Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: 3hHFEN17jqyJCnJDvyLrUI5TqemBVUiPeUkt8U1XGvg=
Subject key identifier: BB:AD:08:4E:75:ED:53:BB:D8:96:C3:75:0C:4E:98:9C:6C:07:28:C6
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019F3A1842CD804CB7825158E6338CE1A51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 02D6
Signing time: Tue 07 Jul 2026 01:01:36 +0000
Manifest this update: Tue 07 Jul 2026 01:01:36 +0000
Manifest next update: Wed 08 Jul 2026 01:01:36 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: tEhSafUftmeGepCbhxGt786wTemEuAYjfjBlhaUIsu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:18:42:cd:80:4c:b7:82:51:58:e6:33:8c:e1:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Jul 7 01:01:36 2026 GMT
Not After : Jul 8 01:01:36 2026 GMT
Subject: CN=bbad084e75ed53bbd896c3750c4e989c6c0728c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:df:15:16:73:7b:01:de:cd:93:b5:3a:f7:
64:21:10:8d:e8:f1:29:5d:3f:76:3a:7e:a8:8a:12:
ba:ff:6b:74:ae:da:30:dc:29:76:dc:8e:09:77:95:
e2:d2:d6:2a:4c:db:ee:df:6b:b5:51:04:ca:7d:5d:
c5:9f:2d:d9:47:f7:42:54:28:24:2e:6b:6e:3f:29:
8b:4d:fb:a1:51:f7:82:c8:7c:d6:83:19:5f:dc:c2:
7f:4a:ca:79:49:c1:d4:42:c2:4b:b0:d8:39:82:de:
7c:b1:d6:e0:9c:f1:fd:d7:71:86:07:5d:0d:a9:a6:
62:e0:9b:3e:ee:44:e2:df:cf:8f:9e:fc:76:f4:2f:
a3:f2:8b:a7:79:4c:b8:8f:fc:4d:ed:a2:09:3e:8d:
24:7f:cd:3c:06:f4:78:a8:54:49:d7:01:b3:02:5d:
4b:f7:a9:95:a9:17:1c:d1:5b:48:c6:bb:75:37:4f:
39:c3:c6:98:a8:36:26:a4:72:95:f2:7f:e3:9a:fe:
55:d2:2d:08:43:cd:53:b6:fd:49:99:ea:4c:91:f8:
c2:a0:b6:c3:bb:b8:cf:6e:65:50:eb:ac:59:f0:b4:
85:07:ec:9e:9d:3d:43:1d:a3:9c:48:e7:6d:45:30:
2d:f0:1b:b0:17:40:6a:69:1a:85:98:76:03:51:a4:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:08:4E:75:ED:53:BB:D8:96:C3:75:0C:4E:98:9C:6C:07:28:C6
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:86:d5:c7:f6:d9:11:99:a1:f8:97:38:2e:09:60:02:23:aa:
56:2c:ff:37:4a:9b:52:04:ac:03:92:a3:e1:be:52:80:fe:c0:
79:2d:4d:2a:88:f2:e2:05:43:3e:49:a3:c1:29:20:76:0b:3c:
e4:01:51:f5:cc:6c:43:cf:02:64:56:cf:20:e1:48:0a:8a:0c:
65:0e:2b:8c:64:4c:5b:d4:29:1d:e1:26:7c:62:5c:5b:70:7b:
e9:51:1a:5a:69:a8:4f:8a:1a:91:08:56:0e:bc:fd:07:a4:9d:
a4:a0:6e:d0:2c:9e:e0:4d:93:7c:0e:2b:9c:f1:b4:38:14:a2:
fc:eb:74:40:9d:12:1c:65:74:14:d3:99:c3:96:57:3c:49:4e:
e2:4e:0d:74:2c:f0:15:5c:1f:e1:9f:46:c8:6c:fd:92:a9:d6:
bd:db:77:0f:7e:6f:74:86:5b:78:42:21:03:fd:2d:b1:b0:c6:
fa:98:07:ef:b1:3b:6d:9c:04:83:24:d2:1a:85:06:38:7a:cf:
44:c0:48:63:a1:c5:cb:29:d0:34:17:ce:55:0e:78:32:25:6e:
38:e9:bb:1c:96:12:21:39:7c:6f:8c:0d:98:ae:d3:bd:11:49:
09:25:2a:15:82:53:18:7b:5b:29:65:06:3e:46:88:df:56:48:
60:db:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:29 2026 by rpki-client