Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: ypXrmx9QZSXwN8QBuQCcJbp1mltB87PnhxBcKJToqho=
Subject key identifier: 2B:10:46:44:5A:5B:A2:89:A7:86:B6:9E:F6:50:E6:85:CE:B5:D7:54
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 019D9D083D2A7B11A1CDE3EB7A80C6758076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 0289
Signing time: Fri 17 Apr 2026 20:00:56 +0000
Manifest this update: Fri 17 Apr 2026 20:00:56 +0000
Manifest next update: Sat 18 Apr 2026 20:00:56 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: /cHvoi0e1qFMfmMxT+v8NDtiHysjZTvYw2DTCS2LocY=)
2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:3d:2a:7b:11:a1:cd:e3:eb:7a:80:c6:75:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Apr 17 20:00:56 2026 GMT
Not After : Apr 18 20:00:56 2026 GMT
Subject: CN=2b1046445a5ba289a786b69ef650e685ceb5d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:90:4f:88:46:c5:b4:bd:7e:37:18:03:d8:
76:06:99:fa:0e:9d:44:a7:4e:f8:54:fc:9f:62:7a:
37:77:07:28:69:06:b1:be:41:4a:f6:92:f8:62:22:
ca:4b:be:74:c4:51:da:95:06:70:cf:77:d8:9a:8f:
ce:fe:c6:fd:03:b5:48:b5:81:49:07:23:c6:c7:e0:
7b:51:66:e2:b5:7a:e6:77:68:dd:d7:79:db:5d:92:
b6:98:f8:23:c5:66:6c:d2:66:f7:b0:61:2b:9d:d4:
b7:cb:c0:28:db:5e:51:e5:ce:69:5d:d7:87:b7:62:
89:94:02:bb:21:e9:ab:5d:bb:bd:8c:af:25:db:79:
a3:42:1c:6a:39:7d:96:2e:12:92:76:f2:0e:31:b6:
34:3b:13:f5:e9:90:e9:9f:24:96:83:4e:3b:65:2f:
f6:b1:b7:3a:dc:ce:9e:27:44:08:eb:26:14:88:b8:
1c:90:ac:ef:87:d8:98:a7:5d:6d:40:c6:09:f3:1d:
51:ce:cd:42:f1:c8:ec:07:2c:cc:7d:31:8b:55:d2:
8b:22:84:3c:63:0b:0e:30:f2:79:fd:ac:36:d2:1d:
f8:8e:f0:6a:e1:43:62:fb:48:e1:70:49:74:5a:63:
a5:ed:5e:5a:1d:9a:7f:a3:fc:1d:09:2f:66:d5:62:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:46:44:5A:5B:A2:89:A7:86:B6:9E:F6:50:E6:85:CE:B5:D7:54
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:a6:f1:40:d9:e1:8d:69:33:05:13:86:56:6f:48:cc:17:1c:
a2:9d:f9:c2:dd:1f:df:55:a8:1d:c5:8d:89:ff:9e:3a:de:f4:
9c:e5:24:db:7c:10:eb:b3:cd:10:d2:88:e1:9e:70:d5:49:4f:
7b:06:9c:af:97:86:0d:66:46:2b:a3:b6:77:b3:f9:b8:21:b0:
74:94:6d:fd:3b:5e:e5:0d:c2:64:a0:30:c2:1c:97:41:a8:94:
1a:b0:38:52:19:75:3a:33:2f:05:d2:37:f1:19:92:fd:c9:6b:
bf:f5:c8:3c:37:29:a7:df:4b:aa:94:97:f9:63:fb:5c:93:ed:
6d:bf:19:7d:41:41:9d:0c:0c:78:69:6f:9d:00:a8:65:99:4a:
2a:10:b0:23:11:4b:90:99:a3:16:9f:02:f4:27:6b:97:f3:03:
40:1e:82:99:81:88:01:f1:21:96:38:52:f4:82:f4:db:1f:e5:
eb:6f:da:cc:14:fb:d5:76:93:a5:8d:71:37:02:b2:9f:8e:df:
d9:26:fc:12:fa:34:58:88:65:aa:64:6e:fa:ec:0f:73:be:18:
10:de:b6:e0:38:52:01:0e:4f:a9:76:89:18:e9:ef:2b:62:34:
a1:d0:b5:aa:af:93:05:2f:16:61:b7:19:80:c1:f9:0e:ed:2f:
cd:06:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:01:18 2026 by rpki-client