Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: jr3w40ZxNFInc2nIJsyxqXkRfvYLzUot4nYB/2oF5hA=
Subject key identifier: DE:3D:BD:BE:4E:BA:24:85:81:35:28:54:20:3F:73:B6:A0:29:A3:91
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019E337356C25C8562528AB712E286E40206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 024E
Signing time: Sun 17 May 2026 01:00:57 +0000
Manifest this update: Sun 17 May 2026 01:00:57 +0000
Manifest next update: Mon 18 May 2026 01:00:57 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: wZoPmUTJW9iwepgJ5RJfNymx0iMuDrc93sjmGh/ZXRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:73:56:c2:5c:85:62:52:8a:b7:12:e2:86:e4:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: May 17 01:00:57 2026 GMT
Not After : May 18 01:00:57 2026 GMT
Subject: CN=de3dbdbe4eba248581352854203f73b6a029a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:be:23:16:96:2e:a2:96:f4:71:b9:41:85:
dd:94:3d:21:f9:12:58:c5:75:05:26:25:fb:00:61:
73:99:8e:65:79:65:d5:35:06:0f:42:f5:fe:48:c6:
ad:e1:da:32:d3:d5:8e:21:27:ce:ae:76:db:14:91:
a6:f4:ff:59:78:84:1a:4f:03:8e:67:9d:bc:58:fe:
d7:34:f8:c2:3e:29:6f:a3:d2:b2:53:81:c6:89:54:
b2:c2:60:20:54:9f:dd:fd:3e:a7:c3:8b:2a:41:9a:
98:65:f1:f2:23:9b:ee:31:76:2d:af:1d:b5:77:03:
0b:55:6f:82:26:3b:55:fb:61:57:5e:0d:30:df:df:
02:3b:08:79:64:09:9e:99:04:ec:8e:f0:7e:da:ee:
c7:c4:0a:31:c4:94:bc:8c:11:d0:3c:2a:7f:6b:41:
d6:94:e9:ca:93:dd:d2:de:8a:5c:8a:7f:ed:a0:4b:
76:83:ef:2a:d4:f6:de:68:3d:fb:a2:a8:60:0f:52:
fd:02:4b:f9:ba:e4:af:ec:49:ff:05:81:ff:fd:a4:
5b:ea:69:81:48:4d:dc:03:8d:24:e8:54:82:98:6b:
12:74:6b:de:49:9a:e9:18:c2:f9:c6:b5:39:07:fa:
84:26:3e:56:5a:09:09:55:64:57:a2:6d:16:e1:22:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3D:BD:BE:4E:BA:24:85:81:35:28:54:20:3F:73:B6:A0:29:A3:91
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:04:1d:31:d0:04:d5:91:c3:0f:5c:4a:ae:40:55:a4:1c:2b:
c9:74:48:b9:d0:10:dc:36:c5:d1:6e:27:6f:c2:d7:77:36:61:
1c:aa:b2:98:85:14:87:9e:b4:37:4c:77:ed:b3:ba:4b:0c:e1:
55:34:ab:5a:1a:d5:39:74:37:44:0a:bd:94:dd:f6:91:4b:b6:
5f:be:94:59:14:62:fe:2e:46:21:17:9d:b8:40:36:ab:0b:7b:
9d:25:ba:c7:0e:2f:78:6b:99:ea:50:59:bc:7a:8c:b6:fc:f7:
2e:fb:cd:4d:20:36:95:5e:db:55:81:12:9b:69:b8:00:6b:85:
09:84:4b:63:1a:65:df:fa:c1:40:6c:a6:be:a3:5a:ce:44:92:
9d:04:b8:93:74:ef:53:2e:60:b2:c5:72:44:01:de:6b:68:4c:
e9:42:e4:f4:20:8c:b7:d8:98:df:c2:5a:9d:45:ce:14:c9:0e:
30:67:7d:c1:6b:b8:35:9d:e7:80:94:ce:b7:28:1c:38:c0:61:
71:ed:69:b7:96:6f:c8:63:af:cc:27:8e:ed:81:1b:59:d2:10:
52:f8:94:23:a7:15:31:a5:4b:8c:05:5b:65:71:e5:e1:2d:4e:
54:10:c0:2c:6d:35:77:52:6d:c2:fe:28:fe:a9:65:a2:7a:b6:
c8:87:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 04:16:06 2026 by rpki-client