Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: xmsm7GdKuZzFig1F5xNrmGevhyEWQbVD1y3Pm8Zj4Cc=
Subject key identifier: 9E:01:12:16:BE:94:E5:31:DE:BE:26:20:51:5D:A2:15:DC:D2:45:03
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019D386595C31955F9A444A55DD98A913455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 01CC
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: l8O77doKg8cz0UL2Gtszemd+7u8g6JK1BraUQDYmNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:95:c3:19:55:f9:a4:44:a5:5d:d9:8a:91:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=9e011216be94e531debe2620515da215dcd24503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:28:8b:b7:f4:1c:ed:7c:40:d5:be:94:01:
34:26:97:53:4f:6e:ef:c3:77:fa:6b:a5:08:1e:d7:
17:65:ee:6f:a8:6d:84:ba:98:51:81:44:ba:85:37:
c6:86:55:0b:39:23:30:dd:d5:8d:6f:7c:1e:4e:a3:
ac:38:db:67:ec:20:9a:45:c9:2e:90:18:93:09:14:
d0:7f:bf:73:97:2f:4e:48:19:cf:d6:ca:f8:aa:14:
aa:cb:1d:56:8d:28:c1:ed:01:c6:07:96:da:83:31:
c6:b6:59:e3:c3:15:86:84:56:58:55:40:d0:05:e7:
97:f3:44:ca:0c:ff:e7:ee:3b:a7:51:d7:9f:f8:07:
de:97:84:5a:f6:ae:48:81:21:01:5b:8d:e1:67:9c:
91:f5:c6:23:5e:6b:ca:12:5a:ac:d6:e9:7b:31:31:
da:27:d2:fa:64:2a:ab:e2:49:ba:ae:84:ef:7b:c8:
3f:b8:f4:1e:03:b0:12:72:a7:8f:04:91:ae:0a:a7:
bd:3b:ee:e8:60:78:2f:b5:ae:99:37:32:24:03:4a:
3b:fc:ab:b0:be:5b:da:04:91:55:2d:95:6d:9a:83:
24:09:22:38:5f:07:9e:ba:7f:ea:d7:4c:3b:6c:0b:
d3:d6:51:0e:8b:96:b8:05:62:49:d0:fb:0b:73:9b:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:12:16:BE:94:E5:31:DE:BE:26:20:51:5D:A2:15:DC:D2:45:03
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:c7:ed:02:d8:5e:ec:d5:14:a9:7b:e2:ec:07:de:21:17:
bd:54:30:9c:47:3c:53:a0:1b:27:ee:c0:89:08:99:02:f6:22:
8f:df:f9:a9:1d:40:82:55:64:09:0a:e5:c7:d2:35:eb:a2:93:
15:36:3f:93:66:3c:1e:63:5a:ac:75:a0:5c:eb:66:bf:d1:9e:
bd:b6:c0:c1:58:5c:df:3c:df:71:6e:4f:1b:56:71:95:34:5f:
1b:ef:34:b3:09:ee:bf:e1:b1:c0:b0:20:7b:08:40:47:78:c6:
13:68:a8:ae:80:bd:46:35:e0:8c:55:37:37:0a:0f:0b:cc:7c:
30:dc:46:6b:05:08:bc:62:63:eb:32:06:e9:63:97:d7:e7:25:
82:45:6d:10:42:b8:38:d2:02:23:be:7f:92:be:28:b2:8e:f0:
35:d3:1a:73:fc:fc:9a:6c:41:39:d0:0a:00:10:03:a9:99:a4:
87:16:5b:ca:4c:8f:e8:b4:d1:90:07:b5:01:7c:d0:7c:ca:77:
ee:d2:82:b4:0d:22:71:e9:89:7b:32:71:35:5c:6c:b7:56:0d:
b8:1b:b4:00:28:48:64:d0:0e:a1:ca:57:48:50:a4:9d:12:d0:
98:9f:a8:c4:e2:31:f3:a5:bc:ba:90:d7:d8:89:cc:ad:ce:b6:
d5:6d:07:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZXDGVX5pESlXdmKkTRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi
MDNiNmYwHhcNMjYwMzI5MDcwMTE0WhcNMjYwMzMwMDcwMTE0WjAzMTEwLwYDVQQD
Eyg5ZTAxMTIxNmJlOTRlNTMxZGViZTI2MjA1MTVkYTIxNWRjZDI0NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43Qoi7f0HO18QNW+lAE0JpdTT27v
w3f6a6UIHtcXZe5vqG2EuphRgUS6hTfGhlULOSMw3dWNb3weTqOsONtn7CCaRcku
kBiTCRTQf79zly9OSBnP1sr4qhSqyx1WjSjB7QHGB5bagzHGtlnjwxWGhFZYVUDQ
BeeX80TKDP/n7junUdef+Afel4Ra9q5IgSEBW43hZ5yR9cYjXmvKElqs1ul7MTHa
J9L6ZCqr4km6roTve8g/uPQeA7AScqePBJGuCqe9O+7oYHgvta6ZNzIkA0o7/Kuw
vlvaBJFVLZVtmoMkCSI4Xweeun/q10w7bAvT1lEOi5a4BWJJ0PsLc5trKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4BEha+lOUx3r4mIFFdohXc0kUDMB8GA1UdIwQY
MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt
MDM4NTM0OWZmMWU4LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4
LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf3H7QLY
XuzVFKl74uwH3iEXvVQwnEc8U6AbJ+7AiQiZAvYij9/5qR1AglVkCQrlx9I166KT
FTY/k2Y8HmNarHWgXOtmv9GevbbAwVhc3zzfcW5PG1ZxlTRfG+80swnuv+GxwLAg
ewhAR3jGE2ioroC9RjXgjFU3NwoPC8x8MNxGawUIvGJj6zIG6WOX1+clgkVtEEK4
ONICI75/kr4oso7wNdMac/z8mmxBOdAKABADqZmkhxZbykyP6LTRkAe1AXzQfMp3
7tKCtA0icemJezJxNVxst1YNuBu0AChIZNAOocpXSFCknRLQmJ+oxOIx86W8upDX
2InMrc621W0H4A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:01 2026 by rpki-client