Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: AwSPjeSKCHbHolWnKACjNYRJGWnOJ4p1wreX1TWZGso=
Subject key identifier: 30:E0:DB:F9:EC:E9:25:6F:8D:EE:14:3F:63:86:09:8D:1F:F3:8D:6A
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019FA9759710CA5DE09A2E6B25FF86422847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 16:01:23 +0000
Manifest this update: Tue 28 Jul 2026 16:01:23 +0000
Manifest next update: Wed 29 Jul 2026 16:01:23 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: sm+ew3qieQoSMsB7OOpgODC/UCiMFCFBjb0rDPrpe6E=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:97:10:ca:5d:e0:9a:2e:6b:25:ff:86:42:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jul 28 16:01:23 2026 GMT
Not After : Jul 29 16:01:23 2026 GMT
Subject: CN=30e0dbf9ece9256f8dee143f6386098d1ff38d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:fd:5b:17:57:f4:50:af:9d:76:01:9c:60:
88:34:51:80:6f:fa:88:71:50:5c:97:83:59:ae:e3:
81:7d:4f:31:c2:98:64:1f:94:70:7c:1f:53:f1:85:
6d:84:c0:d2:b0:20:41:1b:4f:d8:0b:02:23:2c:a0:
54:fc:95:f7:14:59:4e:97:24:07:d2:21:72:3d:7a:
aa:91:45:2b:01:e6:f4:96:cc:3a:6f:2d:7a:9c:6b:
42:87:d7:ca:bd:f5:b8:6e:df:d7:85:a3:3b:65:b8:
af:0e:2c:58:82:19:0b:7f:02:dc:46:4e:69:9c:74:
7b:5f:fc:41:68:26:57:fb:e3:1a:09:ab:87:31:77:
14:c4:26:24:af:e0:bc:54:cb:c8:a8:61:4c:b5:c0:
02:4b:55:19:25:ea:1a:20:f8:9c:aa:7f:e2:fb:31:
1e:17:0c:11:62:1b:f5:2b:0c:66:38:67:1f:fc:5b:
31:f0:b5:21:ae:2a:f5:2f:9d:a0:70:fd:f0:8a:4b:
6e:38:74:e5:0b:2e:0e:54:fe:f1:3a:fb:38:d7:0e:
44:b8:4d:6d:c9:55:3f:f0:97:c2:81:1c:f9:a4:3e:
2c:75:16:b4:d8:b8:73:5d:76:b1:bb:a6:a7:47:ff:
3e:18:80:aa:27:89:4d:f7:53:49:ca:c8:0f:c6:99:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E0:DB:F9:EC:E9:25:6F:8D:EE:14:3F:63:86:09:8D:1F:F3:8D:6A
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a8:be:92:13:e2:60:20:2f:79:0c:1b:35:a6:ac:42:c6:cc:
ad:35:32:bc:04:a1:41:56:32:ee:17:de:fb:16:0a:a6:fd:84:
1a:ec:53:b3:63:72:3a:fa:5c:3f:10:39:6e:20:27:6d:28:d6:
ce:21:fb:3c:de:bb:ce:20:02:d4:dc:d5:84:37:75:c6:d1:c6:
34:71:37:88:66:a1:5e:4a:ad:29:6d:aa:22:ec:42:31:53:5a:
1c:c1:31:04:f4:f6:76:c5:3b:56:b8:79:a9:13:c1:e9:23:f8:
20:87:f3:b3:b7:6c:6a:fd:b0:63:4a:f6:b8:97:b3:cb:c2:65:
64:1b:04:ed:5f:dd:97:af:03:52:cd:42:ce:27:e2:65:45:b5:
c2:69:f2:02:3b:1b:b0:5d:f5:42:f6:0c:6a:35:14:82:55:b8:
da:0d:ac:52:a9:98:f3:70:b4:ea:e4:4b:35:e9:29:72:a9:60:
b5:64:b7:73:5b:0f:99:1c:3f:45:e7:37:06:41:80:a5:8a:a9:
83:bb:ab:9a:d5:5c:78:c8:77:21:42:a1:5e:5c:b0:f2:4c:39:
4d:bb:8f:94:1b:5b:8b:8a:ba:da:d8:1a:58:b0:d2:df:c4:f4:
bc:23:08:27:04:e6:0e:76:07:7f:8d:92:34:16:a5:df:e2:53:
9d:d0:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:29 2026 by rpki-client