Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: YiSicRuceMwS0xaQX79VblLnc0UObqIkQLnShuNVSus=
Subject key identifier: D5:50:4E:7B:B0:66:2F:DA:61:4C:42:48:50:F1:7F:7C:63:DE:03:3A
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 019FA718E548813BAB6484228453927C1350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 0289
Signing time: Tue 28 Jul 2026 05:00:54 +0000
Manifest this update: Tue 28 Jul 2026 05:00:54 +0000
Manifest next update: Wed 29 Jul 2026 05:00:54 +0000
Files and hashes: 1: TB2o93JdI3_5bR6pFMnn0o3Vigs.asa (hash: tU5Nk49tozCWJHFaeKvDt9q8L3Ki/m4tjnKrcr2Wp1E=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: 3KIWku5v7UrikTgEiHFsjFk0x2yc9Ek+K+IqVdt2XGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:e5:48:81:3b:ab:64:84:22:84:53:92:7c:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Jul 28 05:00:54 2026 GMT
Not After : Jul 29 05:00:54 2026 GMT
Subject: CN=d5504e7bb0662fda614c424850f17f7c63de033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:c3:88:64:45:12:68:7d:e3:f5:66:65:10:
81:01:83:b7:ec:dc:ba:bc:b8:97:0f:51:da:29:09:
8f:d6:d2:cc:63:8f:7a:91:95:d5:76:36:49:36:9e:
b0:d0:d7:11:cd:51:fd:ea:48:58:d4:37:3f:67:f3:
a1:db:c2:3c:a7:66:a3:d8:4d:1c:55:a6:62:6e:6f:
57:75:22:14:89:d2:5e:f4:4c:ba:20:a6:cf:c6:9f:
78:3e:a8:32:d6:13:f5:9e:6d:ab:c3:4d:3e:ec:b7:
10:a0:a5:9a:8f:22:9c:06:ee:45:96:8c:c9:ef:69:
ac:4a:f2:1a:95:13:83:a5:40:8b:ab:fe:06:79:61:
f9:c7:50:a2:cb:b5:64:50:ed:e4:9e:c2:9f:ba:08:
95:8c:69:8d:23:2b:8d:8d:33:04:98:5f:ed:c0:2d:
eb:e5:40:7f:c5:53:26:a5:57:9f:66:ba:10:f3:ba:
4e:70:52:9e:9e:a1:ff:fb:d3:7b:f5:43:58:61:2d:
c2:85:a5:8f:35:25:42:4c:ed:c9:4e:98:19:6a:c3:
32:0c:e3:25:fe:42:ab:3a:ee:a7:cc:7a:fe:66:7f:
9f:48:c8:ae:e5:17:93:7f:66:55:0d:55:db:ce:2b:
e3:db:ed:54:46:5e:09:a9:29:fd:81:ef:fa:0f:5f:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:4E:7B:B0:66:2F:DA:61:4C:42:48:50:F1:7F:7C:63:DE:03:3A
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1f:d8:8c:54:3c:05:99:f8:4d:64:a3:6f:c9:f4:c9:4c:63:
b7:af:c8:b0:80:de:d3:fb:b8:a0:56:52:4a:d0:40:f0:2d:70:
6e:9c:6f:38:74:b4:3e:31:0d:b3:31:ad:b7:ab:65:68:55:de:
7c:9e:41:de:d8:72:2e:84:db:0f:dc:fa:43:6d:8c:89:cf:27:
48:1d:cd:67:50:88:3a:56:18:dd:2e:54:a4:c0:2c:64:d7:6d:
79:ce:33:33:ec:6a:01:ff:65:16:fc:4c:0c:d4:b9:42:47:1f:
69:52:b5:a0:55:58:10:90:4b:7c:8a:d7:0e:b5:ad:da:44:0b:
27:91:39:a6:63:2f:bd:18:97:7c:c9:f0:01:fa:d8:af:24:75:
30:fd:ef:30:d8:b9:96:94:6b:36:bc:2f:cf:9a:5b:5e:4a:3d:
5b:71:05:76:23:2b:5d:8e:08:7d:ef:28:e4:76:cb:93:17:e6:
ab:d3:b4:f6:d7:70:22:46:0c:ea:71:61:4e:31:32:80:33:cb:
cf:93:20:4a:84:b6:96:e3:d2:55:91:6b:65:e0:bc:b2:67:5f:
dd:ef:a7:bb:7a:95:ca:7b:09:2a:bf:b3:db:4a:10:f2:f3:85:
c1:d3:b0:a8:9a:31:67:88:d5:7c:d8:9e:e6:8e:97:01:1a:c1:
90:2f:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:25 2026 by rpki-client