Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
File: m_duqO3gk8p7UNTh216dQaIqnhc.mft (raw, json)
Hash identifier: D49fPTxGz3NB43KjgD5R96TKmiSFqpHUQmLEImj12ZU=
Subject key identifier: 15:CB:42:97:F0:F0:0C:95:2A:FB:30:F9:8F:ED:B4:91:2D:92:86:7C
Authority key identifier: 9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
Certificate issuer: /CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Certificate serial: 01A0D3B849BC77ED32AEBFA53A910A21F779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
Manifest number: F2
Signing time: Thu 24 Sep 2026 14:01:04 +0000
Manifest this update: Thu 24 Sep 2026 14:01:04 +0000
Manifest next update: Fri 25 Sep 2026 14:01:04 +0000
Files and hashes: 1: CjhHfksX_V_SdQUfM0SgRx_hkMs.asa (hash: NOZLcv27XZSi1ZcEGYFc8cYQPVIhU6kNJHUso451mdk=)
2: m_duqO3gk8p7UNTh216dQaIqnhc.crl (hash: hJF9QqWBn/xeaB4xNnJylzXl5PU0c032fpw4GdmzXNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:49:bc:77:ed:32:ae:bf:a5:3a:91:0a:21:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Validity
Not Before: Sep 24 14:01:04 2026 GMT
Not After : Sep 25 14:01:04 2026 GMT
Subject: CN=15cb4297f0f00c952afb30f98fedb4912d92867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:6b:b5:83:b8:0d:06:4f:3f:27:5f:87:17:
1f:ad:bd:82:e9:bf:f8:89:6a:f1:30:8c:88:67:42:
a5:8b:41:43:80:3f:13:0d:64:db:63:8d:b3:52:90:
e3:de:44:af:7e:b1:28:cd:5b:3c:1f:dd:39:78:f7:
a4:6f:18:4b:06:74:63:2c:31:dc:f9:da:dc:e7:14:
fc:8c:78:ec:7c:51:11:5f:bf:87:e9:db:65:6a:e9:
81:f1:78:2e:cf:c8:8c:87:23:8c:ed:21:26:f4:ec:
a8:dd:b7:d9:55:38:5d:4c:3e:44:0d:3b:80:f3:65:
47:03:66:0e:84:06:68:df:0b:25:d3:81:ec:3b:2f:
1c:2f:0d:49:e6:d9:7a:a5:56:68:ea:1a:31:8d:c9:
1e:20:a4:9e:c5:2a:5e:31:93:14:9c:e7:90:2f:f9:
97:06:20:59:d0:0a:54:8a:3f:b1:0b:d1:06:c7:aa:
d1:88:87:69:72:8a:11:3c:1f:3a:c7:15:b4:d8:cb:
7e:58:e1:43:46:aa:f0:a6:59:cf:ba:6c:04:03:6d:
d8:20:ed:27:f8:b1:a0:0e:dd:20:1d:b4:dc:4e:da:
35:c9:b5:27:d5:d0:6f:dd:78:82:f7:3c:14:16:ec:
c7:0a:e2:65:f3:f8:d0:6c:ad:d1:ec:a3:4d:07:35:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:42:97:F0:F0:0C:95:2A:FB:30:F9:8F:ED:B4:91:2D:92:86:7C
X509v3 Authority Key Identifier:
keyid:9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6b:73:e7:43:05:d7:8a:53:3f:68:c8:2a:3e:54:bf:25:4e:
9d:1d:88:98:d4:54:8f:f5:f5:a7:c8:de:0b:60:c4:d0:2f:99:
13:d3:1a:ba:14:8f:99:57:fb:07:01:11:bb:9f:1f:c9:d6:2f:
00:d8:e1:23:4b:40:02:fd:77:30:62:06:a0:48:c0:36:82:db:
c3:32:b7:e5:c9:19:9e:74:11:29:8a:39:08:95:70:76:70:ec:
b7:6c:5a:66:bf:15:cb:4f:fd:bb:f4:5c:2b:74:44:b1:a5:8c:
09:ad:5d:50:cd:ce:4c:1a:98:bb:9e:68:fa:20:4e:51:90:9a:
c4:6b:a6:54:6c:8f:1f:c9:fc:4c:85:47:67:9a:9b:20:56:27:
17:41:96:83:7b:da:d7:93:17:b5:5a:d4:45:f3:07:64:30:93:
b5:8b:50:bd:03:bb:cf:fe:a3:b6:35:13:68:c3:a8:52:9f:92:
93:79:93:cf:a7:ed:1e:6c:47:46:05:d7:09:42:b8:0d:b1:34:
87:bd:7c:e4:c0:48:5c:c0:02:20:a1:80:59:81:1c:ae:a2:b8:
79:f3:00:ad:49:40:4d:f5:94:cb:f6:65:ea:09:68:4d:a0:1c:
f7:44:c3:b4:48:c2:9b:a4:4e:2e:ef:61:99:10:c4:98:77:8f:
39:30:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:43:21 2026 by rpki-client