Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: skHKqiJ7vesBvFsl6jFvp7u6i7t1XZZkn3ODWyQWnVo=
Subject key identifier: 28:8E:89:4E:0B:87:5E:E7:00:E4:CD:44:AC:83:9F:7B:7D:A0:7F:91
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 019D9B512E93A82B8B647E30FEC3B8EE7DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: 0178
Signing time: Fri 17 Apr 2026 12:01:21 +0000
Manifest this update: Fri 17 Apr 2026 12:01:21 +0000
Manifest next update: Sat 18 Apr 2026 12:01:21 +0000
Files and hashes: 1: mdTui1wA75wOztqtTMK3zvX24Ds.asa (hash: KzmXvzUo2gWfBYklqBo8Crh93lUSqFHKLtZy6y1uVdg=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: KtAolDaoxcQCASncBWa5jIjDO3E1r1Oqvb4GzfKhe8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:2e:93:a8:2b:8b:64:7e:30:fe:c3:b8:ee:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Apr 17 12:01:21 2026 GMT
Not After : Apr 18 12:01:21 2026 GMT
Subject: CN=288e894e0b875ee700e4cd44ac839f7b7da07f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:7c:63:54:84:cd:69:bb:af:b0:11:7f:85:
de:3b:83:56:0b:6d:ba:6d:ef:50:b1:80:d8:e9:25:
e9:c6:71:18:39:21:74:05:0a:77:27:7f:ff:9c:03:
77:5d:4f:7e:05:bf:a1:fe:0e:c8:47:a2:0b:b3:d0:
be:a2:23:8c:a5:ec:ce:8a:a5:6c:c5:ef:0b:37:bc:
9d:7f:c6:2f:0e:48:98:fc:99:8e:9a:dd:16:ff:c4:
fa:ab:64:df:d3:74:6e:e6:a7:53:70:40:88:35:cd:
79:d6:cc:27:6e:88:31:0e:a1:62:d3:39:9b:17:cf:
a4:d8:c6:29:19:e2:a3:79:16:65:6e:fb:5c:ba:75:
eb:df:23:c4:78:4c:73:78:fe:27:19:f3:05:4d:c8:
39:b8:7f:7b:0d:ae:b4:2e:76:e3:9c:40:f6:61:4c:
7a:6f:16:ca:c6:21:01:30:e1:e3:05:d7:ff:5a:82:
be:fa:78:ce:13:5c:41:e4:ea:4e:48:ec:f1:68:2d:
ba:ad:7c:fe:4c:51:1c:9f:f4:ea:8b:8f:12:a3:95:
c6:43:30:97:84:01:46:68:7d:12:66:68:84:e0:de:
4e:8b:d3:24:e3:1a:2f:bf:54:d2:2b:fe:06:bf:dc:
f2:6c:1a:46:81:04:64:45:cc:71:12:c2:07:15:4a:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:89:4E:0B:87:5E:E7:00:E4:CD:44:AC:83:9F:7B:7D:A0:7F:91
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:26:73:0c:ee:8e:98:f8:bb:62:7a:da:8a:33:e4:c8:dc:ad:
e1:0a:f2:af:ec:ff:d3:a0:3c:31:71:03:8d:79:e8:ee:c4:43:
c9:28:c8:fd:f9:d5:a4:dd:cd:72:4e:ea:f8:ac:91:63:cf:40:
52:06:eb:75:36:97:ad:72:07:b1:d2:9d:ad:27:e1:c7:20:3b:
1e:23:6c:ed:46:63:05:dd:98:07:0e:d1:4b:59:75:16:3e:07:
2b:6e:0d:e5:07:21:76:97:39:be:81:62:3c:5a:fc:75:ef:1e:
3d:e8:00:08:e9:cb:b8:cc:91:c7:fe:a9:27:61:34:a6:d0:53:
9a:e6:c6:58:3d:5e:47:fe:62:6d:e8:8f:54:6a:d9:e9:db:19:
10:2f:e2:fa:7c:44:f1:1c:32:83:3b:5b:95:0c:7a:0a:60:aa:
98:5d:0f:9e:59:c8:aa:f0:4e:17:6e:d8:59:40:64:c7:6d:76:
14:07:29:33:f2:9a:47:d2:42:8a:d7:f4:cf:36:d1:8d:9c:0e:
f3:aa:aa:07:28:b9:70:f2:8b:67:14:97:74:ce:4a:d6:ca:6e:
b8:91:67:7c:4e:7b:d0:37:28:e8:0d:3f:d8:49:9b:1a:80:55:
f4:a4:c0:de:b1:49:0a:31:cf:5f:01:3a:37:ec:a9:58:27:97:
52:3c:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:18:11 2026 by rpki-client