Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: AW9viE5C3qbXJVj4hoIFYBywqu2YPRUmBCJGtBEKcrg=
Subject key identifier: 53:3E:49:51:D6:8A:D4:D3:D4:94:F2:BE:FD:04:BD:2E:9D:57:D3:C0
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 019E9214C02659B957347E116161FAB68683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 145C
Signing time: Thu 04 Jun 2026 10:01:33 +0000
Manifest this update: Thu 04 Jun 2026 10:01:33 +0000
Manifest next update: Fri 05 Jun 2026 10:01:33 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: mGEsAvbr5pSSFa8QJAC5G1LhT0UHgz0cMeXPMhgo5SQ=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:14:c0:26:59:b9:57:34:7e:11:61:61:fa:b6:86:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Jun 4 10:01:33 2026 GMT
Not After : Jun 5 10:01:33 2026 GMT
Subject: CN=533e4951d68ad4d3d494f2befd04bd2e9d57d3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:fa:95:e5:c9:00:66:b1:59:34:52:18:87:
97:a5:32:ca:3b:5e:f7:de:ea:c0:52:5c:d0:83:30:
a1:cc:79:0d:a8:12:9b:3a:23:ba:10:27:17:ad:f9:
d7:49:18:c2:25:ee:68:c3:fc:83:4e:73:90:e9:0b:
8f:20:fb:e2:09:d6:00:83:2f:bb:ee:3f:74:c7:0f:
ff:05:3b:17:e5:97:d6:7f:11:dd:a8:98:2d:13:69:
52:5a:c6:db:6e:be:b1:0d:e1:6d:76:27:c0:25:75:
db:c3:a5:d2:0a:65:03:73:11:45:96:74:cd:44:9c:
d1:4f:b8:7c:65:e9:33:42:f9:34:19:25:a5:69:4b:
a0:5b:98:68:c2:47:54:5b:f2:a4:1e:20:0b:73:ab:
52:4f:aa:ac:24:e5:34:91:42:29:12:de:a0:cc:f7:
16:63:dd:50:33:e1:2b:94:26:34:6b:5c:db:53:8f:
d5:42:02:e3:ae:ea:77:38:ac:80:90:9c:02:77:6b:
d6:82:eb:87:03:fe:27:71:0b:2c:72:de:fd:a2:ca:
e0:c6:2a:bf:a5:ce:6c:b8:b2:d8:a3:4a:aa:bc:af:
79:3c:fe:1c:b1:23:ac:b0:2f:63:e7:76:58:e4:11:
6f:72:b5:2c:4b:67:91:30:ff:03:76:44:8d:07:57:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:49:51:D6:8A:D4:D3:D4:94:F2:BE:FD:04:BD:2E:9D:57:D3:C0
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8d:dc:6b:ee:59:4a:d4:d9:fd:8f:93:1b:88:93:a1:99:7b:
6f:73:91:6a:06:40:f3:f7:ad:c7:0c:88:22:ec:aa:91:98:d7:
99:d5:8f:60:1c:a7:f8:77:bb:c8:8e:b3:63:6e:63:8d:69:cb:
bf:1d:6d:7b:1e:06:dd:0f:91:f4:e7:68:fa:d9:fb:38:c4:fb:
13:ed:b9:64:73:e4:3e:e6:60:b5:35:00:57:fd:a6:d3:be:fb:
d6:b1:31:75:40:0d:85:c9:01:f8:51:a6:ec:cb:b0:3b:af:c4:
3e:b2:91:06:cd:de:06:19:e2:4f:24:ce:8f:13:06:cc:11:6a:
5e:6d:69:a7:87:37:c5:92:75:21:d0:1d:8d:bc:35:91:3b:ca:
fe:b6:38:2a:47:c7:f4:f0:41:83:9f:06:b0:c6:5c:b5:2a:5a:
6f:e1:af:c6:3f:c1:bc:dc:09:d9:62:7f:c3:01:66:34:2b:7a:
f2:39:53:30:9a:4d:cd:94:a1:66:bf:76:c9:d3:cb:8c:e8:91:
ed:c5:d6:4d:e8:f1:6d:4f:54:57:b1:a3:c3:eb:5e:01:75:3b:
78:4c:84:cd:1e:0f:c2:1b:10:0e:38:14:ce:34:f4:bf:10:60:
87:85:dc:bb:23:65:66:5e:90:a4:b2:db:82:a5:31:69:19:cb:
b2:43:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:08:21 2026 by rpki-client