Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: 4oJF7j/gCF6b037urjsWOramZTmmMPrcomlxgiN583M=
Subject key identifier: B8:60:22:2F:38:FC:BF:36:E7:5C:FA:B0:20:5E:8E:B1:27:73:70:F2
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 019FAD521DD3C7D85DEC6064302ACE4BC692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 10:01:07 +0000
Manifest this update: Wed 29 Jul 2026 10:01:07 +0000
Manifest next update: Thu 30 Jul 2026 10:01:07 +0000
Files and hashes: 1: 9pt3MDCay7srVLLtOW6VihLRgqg.roa (hash: t8waBrYlHxhkv2G7wxFbB2b8tWVcdcespy2BiSBs4U8=)
2: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: c8h/D+Ym44K/fXsv+diTB7+GMAqFREGix+2HahsLq0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:1d:d3:c7:d8:5d:ec:60:64:30:2a:ce:4b:c6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Jul 29 10:01:07 2026 GMT
Not After : Jul 30 10:01:07 2026 GMT
Subject: CN=b860222f38fcbf36e75cfab0205e8eb1277370f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:51:ba:d7:ed:54:d0:2f:8a:aa:80:ed:f9:
f3:d4:01:ac:76:ea:d7:5f:fe:f8:6a:a6:d3:88:bf:
dc:14:63:ac:25:3e:35:4e:65:e1:4c:06:a7:2b:31:
58:9d:fe:2e:aa:73:4c:53:e7:b1:76:ca:a9:ad:7f:
cb:29:88:5e:3b:f2:53:4a:a8:0b:f6:86:2a:2a:6e:
4b:fb:9a:e7:42:1c:5d:c3:db:7a:e0:1e:19:af:40:
d5:87:de:d7:e1:0c:b1:a5:0f:54:d7:ac:da:84:60:
f9:1d:0b:a4:2f:25:fe:b1:53:a1:e4:16:a8:79:d0:
9f:b4:96:f9:73:b1:95:9a:11:ed:bc:b8:88:88:16:
37:02:f0:ee:26:5b:02:cd:5a:dc:e2:de:fd:f1:57:
22:80:e1:db:07:2c:28:d1:54:bc:54:ad:b1:71:b2:
bb:21:5c:30:95:8a:63:d4:c8:fc:87:dd:39:d5:df:
6d:d9:1a:1f:e3:17:c6:1e:0e:c5:22:de:8c:53:74:
2e:c3:30:bf:71:ad:97:ca:d4:d0:9d:4f:e9:7c:0c:
d7:f7:11:26:ce:29:39:a1:9a:86:bc:ef:15:4e:0d:
ec:17:1e:ec:07:34:c0:c2:0e:b4:1e:41:0a:3f:d3:
e9:ba:87:a7:b2:09:dd:1f:ed:c4:a0:cd:e8:4c:81:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:60:22:2F:38:FC:BF:36:E7:5C:FA:B0:20:5E:8E:B1:27:73:70:F2
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:30:ab:7e:c1:82:57:2e:d3:b5:7b:12:0d:dc:f2:72:60:
3a:94:b8:01:94:95:e1:e8:9d:4d:fd:03:0c:e0:c9:6a:0a:1d:
90:47:72:d7:e6:1f:34:22:0e:1a:72:17:d4:1f:45:a9:bd:b2:
5d:f0:4e:e3:88:44:e3:e0:90:fd:3d:8e:20:a4:39:47:5d:97:
ba:24:4e:76:52:f9:bb:a0:23:3c:8b:23:35:fc:d3:c9:fe:f8:
b7:30:90:73:67:e4:fb:85:36:42:d9:62:9c:6f:dd:f1:0b:65:
31:94:05:4a:c0:c6:87:5f:37:af:55:1b:db:b1:ae:68:f9:3b:
5f:ff:96:d9:98:1c:5f:53:8e:36:d1:7e:ed:39:d5:5c:79:46:
a5:39:d7:d3:a0:30:52:37:f4:0a:7c:3b:9c:8f:2e:10:eb:3f:
01:8b:c5:f8:59:b0:23:c6:3a:12:85:03:df:1c:ce:dd:ad:1e:
c2:a6:72:50:e3:8a:e1:a8:b4:09:e6:8d:e6:75:58:e6:2e:ef:
ae:72:b6:ca:c4:cc:ff:bc:f2:96:c2:37:c1:71:0c:fb:a1:c4:
54:3c:c9:34:71:28:04:3a:2b:c4:b0:82:3e:22:c9:3a:f8:a6:
9f:ad:ff:c5:a2:f1:21:e0:8c:a2:30:e3:ba:d2:40:54:f7:3f:
c6:c0:10:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUh3Tx9hd7GBkMCrOS8aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZTJiYTVjYzE1MGIzNTNjYmQzNGI5ZjA0NWVhMDUwOTc0
MDg0NGQwHhcNMjYwNzI5MTAwMTA3WhcNMjYwNzMwMTAwMTA3WjAzMTEwLwYDVQQD
EyhiODYwMjIyZjM4ZmNiZjM2ZTc1Y2ZhYjAyMDVlOGViMTI3NzM3MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjpRutftVNAviqqA7fnz1AGsdurX
X/74aqbTiL/cFGOsJT41TmXhTAanKzFYnf4uqnNMU+exdsqprX/LKYheO/JTSqgL
9oYqKm5L+5rnQhxdw9t64B4Zr0DVh97X4QyxpQ9U16zahGD5HQukLyX+sVOh5Bao
edCftJb5c7GVmhHtvLiIiBY3AvDuJlsCzVrc4t798VcigOHbBywo0VS8VK2xcbK7
IVwwlYpj1Mj8h9051d9t2Rof4xfGHg7FIt6MU3QuwzC/ca2XytTQnU/pfAzX9xEm
zik5oZqGvO8VTg3sFx7sBzTAwg60HkEKP9PpuoensgndH+3EoM3oTIEJMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhgIi84/L8251z6sCBejrEnc3DyMB8GA1UdIwQY
MBaAFHbiulzBULNTy9NLnwReoFCXQIRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMWQyZWQtOGUyZi00ZmE5LTgzY2Et
NzA0MDVlMzUyOGFmLzEvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMWQyZWQtOGUyZi00ZmE5LTgzY2EtNzA0MDVlMzUyOGFm
LzEvZHVLNlhNRlFzMVBMMDB1ZkJGNmdVSmRBaEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ60wq37B
glcu07V7Eg3c8nJgOpS4AZSV4eidTf0DDODJagodkEdy1+YfNCIOGnIX1B9Fqb2y
XfBO44hE4+CQ/T2OIKQ5R12XuiROdlL5u6AjPIsjNfzTyf74tzCQc2fk+4U2Qtli
nG/d8QtlMZQFSsDGh183r1Ub27GuaPk7X/+W2ZgcX1OONtF+7TnVXHlGpTnX06Aw
Ujf0Cnw7nI8uEOs/AYvF+FmwI8Y6EoUD3xzO3a0ewqZyUOOK4ai0CeaN5nVY5i7v
rnK2ysTM/7zylsI3wXEM+6HEVDzJNHEoBDorxLCCPiLJOvimn63/xaLxIeCMojDj
utJAVPc/xsAQQA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:18 2026 by rpki-client