Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
File: duK6XMFQs1PL00ufBF6gUJdAhE0.mft (raw, json)
Hash identifier: Q2wPEcURtBGYyhHqCH+M7HKx4YaiqSnnLpuRQB050Co=
Subject key identifier: 92:BB:7F:2B:CC:8F:7C:20:10:85:59:8A:50:47:B6:33:F9:AD:43:4E
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 019EC3A5B0E2306905408400F61A854F8C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 01:01:16 +0000
Manifest this update: Sun 14 Jun 2026 01:01:16 +0000
Manifest next update: Mon 15 Jun 2026 01:01:16 +0000
Files and hashes: 1: 9pt3MDCay7srVLLtOW6VihLRgqg.roa (hash: t8waBrYlHxhkv2G7wxFbB2b8tWVcdcespy2BiSBs4U8=)
2: duK6XMFQs1PL00ufBF6gUJdAhE0.crl (hash: uK/7hjkZtUTq3fLKtON4bVFiTUvEkDCIaMEKNDCafog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:b0:e2:30:69:05:40:84:00:f6:1a:85:4f:8c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Jun 14 01:01:16 2026 GMT
Not After : Jun 15 01:01:16 2026 GMT
Subject: CN=92bb7f2bcc8f7c201085598a5047b633f9ad434e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:dc:5b:a6:61:47:06:69:e3:c5:d2:b4:fd:
9a:a7:60:8e:35:9a:a2:b4:b8:02:a0:23:30:69:22:
91:25:28:11:ce:fb:a9:96:29:3a:b0:7e:bf:4c:22:
7a:19:86:dd:e5:89:70:18:70:f5:53:ac:d6:2b:81:
02:27:c9:bb:47:90:6d:bf:25:33:da:4a:cd:21:ae:
1e:ad:75:5b:b6:b4:c5:4b:3d:e7:6f:97:9d:9e:73:
38:12:f5:ee:2c:a3:93:9d:9e:b8:af:8d:f4:e1:82:
04:60:ad:7f:aa:16:97:2b:8e:00:46:ea:4d:70:3d:
9f:49:0e:cc:6f:90:db:6e:19:72:f7:02:9b:54:92:
3c:aa:05:97:aa:c5:fa:83:cf:f1:d8:c0:72:4a:ff:
19:0d:1d:94:8d:96:e1:8e:bd:e2:4e:f2:86:00:2e:
21:9f:ff:e9:8f:7a:88:ef:d1:3e:51:48:c3:90:66:
cc:9f:5c:f9:89:e9:06:8d:cb:b5:8e:74:fe:9e:b6:
9a:eb:9e:ca:c8:ea:76:47:04:d9:09:23:5f:25:33:
29:a7:d7:23:02:20:10:8f:ec:49:6c:a5:f2:d9:8c:
00:fd:bb:d7:b8:08:fb:8f:0c:08:c7:3e:90:a4:df:
6e:4e:2f:eb:cf:75:d7:bc:fc:00:2c:70:b4:72:f5:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BB:7F:2B:CC:8F:7C:20:10:85:59:8A:50:47:B6:33:F9:AD:43:4E
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1a:65:60:67:a1:21:1a:36:69:93:6c:c0:71:b8:2c:9b:a1:
59:c0:3b:d4:d8:0d:0c:b5:de:0b:a6:03:aa:16:1c:b9:ac:c9:
be:d7:e5:5a:09:db:43:57:0d:7d:a5:c1:c1:03:b3:6b:28:37:
f5:14:93:1d:bc:67:b7:36:31:c0:e1:b3:12:5e:d3:e8:e9:3b:
ac:05:c6:d2:1d:cf:ff:2d:d3:56:9f:fd:01:c9:a1:3d:10:aa:
f1:a4:b8:db:ce:12:a8:9d:6c:b1:92:98:32:b3:b9:f3:db:a0:
36:2c:91:ec:dc:d8:06:74:56:13:98:73:5a:62:97:b8:ab:84:
37:a6:fe:1b:6b:62:ba:f7:3c:05:f1:14:21:dd:7e:c9:2e:7a:
33:74:0b:26:17:42:ef:b4:08:54:de:b8:00:65:d7:c7:5d:9c:
1b:c4:ac:c3:fc:84:83:7e:3e:08:d1:ca:7e:09:06:ee:c0:5f:
7f:9d:23:83:59:bc:a9:77:85:66:ab:bd:51:9d:30:79:b1:f0:
09:80:bc:99:7d:e4:09:84:9e:c9:9c:2b:58:e0:65:4e:9a:ef:
9b:fa:c6:e5:1e:06:71:08:76:a0:93:f6:2b:64:44:db:fb:db:
31:32:87:4b:eb:81:38:5e:f9:52:b8:d7:9c:4c:b7:37:f3:b5:
65:d1:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:42:26 2026 by rpki-client