Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: OK9j3R5lUOUKEZEiWn6cCon1S1FVPFgy7eeKK/UzXgM=
Subject key identifier: D9:C7:B7:5E:A7:EA:1A:CF:AB:61:D0:B2:DD:FB:A3:AC:77:AE:EF:30
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 01A119ABAABCDD4FB9C710341E27063C55D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1A91
Signing time: Thu 08 Oct 2026 04:00:43 +0000
Manifest this update: Thu 08 Oct 2026 04:00:43 +0000
Manifest next update: Fri 09 Oct 2026 04:00:43 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: dS4oXECM1PRDfvyVYCCf2TNw+ziOxjxN5QV6JHzZdVA=)
2: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (hash: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:aa:bc:dd:4f:b9:c7:10:34:1e:27:06:3c:55:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Oct 8 04:00:43 2026 GMT
Not After : Oct 9 04:00:43 2026 GMT
Subject: CN=d9c7b75ea7ea1acfab61d0b2ddfba3ac77aeef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:73:76:f0:a8:f7:1b:f6:7a:b0:79:2f:49:
52:58:40:10:3c:91:95:7e:29:00:75:d8:e8:aa:89:
59:93:a8:d5:98:2a:71:6e:c5:43:95:fd:7e:2a:6a:
11:71:99:15:0b:4f:ad:87:42:92:58:58:13:75:fe:
c2:0e:e7:88:97:64:df:ba:cf:47:3b:91:c7:52:7b:
af:15:37:3e:10:bd:78:0e:17:a9:b4:36:36:42:d0:
d1:38:c4:58:87:72:b8:23:5b:7d:51:33:90:1f:d4:
77:b6:35:cd:ac:63:7d:39:92:67:df:d9:bb:42:6d:
48:6d:2c:92:b3:ef:3e:4d:eb:a3:35:b6:83:ec:07:
d4:75:e1:b5:c3:c1:b1:15:29:9a:21:8c:67:7e:2d:
ab:dd:5d:84:c4:fd:e5:06:de:40:30:f5:af:47:8c:
ce:90:86:03:4f:8c:40:8e:01:4d:38:ed:3f:18:6f:
06:b1:9e:ff:ef:9d:8c:be:3b:15:b5:29:e5:24:b1:
f3:a7:13:37:45:7e:01:ef:a0:35:be:c9:43:2f:46:
bf:06:36:0d:66:0a:91:f0:8d:9e:80:26:1c:a7:89:
1c:92:3d:4a:1d:52:c8:14:73:d4:5d:8d:46:79:09:
cb:d1:e8:40:be:fb:4a:7e:b7:96:c9:9a:c0:9f:f2:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:B7:5E:A7:EA:1A:CF:AB:61:D0:B2:DD:FB:A3:AC:77:AE:EF:30
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5c:17:8f:36:84:75:f9:95:f3:2d:12:17:40:4d:e7:3b:24:
48:dc:74:23:51:d7:30:da:9f:f8:f7:cb:3e:a5:89:3a:2b:9a:
c5:18:19:3d:86:8d:44:93:e6:66:84:75:64:bd:a2:53:b2:20:
2f:35:ac:53:81:0d:f0:b8:32:ee:57:4c:f7:59:b7:a2:4d:b3:
d6:ac:04:2c:ce:7f:65:a9:7d:f0:d8:90:2c:08:77:61:c9:17:
02:21:fe:ac:1a:fd:09:9a:70:11:61:7c:61:9b:f9:15:f9:38:
2d:83:6d:07:ca:62:b1:70:76:60:ba:91:b9:9d:a9:28:34:91:
1b:61:40:42:10:d0:17:02:b2:af:6d:29:ec:7d:c5:45:62:85:
45:a2:97:fa:05:cd:58:ff:ce:33:39:a6:6d:72:97:50:48:b1:
1d:07:08:75:29:b9:3f:d2:b2:67:d4:03:29:32:e1:94:a1:9f:
a3:04:32:b0:b9:a8:74:8b:dd:de:b5:d5:dc:45:e9:55:fd:56:
2e:b7:5b:a4:82:e2:f7:29:d9:9f:1c:bc:61:2e:71:7a:d4:a2:
fe:2b:ae:4c:d0:ad:9b:a9:40:ff:50:85:af:c4:a9:25:9c:95:
c5:09:9b:00:21:2e:29:ae:c2:e6:06:f6:3b:12:ef:e7:cf:dc:
c4:ca:c8:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZq6q83U+5xxA0HicGPFXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTI5NmI2MGMwMzhjZGM2YmZlZjRjMDYwYjE0MDYxNjRl
Yzg2OGMwHhcNMjYxMDA4MDQwMDQzWhcNMjYxMDA5MDQwMDQzWjAzMTEwLwYDVQQD
EyhkOWM3Yjc1ZWE3ZWExYWNmYWI2MWQwYjJkZGZiYTNhYzc3YWVlZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhtzdvCo9xv2erB5L0lSWEAQPJGV
fikAddjoqolZk6jVmCpxbsVDlf1+KmoRcZkVC0+th0KSWFgTdf7CDueIl2Tfus9H
O5HHUnuvFTc+EL14DheptDY2QtDROMRYh3K4I1t9UTOQH9R3tjXNrGN9OZJn39m7
Qm1IbSySs+8+TeujNbaD7AfUdeG1w8GxFSmaIYxnfi2r3V2ExP3lBt5AMPWvR4zO
kIYDT4xAjgFNOO0/GG8GsZ7/752MvjsVtSnlJLHzpxM3RX4B76A1vslDL0a/BjYN
ZgqR8I2egCYcp4kckj1KHVLIFHPUXY1GeQnL0ehAvvtKfreWyZrAn/K20QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnHt16n6hrPq2HQst37o6x3ru8wMB8GA1UdIwQY
MBaAFA7ilrYMA4zca/70wGCxQGFk7IaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDkt
ZjVjODA1ZjAyNTViLzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDktZjVjODA1ZjAyNTVi
LzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVwXjzaE
dfmV8y0SF0BN5zskSNx0I1HXMNqf+PfLPqWJOiuaxRgZPYaNRJPmZoR1ZL2iU7Ig
LzWsU4EN8Lgy7ldM91m3ok2z1qwELM5/Zal98NiQLAh3YckXAiH+rBr9CZpwEWF8
YZv5Ffk4LYNtB8pisXB2YLqRuZ2pKDSRG2FAQhDQFwKyr20p7H3FRWKFRaKX+gXN
WP/OMzmmbXKXUEixHQcIdSm5P9KyZ9QDKTLhlKGfowQysLmodIvd3rXV3EXpVf1W
LrdbpILi9ynZnxy8YS5xetSi/iuuTNCtm6lA/1CFr8SpJZyVxQmbACEuKa7C5gb2
OxLv58/cxMrIUA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:58:40 2026 by rpki-client