Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier: Fo7L8r1AL/yvq+kwPkVUMDp6P1LC6fwHxqHp9Pz2otg=
Subject key identifier: 04:54:83:B5:BA:E9:D9:0A:B6:A2:FF:79:2F:E3:2A:FC:12:FC:AE:81
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 019DA3E6651B8F6B49C8ABB89E70113CDEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number: 141F
Signing time: Sun 19 Apr 2026 04:01:18 +0000
Manifest this update: Sun 19 Apr 2026 04:01:18 +0000
Manifest next update: Mon 20 Apr 2026 04:01:18 +0000
Files and hashes: 1: _d8Zo_g7rmhKukVc2_yC6OHo_f8.roa (hash: W4kBrQ5vSikj88DUpuXxRFyq1wVLUOltrf0M4pqOt50=)
2: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: q7rG7ohY3EHcy3zcLANNrZs3ZbDcyVcfrURN26JEbYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:65:1b:8f:6b:49:c8:ab:b8:9e:70:11:3c:de:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Apr 19 04:01:18 2026 GMT
Not After : Apr 20 04:01:18 2026 GMT
Subject: CN=045483b5bae9d90ab6a2ff792fe32afc12fcae81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:8f:f2:dc:ca:42:99:9f:f1:8d:61:bc:27:
4e:f3:1b:f7:e0:b9:4e:7a:c5:29:b1:a7:04:35:85:
3d:ea:4a:88:18:b4:f3:53:b8:34:32:e3:a0:94:aa:
6b:b7:b0:64:5c:10:d2:c4:07:9a:3a:96:bd:45:c4:
02:11:33:44:78:38:15:2e:8b:16:40:94:a8:a5:7b:
48:e5:9e:25:84:f2:0e:01:2e:e1:21:77:32:7e:6b:
05:61:56:62:2d:ca:76:67:42:7a:b2:fb:8e:05:e9:
01:7f:9c:2e:99:8a:d7:ec:06:b2:80:a2:3e:95:cc:
b5:54:6c:19:df:55:b8:04:5e:56:e9:cc:07:1b:19:
11:b5:86:48:a9:c2:95:4b:02:32:32:8c:8c:0f:34:
98:25:c2:35:c6:af:c8:9d:df:20:b8:a9:08:4c:4b:
58:3c:be:61:53:6c:23:77:48:e3:d8:ef:4e:36:b7:
a0:9d:ec:7e:7a:3b:41:9f:7c:51:eb:b1:ae:83:63:
91:de:14:94:c9:5e:eb:a7:da:35:6d:5b:4e:2d:00:
ea:c5:22:b8:28:0c:74:36:1c:af:56:a9:b0:ad:2e:
e9:ee:be:6f:19:f8:9b:b0:cc:c1:24:c6:5f:d4:d0:
8e:4b:3a:50:93:34:7f:52:f3:86:59:13:61:89:ac:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:83:B5:BA:E9:D9:0A:B6:A2:FF:79:2F:E3:2A:FC:12:FC:AE:81
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:85:e6:9b:67:e3:32:81:4a:83:9a:89:ab:84:42:ab:90:7d:
62:92:f5:90:0b:43:c4:70:5e:2c:54:fd:e5:62:fc:4d:b0:ef:
d0:31:c1:d6:05:64:23:23:37:49:2a:32:df:c4:26:ab:5c:0f:
89:8b:7d:92:05:62:f4:eb:3d:1b:94:c2:4d:23:e5:3a:c5:4d:
eb:bf:10:23:ca:91:80:84:9e:39:81:c1:69:ca:97:ee:06:11:
d0:a5:1c:74:41:7e:de:9e:0c:2a:b1:69:f4:e6:a9:a5:e4:52:
fb:27:23:2d:0b:ed:2b:d2:52:e0:9a:55:2c:12:b1:cd:fe:b2:
9c:d7:ae:d8:b5:81:38:4c:39:48:98:57:7c:5f:b1:ea:6c:67:
fd:bc:60:72:b1:be:55:ae:0f:e3:60:64:01:97:c8:ba:8c:8f:
b7:d9:70:00:69:a9:71:6e:cd:bb:c6:49:ba:e1:b8:7b:02:d3:
c8:9e:70:8e:a2:bd:2a:3b:9a:97:8d:f2:48:58:2a:f6:5f:7f:
08:21:47:4c:9a:be:5e:d4:39:01:d3:9a:eb:f5:5d:91:24:e6:
09:9f:96:81:97:63:d4:f0:d6:f5:01:15:c9:5e:8f:9a:d0:be:
0c:2c:da:ff:b3:64:18:35:34:d5:dd:8f:bf:d7:9a:a5:58:6f:
9b:91:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:15 2026 by rpki-client