Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: GyJ5RPI4TMD5qDf7/JBR5SzDzOGHj2ALJX4mO08XdIM=
Subject key identifier: EA:7B:80:2C:15:1F:1D:42:70:37:5F:CE:0F:E5:8B:8C:E6:CB:BF:58
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 019CADFE94A6BB459BE006DBEF2862D8F928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 10:01:08 +0000
Manifest this update: Mon 02 Mar 2026 10:01:08 +0000
Manifest next update: Tue 03 Mar 2026 10:01:08 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: G6r5sMbvLyOz5N5kPaMmFNRwzmmkf0WXFCSiK7CXGw8=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:94:a6:bb:45:9b:e0:06:db:ef:28:62:d8:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Mar 2 10:01:08 2026 GMT
Not After : Mar 3 10:01:08 2026 GMT
Subject: CN=ea7b802c151f1d4270375fce0fe58b8ce6cbbf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:9d:f5:d4:7b:be:78:59:ce:f9:96:de:73:
84:16:ca:8a:ab:b1:0d:2f:10:f6:d0:4a:3a:61:fe:
8b:4c:b0:96:ab:64:b2:32:0b:22:38:ee:cc:9e:44:
0b:e2:5b:98:0e:6c:c0:16:e3:12:4f:1a:b0:2f:8c:
92:00:1a:95:63:36:a6:c2:30:91:38:ea:b9:ce:7b:
d8:74:7a:68:5e:7c:db:f0:a8:b2:97:74:a1:ab:70:
3e:97:fb:99:d0:29:77:76:52:e4:b2:47:00:3f:b5:
b4:20:f6:44:21:e6:d1:c7:14:df:a9:4c:e0:29:a2:
0e:32:74:4d:c5:ec:3c:fc:ab:7a:f6:1e:b8:bd:d7:
70:73:4b:ae:e4:3d:ce:f2:78:a9:a8:07:7c:52:d3:
b2:cf:e9:5a:3d:28:27:61:60:d9:a0:f9:88:aa:94:
a3:aa:6a:36:89:4a:53:24:eb:9b:1c:4a:ee:06:2a:
27:3f:78:25:92:74:8a:46:63:80:76:70:77:1f:7e:
3e:73:63:1d:6b:60:60:07:6c:8a:5f:82:1a:ee:fb:
80:e6:4e:6c:ac:5c:80:63:b0:b6:4e:0c:37:29:a9:
cc:1b:96:6c:b3:c0:a2:52:3f:cf:08:25:65:5e:d2:
bf:14:34:b6:71:97:73:c6:02:7c:ad:1b:3e:4b:7f:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7B:80:2C:15:1F:1D:42:70:37:5F:CE:0F:E5:8B:8C:E6:CB:BF:58
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a2:f7:7e:b2:44:5a:9e:6f:bb:c9:df:bb:24:c1:aa:15:63:
f4:74:5d:f3:f6:ed:cd:99:f5:9c:89:f1:b5:8e:09:e3:de:7c:
44:a0:9b:ba:95:f5:ec:c1:7c:24:70:93:0f:d7:b5:cc:8f:21:
af:1e:78:87:8a:4f:f8:77:10:6e:3e:58:cd:ac:4d:f6:ff:45:
cc:c8:ae:a3:76:c8:c4:24:38:ab:82:a8:c1:e8:ac:18:28:18:
59:e8:05:97:fc:30:52:68:64:6f:81:f9:6d:6a:bc:16:3e:6d:
e8:1e:1f:d3:c6:b2:fd:89:c4:b0:f5:7b:63:91:95:fd:81:3b:
30:8c:11:d0:62:fe:f3:8b:7d:73:76:c4:30:5b:57:37:af:b3:
3d:28:9d:0e:5f:af:3a:54:43:cc:2b:25:b5:d4:3d:78:cd:e2:
e7:1d:83:40:59:bf:bc:bd:6c:37:77:b0:7b:24:36:6b:eb:85:
0e:55:81:aa:2a:45:42:b6:f9:4b:c9:02:14:47:4d:44:2a:38:
b0:e3:81:b2:4f:a8:ba:70:f2:cf:07:46:9e:78:2d:e2:d0:8b:
ad:b5:b5:2d:76:a0:2b:f7:c7:ef:43:9a:6e:5f:62:55:e9:86:
b9:b7:a6:02:4a:cb:42:f7:77:4f:bd:e4:58:22:7e:15:af:6c:
65:f7:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:20 2026 by rpki-client