Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: hlXbIpN/KnCLHu7SCs6141bnnN6b4ca7buONj46L7oE=
Subject key identifier: A8:1A:BE:3A:04:A5:20:CA:25:FF:DF:44:B4:68:6B:15:E9:B3:0A:61
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 019D9962FAB9A3EFA85E03E1FDB973DBC9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 0177
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: mdTui1wA75wOztqtTMK3zvX24Ds.asa (hash: KzmXvzUo2gWfBYklqBo8Crh93lUSqFHKLtZy6y1uVdg=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: UNAP4HdaUVz6voxvFknh3q8CJ1p7RtpznX6pbCcnjRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:fa:b9:a3:ef:a8:5e:03:e1:fd:b9:73:db:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=a81abe3a04a520ca25ffdf44b4686b15e9b30a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:47:aa:e9:b0:d6:de:58:61:50:19:bb:68:
49:db:45:88:74:00:40:80:48:27:62:d6:5d:9c:8d:
7e:bc:75:c5:26:69:65:51:f9:cf:3c:af:b1:23:3b:
6b:93:f3:33:66:f1:d6:94:36:c4:b5:41:99:6f:71:
2c:24:37:0f:0f:bb:f4:fc:83:1e:61:42:05:8c:1d:
27:48:7c:05:ee:13:2b:a3:26:23:a7:8a:80:53:6c:
7f:9e:70:5d:5b:22:19:2b:f3:39:47:3e:44:20:8a:
34:48:dc:cd:7a:31:65:d1:1c:f1:c4:64:c2:54:2c:
a5:ba:5e:ca:be:f0:d4:49:81:cc:82:b5:f8:2a:81:
5a:45:54:17:dc:f9:cb:ff:d6:e3:e1:2a:0f:ea:8e:
43:5c:b7:8a:90:fe:9b:5a:47:d2:14:51:72:97:01:
fa:b3:30:98:f8:20:97:63:03:33:d4:d9:11:2f:27:
9c:d6:64:d8:84:dd:56:97:5c:14:48:e5:ac:de:9c:
da:81:70:96:db:c6:b3:ba:f4:28:83:24:d7:28:74:
67:d7:8f:82:85:64:84:0c:6d:a3:97:9a:e1:c7:d6:
85:6c:48:89:1b:8a:c9:7e:08:48:53:22:17:85:94:
9e:16:3c:aa:62:15:43:82:c0:f1:fa:a5:06:bb:f8:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:BE:3A:04:A5:20:CA:25:FF:DF:44:B4:68:6B:15:E9:B3:0A:61
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:20:3a:79:40:a1:bf:55:3b:d2:f2:b4:fa:82:f8:5a:65:24:
72:87:ab:b8:41:ca:45:fc:69:58:48:35:58:1f:47:60:46:76:
ee:44:ab:8f:d1:05:1d:c0:ec:c9:1e:c3:94:fb:22:30:33:5f:
0f:d5:67:f8:c8:92:0b:75:03:41:37:41:6e:05:78:bb:29:d3:
28:cb:48:ff:b9:7d:65:a8:15:41:68:3e:31:ad:74:2b:b6:f2:
1d:ce:dd:8a:98:ab:1c:f3:6b:a4:92:64:79:45:b5:11:ec:15:
d3:3a:ca:3c:ea:51:12:71:eb:81:48:a6:4a:43:09:b5:ba:40:
0f:ae:53:0f:72:be:c7:a2:93:8e:78:ce:6f:72:5e:93:f0:ce:
0f:77:76:9f:c4:bb:ce:c5:19:ce:e6:94:cb:ac:c9:7d:01:a2:
9b:d6:80:d0:29:51:d7:16:d6:8c:22:5f:38:63:49:4b:3b:8d:
fe:fa:d3:a4:79:9d:1f:46:14:94:90:11:0b:6d:a4:41:e5:2a:
de:71:32:a4:82:54:51:c6:a7:44:9c:28:85:39:0a:b5:42:00:
1b:3d:89:3c:18:01:b9:6c:e8:96:c9:32:ac:45:c7:7f:44:67:
e3:fe:60:f7:36:64:ec:c8:e5:28:58:fa:9d:3f:a9:22:69:2c:
e1:a5:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:53 2026 by rpki-client