Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: 3HzpBzo08mkLZsEFM0ykTzJEjXgwiXmJ11nBJMlOe0Y=
Subject key identifier: B6:06:B5:73:F2:F9:18:8D:84:B8:20:C0:02:D5:33:95:7F:54:E2:64
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 01A1268B9B8251CCB794207C3E6E4EBDBF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 03D5
Signing time: Sat 10 Oct 2026 16:00:45 +0000
Manifest this update: Sat 10 Oct 2026 16:00:45 +0000
Manifest next update: Sun 11 Oct 2026 16:00:45 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: 59RZ25XBZMszo/K5GiOvf0pRvufHinBPWSvUYoh8l1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8b:9b:82:51:cc:b7:94:20:7c:3e:6e:4e:bd:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Oct 10 16:00:45 2026 GMT
Not After : Oct 11 16:00:45 2026 GMT
Subject: CN=b606b573f2f9188d84b820c002d533957f54e264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:9b:b6:81:8e:8e:51:bd:ed:0f:17:66:14:
62:2f:70:4e:4b:64:d7:ad:58:ae:f4:c0:81:5f:29:
25:89:5b:b2:50:de:dc:54:13:3e:fa:40:d2:b7:ad:
b1:76:9e:f0:77:4e:f9:78:18:e4:6c:c2:88:b0:2b:
a6:f2:5f:33:62:49:4f:9f:8c:2e:98:57:46:7e:57:
88:e1:95:5b:74:23:b3:06:79:b0:df:08:47:d7:ed:
32:1a:56:a1:9c:42:c3:71:dc:7c:df:dd:a7:53:e4:
b2:1d:e7:14:fb:d9:b1:3b:7d:e9:73:1b:1d:9b:f2:
5e:58:e6:9c:c9:23:aa:e2:2d:1d:aa:17:39:17:c0:
5d:e4:81:cb:f2:d1:08:af:46:3f:72:7a:52:f5:da:
d7:00:65:23:11:18:24:2a:8c:27:25:57:9b:dd:c7:
69:ce:d4:32:ad:13:8e:b9:ae:e9:01:15:70:cf:cc:
4c:eb:a7:76:13:d6:b9:b5:43:2c:ad:3a:22:09:c7:
d0:9a:38:12:d4:10:d6:61:40:bc:85:0a:6e:62:3f:
af:2c:ea:3a:a4:22:0d:52:5a:a8:1a:92:9f:ac:0e:
ff:7b:69:7a:10:d6:62:48:14:18:eb:5e:ed:59:32:
73:72:79:a9:d0:1c:f1:51:3f:e8:94:5c:b9:59:79:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:B5:73:F2:F9:18:8D:84:B8:20:C0:02:D5:33:95:7F:54:E2:64
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5b:03:45:07:1c:ad:d4:5a:a6:99:c4:95:76:39:7a:63:02:
33:b4:6d:01:2f:95:75:23:d3:bc:07:0c:12:64:2d:84:26:fa:
04:69:28:68:e4:89:44:51:c1:f7:c8:9e:7d:f3:19:79:ff:01:
44:b6:8d:b0:a8:55:0d:d3:f3:77:04:13:d5:9d:e0:f6:0b:ce:
a2:06:0b:9f:6c:f9:1a:4c:6e:61:53:3e:3f:7f:1a:04:97:98:
d8:07:59:54:aa:17:13:fd:3d:4c:c2:ed:32:d7:95:28:b4:1b:
72:90:4c:9d:10:b0:1b:69:31:43:c9:22:3b:0c:d9:41:58:e2:
ef:c5:7d:ff:ba:e3:51:4c:d2:62:52:37:4e:16:af:97:5c:3e:
fc:48:c0:07:66:1d:7f:0f:75:05:3f:ea:41:46:34:e6:f0:a8:
de:70:13:02:73:65:a8:bf:a3:21:ff:cd:66:d8:39:18:7c:cc:
6c:aa:82:06:7d:16:70:61:ba:80:40:ba:e5:3a:c3:cf:39:1a:
49:98:63:54:09:ea:28:3f:55:d2:2a:b2:36:1a:ad:a6:a3:a1:
04:cc:8c:b5:e1:8b:4f:94:42:91:3e:60:ef:58:58:51:a0:95:
bc:2e:59:f2:f9:24:8c:d2:ae:2a:46:f5:98:37:81:55:72:83:
10:f5:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:42:28 2026 by rpki-client