Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: kmEKf8PoqZwTm5wEqlHjn8FPDg5nb9JlZU8W9ciaCEQ=
Subject key identifier: 03:02:C4:CD:73:82:D9:33:1E:D7:89:93:CE:E2:88:15:87:CE:11:13
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019D98BDBC3490E6B824A08A70CE44F4B1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: oUUCPfWeXBuhaXXnWaaJv3DxrojrfA07TrRj+H6a7OM=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:bc:34:90:e6:b8:24:a0:8a:70:ce:44:f4:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=0302c4cd7382d9331ed78993cee2881587ce1113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:70:f2:d6:9d:44:04:04:d0:a4:cd:1c:34:
04:d0:0f:35:69:02:c8:9a:3c:7d:84:10:88:29:5c:
58:f7:53:2f:b8:1d:3e:18:c3:27:3d:70:7b:fe:79:
d0:95:e4:48:0b:61:63:d7:87:15:21:55:a0:2d:4b:
0e:1d:06:21:48:31:68:33:ca:99:7c:50:d9:66:5b:
b8:18:65:4f:76:48:56:c1:b4:39:65:93:ec:08:59:
83:57:20:b9:75:b4:71:70:6a:48:a4:d7:62:7b:e2:
10:07:1d:2e:a3:40:1f:94:fc:9d:36:81:82:bc:86:
c2:1d:27:91:65:f5:4d:83:5d:35:68:91:02:5d:b7:
ce:06:f8:81:b8:d8:68:40:78:57:23:a3:55:ce:ee:
16:b2:14:07:f9:cb:b0:5b:bc:2c:71:c3:77:17:9c:
70:b9:d8:4a:44:e9:2c:c7:95:89:1a:5a:78:78:c6:
c9:45:07:85:61:48:48:1e:25:4b:66:c3:ed:ba:c7:
1d:2d:ab:d4:dc:70:ef:23:af:c4:de:4d:2e:58:56:
a1:a6:c0:de:9a:1f:96:8c:f7:9b:c7:bb:99:32:ca:
e2:9c:ad:84:df:c6:9d:f8:34:6b:6b:00:e8:31:c3:
b2:d3:b2:61:b3:a9:aa:bb:9b:c5:22:38:22:02:01:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:C4:CD:73:82:D9:33:1E:D7:89:93:CE:E2:88:15:87:CE:11:13
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cb:0a:94:99:78:d0:9e:12:76:b9:ba:54:b5:dc:9a:e8:fe:
de:16:f9:52:3d:d0:e7:65:82:ab:16:9b:c2:c9:49:46:0d:5e:
06:81:14:11:ed:99:ea:43:21:56:41:68:68:0c:63:52:fe:3d:
04:d5:02:26:56:b4:df:ec:8a:fe:44:50:d8:ca:1b:77:e6:1e:
18:51:33:04:ff:6a:7d:7e:4b:68:65:92:fa:fa:92:2e:99:86:
77:75:b6:dd:f0:13:d3:db:cd:19:e8:c8:32:ba:42:ba:0b:c8:
79:d4:b3:ad:ff:8e:6b:42:98:4d:a9:83:88:be:93:0d:ee:40:
6d:7f:3e:64:8a:76:c0:5b:60:3e:e4:95:f8:01:65:5f:57:aa:
e5:cd:f2:59:56:ba:3a:16:fb:fd:39:86:ff:77:37:85:70:ac:
f2:28:15:48:09:e6:72:50:0d:bf:93:6a:19:22:a1:15:39:18:
1b:45:e8:ec:4d:fb:f0:3b:8e:38:71:de:1f:0a:67:21:ed:1b:
79:b5:1f:2e:59:ab:82:d8:ee:8d:71:c6:94:5d:47:0a:71:df:
33:75:7f:21:16:83:21:13:91:4e:1e:a5:bb:03:fb:f9:16:9e:
8f:a0:de:f3:99:fb:24:a1:6b:f4:50:b6:73:af:37:25:da:fa:
09:f9:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:29 2026 by rpki-client