Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: bCfuPcYaK4JZbED65t7x60Z/8SrE/poZAqN4dwfd/14=
Subject key identifier: 0F:D3:D4:F6:DC:6E:CD:8B:4F:3E:30:5E:08:90:B7:EF:3B:33:77:EE
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 01A177A740FE5D66684AC31D22A5A2319B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 15DC
Signing time: Mon 26 Oct 2026 10:00:12 +0000
Manifest this update: Mon 26 Oct 2026 10:00:12 +0000
Manifest next update: Tue 27 Oct 2026 10:00:12 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: hblUerDUZNkIsh2TR/wZSmgS4pHX5SeFeI+RUL6BT2o=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:40:fe:5d:66:68:4a:c3:1d:22:a5:a2:31:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Oct 26 10:00:12 2026 GMT
Not After : Oct 27 10:00:12 2026 GMT
Subject: CN=0fd3d4f6dc6ecd8b4f3e305e0890b7ef3b3377ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:16:50:da:03:9a:fc:2e:db:29:31:11:38:
d0:01:b1:c9:c0:65:71:29:20:44:ac:26:43:97:f2:
bc:68:b7:f7:ce:91:11:a9:ab:52:c3:d5:46:55:99:
fd:1e:ef:e2:05:26:90:7c:c5:e7:e9:86:5a:af:68:
7b:11:9c:27:97:f6:01:2f:30:94:a7:f7:e6:e5:2c:
7f:ba:37:fe:fb:ad:1c:95:cc:15:33:ce:1b:bc:fb:
63:26:3b:fa:09:f2:00:b3:84:84:21:98:a8:a8:7d:
02:11:0c:32:73:a1:90:db:3d:93:81:31:93:6a:d5:
27:2d:1d:11:db:fb:fe:ee:8b:db:5f:38:3f:a0:63:
99:0a:e0:69:a3:d8:37:00:23:34:bd:71:52:de:18:
05:c6:14:07:5f:9d:40:d8:dc:4a:a2:09:d5:cd:bb:
72:63:b0:f0:21:11:82:19:c2:f4:85:2c:51:ac:93:
dd:77:01:b0:0c:a0:4c:c7:da:c9:4b:53:c5:9a:33:
e9:48:d3:bb:49:7f:38:85:58:12:b4:a6:a8:03:2f:
c1:32:85:ea:2b:40:0e:cf:39:1e:b5:52:3d:59:ba:
06:56:2b:47:77:14:97:de:cb:2c:0c:4d:47:80:cd:
df:97:f4:d2:14:8b:cc:5c:ef:f5:d8:c8:dc:b6:7e:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:D4:F6:DC:6E:CD:8B:4F:3E:30:5E:08:90:B7:EF:3B:33:77:EE
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:47:f6:f4:01:1f:e7:ef:ed:cd:00:ed:71:08:6b:de:58:6b:
8c:39:be:46:9b:ed:e3:4d:a9:b7:fe:c8:06:23:4b:29:f7:af:
e1:89:e8:6d:d2:51:c7:ce:ff:72:85:56:73:ac:a7:f9:4f:14:
6b:d2:67:a5:72:fb:40:eb:02:b7:f9:3c:76:b7:cf:27:30:15:
9c:b4:c4:73:64:9c:a1:0d:00:b5:fe:6e:30:b8:36:ea:20:3b:
da:b0:c2:b6:68:0e:33:f6:c7:fc:68:69:1a:27:18:74:23:c0:
2a:ef:a2:c6:90:78:c8:d3:3e:08:36:2f:ec:6d:e7:15:0d:ed:
e1:7a:9a:38:10:8f:f9:6b:68:cc:74:02:fe:6d:e9:cf:05:96:
b5:dc:14:0f:b0:85:d6:d7:9a:e1:a6:e0:f0:e7:03:1a:0d:64:
ae:b8:08:21:97:c6:7d:d0:bc:98:d4:12:ba:9a:93:57:12:fd:
7b:b7:7a:74:c5:33:31:32:2c:ec:1e:18:13:6b:bf:25:af:40:
13:b8:3e:93:10:08:70:c1:95:c4:e3:83:f4:ce:b3:c8:68:8a:
39:c9:ae:83:76:a2:81:00:86:83:54:f6:61:81:f2:c1:af:6b:
cf:da:78:06:b9:1b:dd:53:7f:5e:94:f2:56:a8:90:ac:63:35:
43:36:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:54:30 2026 by rpki-client