Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: M6nYYRYfcGyReEltLKJj1IIeqCqtsh9SIfdEVUU1U64=
Subject key identifier: 63:5C:10:AE:54:E3:7A:BA:5C:FC:DC:C1:30:99:FF:99:E0:12:EC:69
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 01A1C2C21FDBCBFD9F5A2C14DEC1198EDC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 1AEB
Signing time: Tue 10 Nov 2026 00:01:04 +0000
Manifest this update: Tue 10 Nov 2026 00:01:04 +0000
Manifest next update: Wed 11 Nov 2026 00:01:04 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: uM2R0iVPttvColyRMbX1NxD/YcGRWdZNaIpZjWxq3Og=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:c2:1f:db:cb:fd:9f:5a:2c:14:de:c1:19:8e:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Nov 10 00:01:04 2026 GMT
Not After : Nov 11 00:01:04 2026 GMT
Subject: CN=635c10ae54e37aba5cfcdcc13099ff99e012ec69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:88:c0:82:52:94:d9:65:65:0a:bd:b6:9b:
cd:43:db:15:dc:70:1f:52:d5:2e:14:0f:31:34:a7:
a6:2d:f9:b1:3e:fe:09:7d:67:14:bb:3f:33:33:bc:
34:4c:59:1c:f4:a9:37:49:f7:73:a2:d2:21:3d:49:
11:f7:b1:64:c6:bd:b6:40:2b:ab:b1:3c:c0:57:59:
49:fa:01:58:7e:ea:77:68:ab:02:a2:27:d7:7c:4d:
84:04:2b:84:d5:e8:3b:79:99:6c:e6:90:9d:ae:19:
a6:46:65:3f:ce:b2:3c:e1:b7:a8:c6:4b:33:93:f9:
ab:fb:e2:91:6c:1f:10:79:fe:e9:4f:09:85:b7:fa:
43:83:c9:5b:d1:1a:36:47:e5:e6:c1:e4:79:de:5c:
8e:8c:5b:44:9a:10:9f:fe:ec:9b:ee:2c:b5:7f:0e:
2f:4d:a6:d3:56:e0:bd:fb:38:38:f2:ab:e6:c0:7a:
05:38:cd:b2:ad:3b:8c:e1:b7:72:97:a2:09:a1:69:
76:1c:11:eb:f6:c5:a5:b8:23:28:a9:52:5d:28:55:
fd:11:83:ab:22:62:6b:b2:38:0e:f7:d4:56:8d:2c:
85:19:7f:c1:6d:8f:f7:3c:5d:38:85:cd:55:e6:2a:
ee:cc:c4:2e:d9:74:be:a9:da:52:c8:bf:c0:25:a0:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5C:10:AE:54:E3:7A:BA:5C:FC:DC:C1:30:99:FF:99:E0:12:EC:69
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:49:fa:9d:76:72:d3:1a:ec:db:f5:02:a8:7c:ad:7f:c3:24:
6e:2b:d0:ed:eb:c0:7f:a9:01:dc:a9:e5:24:e5:fc:10:77:50:
dc:1c:0d:11:0a:53:2e:e4:f9:9a:e4:22:42:a3:46:54:1a:5e:
cf:49:c6:29:a6:ce:70:3a:da:2c:2b:6d:d7:98:d3:90:01:95:
59:30:e0:ce:7e:e9:68:7b:97:5d:6c:0d:a7:3a:23:1e:ea:3e:
96:e0:4a:ca:bd:ee:79:4f:4c:41:63:33:f0:6e:98:77:c0:5e:
77:db:15:ac:86:a8:cb:f7:59:2c:0a:8c:69:2e:7c:73:26:a4:
4d:f1:ef:c1:f1:3b:39:56:b9:b2:24:7d:e9:ac:a0:34:64:63:
95:7f:83:8a:50:c3:45:f2:77:28:d5:92:56:e2:a3:00:d4:91:
be:9a:92:24:1b:d0:de:57:d3:58:a9:70:af:1a:0b:0a:16:78:
12:81:4a:24:c7:04:0e:80:f3:b1:05:70:9c:fc:8c:8c:f9:34:
14:cf:f9:b3:b2:33:43:db:16:82:ec:0f:5c:0d:4d:2d:bf:5d:
e4:c3:17:4f:a2:bd:56:55:73:24:3e:c3:f7:90:27:40:dd:b6:
ce:f4:1f:5a:14:e7:2c:93:1f:b3:02:39:a1:86:78:aa:d5:88:
12:9f:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:35:13 2026 by rpki-client