Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: IRS/lAnSlZIvr8AxwtHsmwBRoHRPBBKQ2LGpaNR/2Q8=
Subject key identifier: 94:E4:F0:5F:17:B6:A0:82:D4:06:44:C8:5C:4B:8D:05:00:05:DE:78
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 01A025B287771EC4E4DEE9F95111D29B34A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0350
Signing time: Fri 21 Aug 2026 19:00:52 +0000
Manifest this update: Fri 21 Aug 2026 19:00:52 +0000
Manifest next update: Sat 22 Aug 2026 19:00:52 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: bQ8/biGyRPzSiWtGX9+Iv/5I//FYGNLFNggksuiyHDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:b2:87:77:1e:c4:e4:de:e9:f9:51:11:d2:9b:34:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Aug 21 19:00:52 2026 GMT
Not After : Aug 22 19:00:52 2026 GMT
Subject: CN=94e4f05f17b6a082d40644c85c4b8d050005de78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:f4:dc:93:c4:a9:7c:39:c4:ab:32:99:3a:
43:3f:fd:8f:fb:58:c2:a3:e5:6c:1a:a3:b3:30:3d:
ab:e0:78:b8:76:b9:2e:3b:13:a4:2e:69:ca:f7:c0:
ca:14:1d:37:0d:5b:65:bf:6a:e4:90:6d:93:4a:b8:
b4:b5:54:25:b9:f5:5e:e0:a9:6c:6c:8b:f5:3c:62:
5a:1a:a2:09:45:24:5d:10:9f:2b:51:fa:0c:06:aa:
23:ee:ab:0e:5a:6a:4e:f2:f0:c9:e7:20:3c:44:e8:
b2:d9:08:56:9f:f1:b3:01:e1:39:aa:bf:2d:33:8a:
f9:ff:23:d5:bb:18:06:9f:e3:ff:70:df:d1:93:29:
16:e1:01:00:f1:2e:33:58:4f:41:b1:93:39:51:69:
6c:4e:52:aa:c8:0d:48:41:e4:3f:1e:41:ed:1c:17:
73:e0:38:12:5e:be:bd:7f:a9:2b:ce:0a:31:bc:17:
78:f1:d5:16:e0:4c:cf:af:dd:f7:be:47:a4:3b:41:
d7:2c:3d:db:df:72:4d:14:dd:57:dc:32:d5:a4:28:
8d:d2:21:26:94:6d:76:f9:02:a8:66:4b:bd:2b:26:
97:b8:97:d3:14:88:23:82:a5:01:71:12:16:49:43:
c9:01:ec:48:1d:3a:7e:2a:3a:26:c7:21:aa:06:99:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:F0:5F:17:B6:A0:82:D4:06:44:C8:5C:4B:8D:05:00:05:DE:78
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:36:c9:04:a7:ba:b0:c8:17:7a:d3:8a:67:2a:1c:97:f7:3e:
d8:27:d4:d5:11:f2:c3:cc:d5:8b:66:3f:5d:5e:5d:f1:82:d4:
66:79:d6:4c:9f:46:9d:51:8d:04:4b:8c:fe:d7:ab:c7:5c:e5:
46:4f:9f:cf:dd:93:51:2d:db:da:58:01:b0:aa:d0:65:f0:87:
b7:ae:3d:ca:31:db:83:ca:a8:55:e1:db:d0:43:09:cd:78:77:
88:c9:69:ec:c8:61:a7:27:4f:e9:59:b7:29:81:08:ac:3a:53:
30:a9:31:75:6b:5c:d2:87:79:8d:f4:52:7c:1f:e2:1e:0e:75:
d6:0e:4b:d2:4b:c0:19:93:f8:30:05:67:f6:ad:ee:ad:3c:85:
23:87:b6:78:d2:c9:56:eb:9d:a4:3e:d4:ea:38:f9:01:3f:9c:
ff:c8:75:4c:6d:21:f5:a4:3a:6f:44:64:5f:4c:b6:7d:11:51:
93:4e:46:9b:d9:2c:b9:ff:53:59:38:f2:f6:69:56:ba:fc:18:
4a:e8:11:9e:9d:c5:2c:77:5e:9d:0f:ef:20:5b:93:7c:fa:f0:
02:cb:ea:ab:01:cf:32:f4:9d:73:d3:4f:3e:29:83:b4:eb:94:
39:b8:e9:4d:7a:09:b7:17:18:7c:94:33:1b:4f:59:ad:df:94:
8d:03:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:41 2026 by rpki-client