Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
File: DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft (raw, json)
Hash identifier: 24ADIKqJ82Hmf6Kg7+wRzQCznmw/yCRW+loADwQuIrY=
Subject key identifier: 8C:13:D9:E6:8F:C1:35:F2:BB:6D:A6:DA:0F:5E:9E:0E:F1:D1:CB:6D
Authority key identifier: 0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D
Certificate issuer: /CN=0d4531777febf988e5305a2d299f9c548e8d501d
Certificate serial: 019DA4C1E0092027F830520171583C36AB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
Manifest number: 0105
Signing time: Sun 19 Apr 2026 08:01:02 +0000
Manifest this update: Sun 19 Apr 2026 08:01:02 +0000
Manifest next update: Mon 20 Apr 2026 08:01:02 +0000
Files and hashes: 1: DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl (hash: VCdgZfDyhxxn83S8ZtI+sIENxZ5UTjgk12KapMbLUJc=)
2: U6voxKN65jQH_hLBK3btXjUs3XA.roa (hash: Q/KwQqI2oZ064L8UakL1/UvH01OXvIiI/6cQL59DWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:e0:09:20:27:f8:30:52:01:71:58:3c:36:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4531777febf988e5305a2d299f9c548e8d501d
Validity
Not Before: Apr 19 08:01:02 2026 GMT
Not After : Apr 20 08:01:02 2026 GMT
Subject: CN=8c13d9e68fc135f2bb6da6da0f5e9e0ef1d1cb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:7f:0e:b6:e7:27:72:a2:fd:ef:7e:1b:23:
94:07:fe:41:29:dc:cb:9b:bf:dd:89:a9:2d:2d:19:
a2:b7:97:fe:96:05:57:c4:07:25:f8:53:22:17:54:
c5:87:f8:5c:8f:c6:e5:3a:44:88:d8:fd:27:ad:d5:
be:10:43:9f:c1:f6:bd:b7:7f:2b:69:b0:78:a7:82:
5d:07:84:b4:58:f5:a6:e1:9c:bf:ee:8f:22:3f:65:
2f:ce:02:f1:b3:3c:a6:8c:56:d1:0c:6c:3d:cd:e8:
00:a0:fd:10:2c:12:3d:93:7f:3c:da:84:9b:5e:18:
5f:9a:75:98:b4:cf:b8:d3:3c:7e:c9:6d:fb:8f:b4:
bb:7a:19:f7:2b:5e:ff:ab:2a:81:55:13:28:d8:ed:
d7:07:01:ab:60:2f:c8:b3:98:e1:b4:94:fc:06:ed:
3d:ee:1e:89:62:76:54:4d:a2:0b:da:1f:be:01:7b:
2e:c2:2e:c2:82:55:38:f6:90:c7:10:6b:ce:c7:b6:
4d:81:ff:b0:a4:35:58:64:09:5c:6e:bd:aa:cd:c5:
db:1f:80:9d:6f:34:1e:c0:47:7c:24:fb:08:51:a5:
98:89:10:d2:8b:57:51:db:a2:01:42:95:94:c9:26:
22:3a:23:30:0a:ad:ae:03:05:99:ea:b6:22:d7:b1:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:D9:E6:8F:C1:35:F2:BB:6D:A6:DA:0F:5E:9E:0E:F1:D1:CB:6D
X509v3 Authority Key Identifier:
keyid:0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:b0:20:6b:14:b4:b4:3f:dd:bc:a8:d9:ae:0a:f4:79:57:
9c:40:35:4f:a3:1c:6d:a6:c4:c8:72:4f:f7:c9:6e:b3:1d:82:
84:f1:0b:ef:10:ca:3c:e6:d0:3d:1c:57:f9:ee:50:02:4e:51:
f9:0a:15:64:81:c0:8e:8a:c0:65:b6:ae:cb:11:45:62:b9:d1:
54:25:da:6a:57:1e:f8:ac:a2:b1:da:fc:5b:3c:06:d3:ca:cf:
ab:e1:59:36:79:2f:e6:34:cd:bf:db:37:5e:ae:e2:26:44:c3:
32:94:44:0d:58:59:fa:8c:84:0e:24:1d:42:14:15:15:3d:fb:
f1:42:fe:26:b4:d9:9f:87:36:84:04:74:c4:ab:7f:4a:36:90:
b1:c7:e5:4f:bc:5d:c6:a8:ad:37:4e:fc:49:8f:8d:5f:ce:04:
8d:c1:ee:e5:27:8d:45:f1:af:ce:2f:bf:c9:a3:ee:9a:65:13:
93:f9:85:70:ff:0d:22:fe:69:af:eb:10:b9:ac:30:b8:36:4d:
15:87:52:b4:d1:e6:e1:c3:d3:0f:cf:79:46:e7:62:31:f0:db:
f3:70:8a:27:91:0f:85:3f:3b:de:ef:e5:2a:51:99:6d:41:81:
1e:d9:56:93:e3:42:03:27:02:a4:ce:2f:ea:32:96:c5:45:76:
4f:5f:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:59:07 2026 by rpki-client