Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: gadH0OAjnnzi4LKULTAlTCm3TGsRl6/X2HPr6aql7e8=
Subject key identifier: BD:5E:7A:85:C7:2A:A1:57:E0:2D:44:9C:EE:A9:AC:2E:C9:44:20:AB
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 01A0C3690A226FB97F86F6937CE85DDDD7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 10:00:35 +0000
Manifest this update: Mon 21 Sep 2026 10:00:35 +0000
Manifest next update: Tue 22 Sep 2026 10:00:35 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: edNJwSBfUGcv6PcqvHp078IEl92VVxrLwVXASVOt2c4=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:0a:22:6f:b9:7f:86:f6:93:7c:e8:5d:dd:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Sep 21 10:00:35 2026 GMT
Not After : Sep 22 10:00:35 2026 GMT
Subject: CN=bd5e7a85c72aa157e02d449ceea9ac2ec94420ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:67:42:27:e5:1d:3d:d5:6a:1c:ab:de:ac:
54:a8:50:53:04:ff:ce:86:5f:27:f3:42:fa:18:6f:
13:ab:93:0e:09:b1:b7:89:e5:7c:64:90:f1:d5:74:
c5:d7:c3:6d:ed:be:fa:5f:e1:a8:9b:2d:b0:52:cc:
00:1a:fb:b1:e0:d8:fe:ec:9f:de:a3:f9:33:c1:65:
ee:af:56:21:28:c2:32:27:b6:9e:52:35:f1:e2:e9:
64:a6:48:55:7a:cc:16:90:b4:86:4a:1f:65:5b:91:
02:60:01:55:7f:e7:62:26:d1:59:d1:9c:f1:8e:96:
17:ae:75:fb:3d:f1:a6:9e:f8:38:c6:f7:68:15:99:
37:65:7e:85:21:2c:cf:46:ef:16:75:ed:f6:91:0c:
6b:18:a0:6d:b3:4b:37:3f:1d:3b:97:21:62:f9:34:
f2:fa:ab:ad:d0:73:33:f4:b1:fd:73:64:ce:6e:5e:
e3:66:a9:09:ed:2b:bf:68:85:8d:e8:97:d2:3f:20:
fb:37:9a:0a:c7:d6:f6:1a:ba:be:08:04:89:a4:59:
97:c2:78:4c:98:ef:4e:d9:e1:e3:b4:de:aa:7e:e7:
28:7a:a1:fa:32:b6:1b:68:ae:5a:ae:84:33:b9:f0:
62:a0:7a:3f:07:a9:67:aa:c8:79:a8:26:5b:24:f7:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:7A:85:C7:2A:A1:57:E0:2D:44:9C:EE:A9:AC:2E:C9:44:20:AB
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d7:02:02:aa:41:c1:0b:b6:8e:74:c8:d1:6b:bf:f4:88:d4:
91:12:cf:32:ed:a9:a4:9d:f8:9a:cd:11:df:37:5e:15:74:c9:
7c:24:dd:44:85:8d:76:81:1b:42:d6:5d:dd:bf:6c:0c:24:27:
2a:f1:3c:d7:fc:5e:4f:1b:18:7e:d7:89:27:9b:03:7c:85:f0:
51:ce:20:15:93:66:1f:9b:e3:64:31:6e:de:78:ac:02:ad:ee:
f1:d6:bb:a5:16:07:91:9f:36:f5:5b:0f:3c:bc:04:93:0b:7e:
18:c9:2d:f9:9e:e7:bf:69:8b:73:3e:ec:ae:3c:0c:1a:af:d7:
a0:2e:c6:9c:0f:6d:e1:74:2d:0a:44:76:74:64:fc:ef:ac:f3:
ba:d2:5d:36:04:37:a3:a7:b0:ab:5c:46:da:cd:3c:af:d3:5e:
a3:c8:d9:2e:16:f5:cc:66:1c:38:5e:b2:f5:ac:f4:4f:61:fd:
93:42:ad:a1:13:0b:87:51:b3:b1:a8:91:01:de:2e:0b:6f:a5:
7e:19:19:bc:a2:60:c9:04:55:d3:25:6f:1d:f5:15:64:93:1d:
3b:cd:9c:b9:4b:d4:ef:43:eb:b0:e6:37:50:36:9e:7f:f5:2f:
83:78:25:3b:17:91:88:2c:d1:82:b2:be:d2:b7:07:7b:b8:7a:
f8:e6:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:42:13 2026 by rpki-client