Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: Uq2qW0DBDMZSnWXv8yCdqvkHSo112Mh1Hv2wOJGZfDQ=
Subject key identifier: C5:45:06:DB:F9:25:5C:12:9B:38:8E:3B:B7:A4:3F:42:A1:06:96:30
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 019CA9B3D58A8C25F0C456587DD3CF750A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 0691
Signing time: Sun 01 Mar 2026 14:01:00 +0000
Manifest this update: Sun 01 Mar 2026 14:01:00 +0000
Manifest next update: Mon 02 Mar 2026 14:01:00 +0000
Files and hashes: 1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: AouyFPTBr0EMIgHIsUle1WFpRkMoTRiDCd46iRlSRTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:d5:8a:8c:25:f0:c4:56:58:7d:d3:cf:75:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Mar 1 14:01:00 2026 GMT
Not After : Mar 2 14:01:00 2026 GMT
Subject: CN=c54506dbf9255c129b388e3bb7a43f42a1069630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:99:a3:ba:03:4b:23:21:0e:22:60:19:35:
22:99:8e:c3:9a:dc:77:0c:5c:59:24:05:b6:c9:6f:
fa:f6:81:78:fe:6f:ad:58:ac:63:45:57:7e:fe:9b:
eb:84:20:1b:09:44:12:06:fe:37:0b:eb:f2:b1:7a:
04:a4:e7:2c:75:d8:2a:28:af:ba:d6:90:6d:87:62:
73:87:1b:94:80:41:b4:13:d6:6f:e9:b9:2d:27:bb:
35:b6:69:fe:eb:b2:52:43:18:ba:46:c5:48:24:14:
2d:de:a0:cb:07:c4:d6:b2:2e:ef:5d:73:f5:78:d0:
26:9c:38:b0:34:24:ac:ab:62:1b:c4:46:63:69:03:
3a:17:16:0a:bb:ef:75:34:fa:af:cb:2c:f5:06:09:
50:67:62:9e:53:e1:b1:e2:04:81:52:f6:c4:4a:88:
47:4f:77:a4:4d:43:73:89:9f:a1:1a:39:81:c5:0c:
47:95:e4:98:ba:4d:56:f7:c2:38:3c:aa:c6:a2:01:
38:ff:da:1b:31:56:02:2a:d5:c1:2d:fb:7a:62:21:
dd:4d:bc:e7:b1:b6:a6:00:a9:b0:0b:05:4b:f6:42:
82:cb:ae:45:d5:b6:af:0b:f6:73:0b:9b:93:6a:d7:
42:cf:2f:4a:88:08:21:94:79:c9:71:fa:35:1b:7d:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:06:DB:F9:25:5C:12:9B:38:8E:3B:B7:A4:3F:42:A1:06:96:30
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:83:84:82:44:0f:96:ae:d2:9f:be:f4:f4:c8:d1:bd:87:67:
16:0c:3b:fa:3e:61:5f:65:9e:95:13:e5:c7:af:6e:50:94:e3:
18:8a:9c:63:91:af:94:94:8b:5f:3a:72:58:b0:a8:12:13:52:
78:52:02:26:28:e0:34:f1:1d:1b:2d:b8:f0:d2:a7:6d:36:c5:
37:58:75:d1:75:e0:29:bd:82:34:92:bf:b9:78:fb:d8:72:89:
99:73:2d:4d:a5:8d:8f:df:08:07:09:93:59:a1:8e:aa:ac:ae:
42:e2:09:7b:09:ed:6d:12:67:1d:66:43:07:d8:25:ec:b7:1b:
5e:6d:08:a7:14:ee:b7:5d:dc:1d:bf:7f:db:34:19:57:03:f0:
34:2e:88:12:1b:61:3e:5d:a8:2e:1e:dc:1f:8a:1a:6e:1b:76:
02:41:eb:90:49:c7:ce:3c:e4:f7:04:61:af:1a:47:fd:b4:49:
d3:76:69:34:b7:ef:d7:3a:b8:c2:dc:52:56:bb:60:cd:30:c9:
0a:6e:87:cb:1b:e3:8b:25:08:fd:73:fe:ef:8d:20:b4:9d:b8:
67:5f:c7:64:f5:37:df:b9:f3:3b:b8:91:7a:0a:4a:f1:26:1a:
af:1f:9a:06:56:cd:17:f9:28:5e:07:f5:a3:74:96:d2:8b:9b:
ad:4f:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:24 2026 by rpki-client