Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: IJxmJdSp2z9YIax/2AtH87jvi/KIiOKmqkL6XcRSlLA=
Subject key identifier: FC:82:82:B7:34:41:59:07:9E:5C:71:97:47:22:82:1D:F9:46:91:09
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019CAB34B1C51AF16E411096146025FB34BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:23 +0000
Manifest this update: Sun 01 Mar 2026 21:01:23 +0000
Manifest next update: Mon 02 Mar 2026 21:01:23 +0000
Files and hashes: 1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: YgKpQPQaaDqyxCozYGQ1hHbP3RpTibaPnBpuejzt4lI=)
3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b1:c5:1a:f1:6e:41:10:96:14:60:25:fb:34:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Mar 1 21:01:23 2026 GMT
Not After : Mar 2 21:01:23 2026 GMT
Subject: CN=fc8282b7344159079e5c71974722821df9469109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:f7:2a:f3:6f:ea:5d:25:92:dc:74:79:a5:
b4:05:c6:15:56:1b:6d:4d:76:26:e2:3c:78:e3:1c:
15:1c:87:02:41:29:69:f1:98:63:96:2e:39:81:f7:
72:ad:86:a6:d4:9e:d0:5b:e5:d6:6a:f4:c0:09:44:
6c:26:82:5a:9b:d4:c0:44:45:02:65:ba:c9:30:be:
70:88:64:f7:08:27:a4:c4:6a:23:52:a7:2b:ad:c4:
68:d9:7f:43:98:0f:71:4e:3c:77:73:5f:b5:0a:38:
73:96:23:08:8f:8e:f1:89:b0:fb:e9:38:ff:d9:98:
8c:75:6c:c0:ef:c9:67:55:99:3f:81:c4:2b:07:9d:
61:71:7e:78:a5:e2:72:de:70:7c:80:46:13:4a:fe:
73:04:6b:e6:d9:4c:7d:94:6b:e1:50:bf:eb:49:74:
50:fb:f8:5e:8d:c6:5e:1b:67:33:c6:f1:38:03:82:
ad:1f:64:a2:90:14:29:84:c6:8a:a0:c6:09:b3:12:
4c:f2:dd:e1:b8:7d:15:af:ed:47:f0:70:9c:90:7e:
8f:84:bd:9f:05:74:2c:54:2b:9c:2f:a3:c2:00:2e:
09:85:48:6b:c9:dc:de:96:dc:9a:dc:c1:4b:4c:82:
c5:85:3d:c5:bf:43:bf:35:0a:53:13:46:7e:4b:31:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:82:B7:34:41:59:07:9E:5C:71:97:47:22:82:1D:F9:46:91:09
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:a5:5e:5d:03:9a:8c:33:7e:3a:fb:38:ad:c4:cc:da:5c:
d4:0c:8e:1f:05:00:ae:4c:c9:67:36:92:10:3b:98:38:01:8a:
78:3d:82:98:98:2d:f8:94:86:19:5c:1d:a5:0e:3e:13:d0:49:
b5:85:72:ab:77:e3:c9:e6:d9:bb:5a:53:08:bc:fa:18:36:51:
1d:88:be:35:4e:71:6e:56:4f:74:5d:92:b5:d2:0e:2f:5a:26:
d4:59:71:a2:83:6a:c9:e8:b1:cf:8a:06:59:34:fe:22:36:f0:
97:8a:0a:a9:58:c1:f1:6a:be:d7:8a:b0:e0:34:71:29:fe:b6:
b5:ca:1c:3a:a6:67:f0:2f:13:1c:4b:50:72:3a:15:67:f9:d1:
84:bd:ac:4e:29:f3:0c:99:41:43:1c:6a:d8:29:f3:22:a4:ae:
74:36:82:cf:31:e8:47:f0:ed:24:fb:20:3e:19:1c:1f:36:96:
d3:50:24:cd:7e:2f:38:f9:5a:bb:15:16:58:60:af:6b:a1:4a:
9c:be:52:d4:66:c3:bb:c7:42:04:cc:d4:cd:28:fb:2a:bb:c9:
43:93:3a:e2:a1:99:0e:37:cd:0c:93:80:21:ff:f9:78:fd:84:
49:f2:f0:d3:41:50:49:62:e9:08:93:af:62:c4:42:c9:7f:01:
75:65:64:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:21 2026 by rpki-client