Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: fZ++Rah7G53LFS+ewGlkI1NCVZk1ld0XJtmcbCD8bH8=
Subject key identifier: D0:D7:94:8B:C0:06:15:3F:62:5B:B1:93:02:3E:78:C7:90:83:25:0F
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 01A0CB228643F5CDF4CB3614177B1CE69AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 22:00:32 +0000
Manifest this update: Tue 22 Sep 2026 22:00:32 +0000
Manifest next update: Wed 23 Sep 2026 22:00:32 +0000
Files and hashes: 1: 9pt3MDCay7srVLLtOW6VihLRgqg.roa (hash: t8waBrYlHxhkv2G7wxFbB2b8tWVcdcespy2BiSBs4U8=)
2: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: zjofI3aWGFSYQcVFhalsw4EI2RrHh11VCyJ9rByXqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:86:43:f5:cd:f4:cb:36:14:17:7b:1c:e6:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Sep 22 22:00:32 2026 GMT
Not After : Sep 23 22:00:32 2026 GMT
Subject: CN=d0d7948bc006153f625bb193023e78c79083250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:a3:f7:b7:e9:66:66:2e:d2:cf:4c:ab:14:
08:0d:fb:12:a8:4d:45:b1:01:dc:ec:ef:b0:b9:7a:
88:d8:55:32:a8:1c:02:dc:2c:5d:b7:0f:9b:82:e0:
88:91:9f:78:e4:f1:9e:ca:4a:64:f9:8f:dd:3a:d5:
1a:f6:a3:50:dd:86:50:4c:50:a0:57:6b:a9:bd:36:
58:b6:44:79:ee:d2:b1:eb:a8:c6:0d:6c:a1:c1:f6:
da:29:2e:e2:11:75:29:78:7f:ae:71:64:22:aa:a9:
84:69:e7:7e:fa:f1:7e:e4:2b:be:f4:b3:1e:3b:fb:
f1:1a:29:c0:4d:8b:74:84:c0:28:73:77:cf:35:ab:
46:5b:5a:a2:ac:17:a8:28:b8:cb:47:54:9f:79:fe:
f6:e8:31:40:61:04:50:96:6a:b5:b6:bd:68:31:60:
c0:76:84:3e:1e:1f:20:38:28:d0:26:62:70:2c:60:
4a:a3:c7:b1:da:b0:07:4f:a6:02:c3:45:8c:2d:b5:
f8:b1:e9:4d:e5:de:b8:a1:48:05:d3:c4:a4:27:e0:
57:3c:f0:6e:99:2b:6d:53:b6:e3:3b:c7:56:50:81:
ff:52:7d:0d:72:24:6d:d4:b4:93:f2:87:32:79:c6:
17:07:00:b2:d2:fd:ba:e9:8f:3d:77:ba:9f:f0:ef:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D7:94:8B:C0:06:15:3F:62:5B:B1:93:02:3E:78:C7:90:83:25:0F
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:51:9e:6e:41:fa:df:ea:b9:7b:19:d2:83:8e:fa:c7:30:3b:
50:3d:ab:24:51:55:9d:54:da:44:8d:69:20:66:73:26:5c:bc:
65:a3:e9:8c:5e:8e:bf:e1:f1:4d:35:2a:6f:d2:4b:66:9d:95:
28:13:88:f8:e8:f7:46:de:f5:cf:14:a6:f4:5d:13:2e:77:26:
93:fd:49:dc:6c:17:68:db:5e:a2:95:db:c3:e6:ae:38:7f:5a:
b9:df:f5:9f:58:f0:94:27:57:5a:cb:b3:15:19:fa:cd:17:fa:
54:4f:f9:45:22:f9:1a:ff:10:74:36:06:f8:ca:78:3d:b4:06:
2b:1b:b5:03:0f:fd:29:b3:27:09:57:09:c4:fe:c6:74:b3:54:
c7:30:76:b3:3b:bb:9e:6f:3b:29:55:2d:ca:0d:e8:0a:d4:3e:
ef:a4:fa:cb:5b:e2:29:f9:8a:68:ac:bb:16:75:0f:36:0d:96:
a3:3e:68:0a:19:6d:d2:b3:83:d2:e9:3c:fc:02:4f:b8:90:b8:
01:5c:0e:0c:3e:7f:54:ea:31:a1:ee:d8:6c:7b:39:5f:46:6c:
a4:2e:3f:e5:7f:db:64:df:78:bb:c1:5e:89:59:b1:b7:7b:33:
3f:63:b1:d3:b2:e4:78:9a:06:21:14:5c:a2:a5:1b:59:11:e5:
c7:a8:ab:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIoZD9c30yzYUF3sc5pquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZTJiYTVjYzE1MGIzNTNjYmQzNGI5ZjA0NWVhMDUwOTc0
MDg0NGQwHhcNMjYwOTIyMjIwMDMyWhcNMjYwOTIzMjIwMDMyWjAzMTEwLwYDVQQD
EyhkMGQ3OTQ4YmMwMDYxNTNmNjI1YmIxOTMwMjNlNzhjNzkwODMyNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK6j97fpZmYu0s9MqxQIDfsSqE1F
sQHc7O+wuXqI2FUyqBwC3Cxdtw+bguCIkZ945PGeykpk+Y/dOtUa9qNQ3YZQTFCg
V2upvTZYtkR57tKx66jGDWyhwfbaKS7iEXUpeH+ucWQiqqmEaed++vF+5Cu+9LMe
O/vxGinATYt0hMAoc3fPNatGW1qirBeoKLjLR1Sfef726DFAYQRQlmq1tr1oMWDA
doQ+Hh8gOCjQJmJwLGBKo8ex2rAHT6YCw0WMLbX4selN5d64oUgF08SkJ+BXPPBu
mSttU7bjO8dWUIH/Un0NciRt1LST8ocyecYXBwCy0v266Y89d7qf8O+H4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDXlIvABhU/YluxkwI+eMeQgyUPMB8GA1UdIwQY
MBaAFHbiulzBULNTy9NLnwReoFCXQIRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMWQyZWQtOGUyZi00ZmE5LTgzY2Et
NzA0MDVlMzUyOGFmLzEvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMWQyZWQtOGUyZi00ZmE5LTgzY2EtNzA0MDVlMzUyOGFm
LzEvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFGebkH6
3+q5exnSg476xzA7UD2rJFFVnVTaRI1pIGZzJly8ZaPpjF6Ov+HxTTUqb9JLZp2V
KBOI+Oj3Rt71zxSm9F0TLncmk/1J3GwXaNteopXbw+auOH9aud/1n1jwlCdXWsuz
FRn6zRf6VE/5RSL5Gv8QdDYG+Mp4PbQGKxu1Aw/9KbMnCVcJxP7GdLNUxzB2szu7
nm87KVUtyg3oCtQ+76T6y1viKfmKaKy7FnUPNg2Woz5oChlt0rOD0uk8/AJPuJC4
AVwODD5/VOoxoe7YbHs5X0ZspC4/5X/bZN94u8FeiVmxt3szP2Ox07LkeJoGIRRc
oqUbWRHlx6ir0g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:14:32 2026 by rpki-client