Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: PkcQDS4KzGlXb7i8tMxKWJZLITsZhzmnXS3CXkhu6Lo=
Subject key identifier: 21:80:ED:B4:63:C7:74:E7:CF:D8:4A:57:96:67:F1:07:6C:BC:2D:67
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 019CAAC6C38C9E8B248362B910A38FD28F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: HuM-fqgyJipWVuJxhHWn42tWfGs.roa (hash: U6kHpEw2y7t9pxRNfk/+X/Y6S7JlFdwGGwL7w7s/5Yo=)
2: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: /hJdH7PCsDBNx4aWHZdPGa7K1CTab8El8DKRIk4Orpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c3:8c:9e:8b:24:83:62:b9:10:a3:8f:d2:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=2180edb463c774e7cfd84a579667f1076cbc2d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:9c:26:dd:bc:8a:32:22:6e:ab:2c:e3:94:
22:4f:08:0c:0a:91:a1:21:b8:a3:e3:03:3c:98:cf:
fa:df:66:ff:1f:c2:6f:82:a7:fa:09:20:6f:85:d9:
fb:78:c8:d1:00:94:c2:f4:d6:0d:a2:a5:cd:f0:9c:
18:15:36:d7:5c:5e:ce:77:14:4a:1c:a4:33:ea:71:
4a:be:1e:87:65:2e:9c:18:05:be:47:99:5e:b2:be:
5f:8d:2a:71:2d:3f:ae:25:00:53:32:a6:34:af:78:
99:93:d0:81:34:c0:f4:09:19:63:3d:ae:b1:d7:2e:
1c:c1:bf:33:6f:66:c7:cb:7a:ae:81:aa:ea:56:ed:
6d:64:7e:f8:68:57:b3:1f:ed:9c:58:88:fb:39:0e:
fa:30:2c:ad:c0:7f:54:96:0a:2e:74:59:f5:90:ac:
2b:f2:b4:42:54:e3:83:5f:ab:c2:63:9a:48:da:72:
cf:04:0a:42:41:11:d0:d6:ce:54:f4:fb:2a:dc:a1:
12:6a:7d:28:a3:b7:39:e8:16:dd:16:14:25:11:40:
5b:0b:ab:ea:dc:14:09:b6:34:2d:c0:f1:28:71:7c:
7d:f3:e3:3d:d6:9d:45:65:60:38:c1:c9:05:d8:ff:
10:39:98:e4:bb:2d:ea:33:87:29:66:71:dc:2d:f2:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:80:ED:B4:63:C7:74:E7:CF:D8:4A:57:96:67:F1:07:6C:BC:2D:67
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:46:49:17:af:16:49:bf:43:b5:1e:c7:4d:f1:44:91:21:
67:0b:c8:44:0b:34:b4:5b:99:33:50:63:45:a4:55:5f:8a:04:
e5:55:92:79:8d:15:0b:a7:2e:70:07:ad:40:bb:cb:75:23:98:
cf:a7:7e:8b:2d:7a:93:ee:f6:9b:b0:b0:02:03:cf:c0:9d:2c:
71:09:f1:8e:c9:e1:eb:61:ba:e6:f3:4d:c8:62:7c:f7:e6:7d:
a7:7f:06:b7:25:2c:12:89:c1:f4:e2:6e:20:53:76:82:6c:85:
46:3e:31:3a:4e:df:52:a1:54:41:26:94:34:5a:fd:8f:e1:8f:
61:51:da:d8:fe:06:96:76:9a:7a:3b:73:f2:94:d8:4d:8b:f0:
9f:50:8d:e7:fd:09:cc:c2:3d:04:1d:a5:37:fe:6a:ce:a0:4e:
cd:96:c6:9f:f8:7b:17:5c:5e:4c:06:22:85:90:b8:30:fc:e1:
91:a0:7b:5d:ff:c2:e6:62:73:6b:8e:dc:4b:f9:d8:36:54:1b:
a5:d0:15:0d:c8:42:e1:ef:81:25:61:e2:34:92:44:54:92:d3:
b2:6f:8e:b9:17:8d:ac:00:1f:39:d4:b6:c2:d8:76:17:e6:b0:
a6:e2:b0:42:e8:e5:93:d3:1f:94:dc:32:32:75:15:ea:9f:ac:
21:66:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:33 2026 by rpki-client