Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json)
Hash identifier: e/w2WqJ/JbdZyQrcHghzr0DnnNM8+J1zAwNixsyfadg=
Subject key identifier: 66:AD:C6:A8:7B:53:2C:A9:BD:22:06:5A:8E:5C:AD:CA:4B:1F:57:6F
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial: 019CA94649C165DAECEF829AEEB61D8F92D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
Manifest number: FA
Signing time: Sun 01 Mar 2026 12:01:21 +0000
Manifest this update: Sun 01 Mar 2026 12:01:21 +0000
Manifest next update: Mon 02 Mar 2026 12:01:21 +0000
Files and hashes: 1: czHbFV3pd9Iq_WN0w5mTIXs5ZFI.asa (hash: 2rLgWbVZfymSzH61TfuH87Belcn87DaW2n+susN61eA=)
2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: ExfaIEzlctlM0jfNesJvAfPOkDaoDp4byyu9g8SqAu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:49:c1:65:da:ec:ef:82:9a:ee:b6:1d:8f:92:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
Validity
Not Before: Mar 1 12:01:21 2026 GMT
Not After : Mar 2 12:01:21 2026 GMT
Subject: CN=66adc6a87b532ca9bd22065a8e5cadca4b1f576f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:22:73:ba:36:82:f9:cc:0a:b6:ff:4d:31:70:
07:78:9e:68:ee:c3:a7:78:38:5b:c7:62:2e:73:88:
01:07:16:d5:90:57:6d:ec:1d:21:d8:7c:f8:23:76:
1e:06:ab:fd:d3:11:9c:42:c8:0b:20:0a:c7:72:d8:
bb:c4:a4:8d:60:6e:3d:b3:f6:ca:c8:23:ea:af:91:
50:ce:97:f6:2f:27:c8:79:0f:64:c5:16:3f:aa:f3:
06:64:7b:26:e5:86:1b:c7:bb:43:ee:7a:53:28:a7:
dd:9a:71:98:65:89:71:1d:05:03:f4:d4:1e:87:3c:
a1:aa:49:e2:5a:62:ff:58:29:e4:b4:53:f9:71:42:
13:02:41:1f:f5:b8:8f:6b:82:b1:e6:13:f5:ae:10:
1c:c1:ca:d6:b1:24:16:81:4c:28:3c:43:e1:67:ad:
12:3b:ba:0e:5d:22:9f:d9:dd:05:c5:aa:9e:d6:72:
28:ad:33:4e:eb:55:cf:b2:c5:5f:b1:bc:22:cc:0c:
41:cd:f6:c1:53:a9:fd:d0:94:f1:a0:b4:5a:2c:3f:
58:fa:b1:42:20:b1:71:ac:ea:20:6c:dc:9e:4e:45:
db:45:8c:5f:d2:17:b2:00:a7:13:11:60:5b:06:97:
e9:0f:ee:27:f9:f0:d0:a9:38:50:0b:e7:f9:ff:07:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:C6:A8:7B:53:2C:A9:BD:22:06:5A:8E:5C:AD:CA:4B:1F:57:6F
X509v3 Authority Key Identifier:
keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:bd:7f:c3:79:26:72:b8:97:6c:8a:d4:d4:9f:f2:57:f4:
9a:30:ec:97:09:71:b8:3a:21:b5:21:c3:4d:83:95:a6:fc:00:
95:8e:0f:15:d7:da:9d:e9:1e:4b:99:6f:2d:21:84:7f:77:ea:
d8:b6:0d:d2:1c:cd:86:07:4d:07:fa:77:1e:ac:e2:32:d2:b0:
e8:6a:69:64:c7:1f:60:dc:b4:b8:ff:b2:7d:6a:6a:c1:6f:1f:
af:b8:9e:6c:bc:2d:f0:ac:a8:2d:5b:6b:fc:3e:ad:fe:f4:e2:
63:10:f6:7b:80:7a:df:fb:1f:fd:37:47:dd:65:db:ac:94:61:
6a:ae:2a:c8:f1:03:07:26:fb:20:53:49:0c:cb:88:bd:b4:97:
bc:f0:42:32:52:99:f0:43:f7:c6:0e:87:d5:90:55:4c:11:55:
c3:99:4e:c1:94:a9:d7:b0:5e:3f:15:4d:6e:b2:d3:31:e9:07:
88:74:f4:ee:c2:50:d0:fe:5d:89:c3:5a:4f:c9:cd:95:82:6c:
80:62:89:37:80:4e:cd:ab:c2:51:3d:7a:ca:b7:ad:5f:3c:e9:
c2:ab:91:3f:b2:5e:39:0e:78:f7:6e:56:51:bc:ba:20:ea:2e:
de:74:bc:43:0b:19:bd:15:cc:db:42:39:cf:6e:77:71:33:90:
a8:39:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:09 2026 by rpki-client