Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: 2DY98QvbjzTAEJFxSACngcoZ3tRj/0a5kR0NF2erqDo=
Subject key identifier: 5B:37:61:AC:0D:E5:4B:CF:45:A0:B6:EC:70:52:B5:E3:74:05:3B:96
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 019D9B874D39A632ABE40DC85007187E282A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:00:28 +0000
Manifest this update: Fri 17 Apr 2026 13:00:28 +0000
Manifest next update: Sat 18 Apr 2026 13:00:28 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: sLbG4Mu7aiUd6K3u3DwU0CFYMZv14rtnz4eMJt8bHY8=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:4d:39:a6:32:ab:e4:0d:c8:50:07:18:7e:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Apr 17 13:00:28 2026 GMT
Not After : Apr 18 13:00:28 2026 GMT
Subject: CN=5b3761ac0de54bcf45a0b6ec7052b5e374053b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:91:fe:0e:81:76:93:6c:62:82:03:bd:b5:
d2:41:16:21:c4:4f:7c:13:9a:34:d4:18:59:d0:d3:
b2:6d:5b:f1:80:78:fd:2f:f8:ff:cf:f1:0a:c2:34:
33:6d:d0:77:53:98:f0:07:ac:b1:2e:c1:c2:98:69:
42:12:59:42:96:c9:ea:dd:08:0f:1e:88:ea:9c:02:
35:ce:9b:df:67:3c:88:a6:e5:cc:ff:8c:ae:d5:05:
83:6f:52:e8:02:9d:3a:52:d5:f5:63:64:57:64:6e:
41:0d:9f:b5:a5:68:eb:ef:05:32:2a:92:41:13:8a:
d2:e6:3c:75:e7:3a:df:42:f3:df:36:20:58:14:86:
ed:c6:af:12:5b:ba:14:23:59:e4:e7:56:7c:48:f5:
5a:31:ab:b6:5c:48:87:ae:d6:1d:5e:b6:a2:fc:50:
9f:e1:7f:86:f3:38:54:6c:ad:d6:e8:b9:80:c9:4d:
a2:cd:00:d5:92:3d:5d:f3:85:7c:40:46:a8:35:f0:
5d:ec:da:ff:48:89:ae:d7:a7:0a:52:9a:f7:69:23:
63:d0:4b:cc:aa:95:a6:93:09:3e:5c:f0:cc:1c:39:
9d:77:9f:e7:09:8c:0e:2a:4f:5c:92:56:eb:bb:65:
2a:14:fa:4b:e0:c6:ab:05:53:a6:11:e8:78:ba:06:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:61:AC:0D:E5:4B:CF:45:A0:B6:EC:70:52:B5:E3:74:05:3B:96
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5a:06:2a:d7:2c:38:66:d9:d9:b6:71:a6:af:6a:62:8f:1a:
ac:c9:73:28:26:ef:1d:d5:e5:a4:2f:6f:71:c3:71:26:a9:7d:
e5:fb:fb:b2:09:06:1d:0c:f5:78:1b:9a:5b:4d:30:d9:91:6a:
99:a2:d1:87:85:23:10:80:9b:30:82:d7:76:e6:68:ac:b4:3d:
da:10:5d:72:55:20:b8:fb:fd:2f:89:99:bc:2d:a1:68:ed:e0:
bf:82:54:66:c7:3c:11:23:75:e6:de:73:82:ea:5a:81:c6:ad:
96:b4:00:55:d7:47:53:4c:41:49:aa:36:5b:dd:8c:6e:0c:76:
62:d1:83:3a:4e:da:93:ff:09:e3:50:e8:8b:7a:d9:7d:94:96:
ed:20:87:76:59:37:3e:41:48:3c:bd:be:f0:e3:44:d1:c9:1a:
ad:54:dd:0e:ab:3f:00:c5:00:a6:96:64:e7:b3:96:fe:d5:ff:
5f:18:13:b3:2c:c0:1e:1f:2c:d4:87:a6:0c:50:b9:9b:c2:45:
52:10:ae:21:08:6d:65:91:02:8a:9b:e4:31:a7:64:e8:22:60:
2a:9f:ac:7e:a8:8e:d9:40:7d:39:b0:1b:5d:da:2b:b8:40:37:
d4:f4:ed:36:61:7e:ee:29:b4:8f:fa:be:d0:77:3b:03:3d:77:
4c:85:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:54 2026 by rpki-client