc:90:25:75:be:
e2:d4:01:94:a4:aa:6b:f6:59:73:7a:25:a7:e7:01:65:37:23:
50:99:ae:90:b9:da:4e:eb:af:e6:e1:40:83:6f:8e:93:26:87:
ba:9b:7a:8e:a2:5a:17:41:5f:42:49:ed:2e:36:13:3e:b7:53:
4a:e7:c3:99:f0:45:50:7a:8a:aa:72:c5:f8:f5:a1:8c:3b:e0:
c0:57:3e:ec:24:4d:15:f7:a8:20:01:55:c9:fc:b8:4f:9e:c6:
a2:38:d6:37:62:ed:74:5f:cb:23:dd:10:64:30:8d:41:bd:c1:
96:7a:9b:b0:19:1f:b3:ad:af:5f:e4:f2:ac:bd:28:f1:01:da:
68:db:a8:9d:db:43:17:fb:ba:31:46:d0:df:ac:72:93:d0:30:
81:19:e0:40:f2:7e:82:22:b6:5d:cb:d1:56:51:ad:86:4b:83:
b9:ca:98:22:ae:96:5b:82:6b:d1:a1:5a:e4:03:b4:c5:73:5d:
97:82:ea:0b:01:3c:f7:61:73:23:4d:1e:a0:fd:40:e2:c0:c4:
fb:dd:2b:6c:95:55:ef:95:01:7b:63:4f:67:d1:01:25:f1:66:
04:ab:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:09:00 2026 by rpki-client