
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
File: DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft (raw, json)
Hash identifier: kcQxwMF+YzqcGHntrw4c8MKxuhjLsnfxxoM4mIydZ34=
Subject key identifier: 8D:EC:A6:32:05:AF:8C:11:9E:B8:F3:D6:47:14:72:47:FE:87:29:A4
Authority key identifier: 0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
Certificate issuer: /CN=0ee592621d18309312c014c1122d94a4211fa82b
Certificate serial: 01A0C2562BC5C971909C11E6FCD9F2210344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
Manifest number: 0188
Signing time: Mon 21 Sep 2026 05:00:22 +0000
Manifest this update: Mon 21 Sep 2026 05:00:22 +0000
Manifest next update: Tue 22 Sep 2026 05:00:22 +0000
Files and hashes: 1: DfvjL4j67bdK_Y9b5FgFPIone28.roa (hash: DN0b0r0SCmON5lI1iJgQyiyDVOyUq2JE0Aw4+3S588A=)
2: DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl (hash: WGJqkzaAXVcds1yc3a/Ay0h6ErwMuHCUhQXWm4w5ERU=)
3: KSUNvWYBdy4YdVAnXzSA_dxlq3c.roa (hash: r+AYd5x4wloqbdcvcL3nVXv/9WOqz9qSDvAaU5o0QB0=)
4: xCTkLKibXwn7kJuskGFKNRORLDI.roa (hash: HzbQo8dOuYm/UXqOkIfkXlPnBODZYHsqopp3VQ9t2D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:2b:c5:c9:71:90:9c:11:e6:fc:d9:f2:21:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee592621d18309312c014c1122d94a4211fa82b
Validity
Not Before: Sep 21 05:00:22 2026 GMT
Not After : Sep 22 05:00:22 2026 GMT
Subject: CN=8deca63205af8c119eb8f3d647147247fe8729a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:52:4b:7d:09:8d:21:ae:6f:ba:83:bc:32:
f0:29:64:e2:fc:f1:05:61:22:7e:47:7e:8e:31:bd:
9d:d9:41:97:41:ce:57:17:81:b5:24:b3:06:16:d3:
69:8f:2e:4b:1a:49:db:dd:f2:c7:8c:de:49:6b:98:
99:20:eb:76:e0:5c:7d:90:d0:d3:78:2d:8a:b7:b0:
00:4d:b2:a8:50:2c:d2:45:fb:89:87:28:8d:20:d4:
96:ba:48:22:d1:58:12:40:7e:0e:83:6a:3d:46:5a:
06:fa:33:63:b6:c6:47:0b:0e:8a:38:9f:35:c6:87:
f9:40:50:05:53:d2:dd:2d:92:35:52:7b:b1:71:4b:
8a:54:6f:0b:d8:6d:1d:7b:11:eb:09:14:82:2d:2e:
63:a8:a4:f4:5d:4b:c0:2f:96:a0:4a:31:94:77:e0:
11:c7:4d:d5:6e:1c:06:2a:21:57:ec:c6:ef:ff:11:
1d:bc:02:21:f9:47:93:53:cb:9b:de:d9:eb:34:1f:
72:3c:82:53:ee:8a:a0:26:9c:01:a0:20:8b:2d:d1:
45:db:c1:21:e3:90:1b:62:37:40:00:2f:8c:35:3d:
18:d7:c5:79:10:62:54:0e:e7:5d:b6:75:a8:59:42:
01:28:f7:45:4e:86:b4:c3:eb:46:7c:cf:6e:8d:33:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:A6:32:05:AF:8C:11:9E:B8:F3:D6:47:14:72:47:FE:87:29:A4
X509v3 Authority Key Identifier:
keyid:0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0f:e4:0f:67:c5:85:99:bd:90:c5:a6:df:4b:06:2e:20:21:
f3:a8:50:6d:e0:d7:ae:8d:de:04:c7:8a:92:69:c3:86:46:d0:
0d:68:f2:64:df:86:c1:8b:a2:2e:48:9f:e9:60:40:19:08:bf:
fe:20:a7:f0:4a:7b:d4:87:74:39:1c:7e:e1:14:2f:89:c8:4d:
4f:79:00:db:5e:3f:3f:42:8f:84:ff:d7:9f:4d:7a:72:41:9f:
77:18:3b:6d:94:c1:6e:24:39:db:5d:15:99:d1:d0:94:66:44:
58:6f:02:36:31:ab:8b:a0:b6:20:6f:c7:2a:17:b5:60:c6:2d:
c9:9f:d7:26:9a:e7:aa:f5:89:94:5c:a1:2e:1d:65:36:65:ea:
17:4b:f4:72:3d:e2:3f:20:fa:d1:e6:97:e2:a9:0b:52:e7:cb:
55:8d:74:59:62:81:fb:4a:bc:cb:0a:db:fd:24:bf:f6:0f:6c:
83:b0:50:d9:da:96:f3:2b:26:17:f4:c8:cb:41:91:4d:fb:3e:
e7:fb:4d:57:00:61:9f:45:7e:f1:7b:27:6b:c1:00:6d:33:77:
ca:7d:92:80:69:42:70:e0:c1:b6:ce:f1:da:23:6f:5d:63:7a:
58:f5:1c:ec:07:e0:87:3a:f7:68:7a:e9:59:fc:b1:6a:f3:aa:
8e:c0:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:19 2026 by rpki-client