Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: X4bQuQy2RJLWVaBt4ATLhnUe//vqBaxw12/i1vcRf9w=
Subject key identifier: 1A:8D:B7:7F:B2:E0:F1:8D:A2:67:EB:65:F5:45:9A:79:97:17:30:EF
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 019D38664FAF4E14C22346B14F9BCD52C412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 13A9
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: JW6AoEtQ6zhXP/GP91SS4XWX02jDNzhCJTHXoxHv1CQ=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4f:af:4e:14:c2:23:46:b1:4f:9b:cd:52:c4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=1a8db77fb2e0f18da267eb65f5459a79971730ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:b5:af:4f:87:80:84:a9:bd:36:34:b4:9a:
7b:a3:86:f1:1e:ac:4f:b4:0c:59:b2:b9:2d:a5:f7:
8a:1a:88:0d:87:a0:c5:2d:96:88:68:09:9b:db:51:
b9:99:3f:da:fd:f0:6f:7d:14:53:c3:a4:76:01:9b:
67:a1:3a:a8:41:75:f7:f3:6a:b0:2e:a3:e1:a3:68:
2e:9c:ef:fc:44:59:24:13:ce:ff:ec:c3:4f:f6:5b:
db:93:54:df:f1:13:77:dc:af:8c:59:e6:31:7f:e4:
63:40:0e:c9:ab:04:3f:57:a3:ef:38:d3:4e:fa:5e:
95:45:6d:9b:58:48:1f:c2:8f:c0:0a:13:48:2b:46:
6e:3b:1e:1c:bc:1c:0a:15:ea:f6:1f:ce:2b:73:e8:
7d:47:09:6f:86:1d:df:97:97:19:50:d0:12:43:2a:
93:90:ed:f3:6d:06:13:0a:5e:dc:de:2a:73:3b:63:
fe:9f:94:3d:7f:09:03:42:52:d9:ce:d8:91:7d:57:
95:ac:6e:56:86:2b:bc:12:22:86:ae:83:70:b5:2d:
8a:dd:5a:e7:a7:99:7c:c9:17:3e:58:ba:63:9a:54:
c3:81:96:f0:a2:7b:cc:4a:da:d3:82:e7:27:25:71:
e7:3d:ca:65:3f:fc:59:a2:d8:44:d7:2a:85:53:3a:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8D:B7:7F:B2:E0:F1:8D:A2:67:EB:65:F5:45:9A:79:97:17:30:EF
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:3e:0e:a5:e2:50:58:d8:fa:86:29:2e:f8:c6:51:72:13:
29:d4:ad:4c:a4:66:70:fc:6e:10:5e:60:ae:e3:56:e2:fe:f8:
51:a0:96:46:e9:75:b6:c5:ba:e3:a3:20:9a:ec:82:64:c5:43:
8f:bb:01:4f:23:91:64:1e:73:10:00:72:3b:cb:2f:1e:7b:7b:
ff:0e:7a:cc:28:5e:bd:ab:65:98:db:d9:55:7b:e6:81:32:aa:
73:e4:d2:fa:de:83:03:89:22:ef:2d:06:30:b4:87:a5:c4:27:
8b:c1:43:90:08:30:af:eb:51:f6:1f:12:db:6e:f8:61:b4:4e:
96:13:4a:0d:ff:e0:79:c9:26:06:08:56:cf:30:75:d5:04:8b:
36:a2:d7:d6:74:fe:0e:3b:bb:a0:88:28:e8:2d:64:fb:98:e0:
45:e1:25:01:f3:7a:09:7a:00:28:2c:6e:af:c8:ae:fd:83:eb:
c3:50:8f:ce:02:51:ea:1c:e8:a8:ef:08:99:9b:f9:17:0d:7e:
bb:7b:4c:86:ed:c3:e8:df:c3:d0:0e:06:a1:48:a1:1d:c6:21:
09:8a:df:eb:99:25:15:32:ff:e2:55:e5:70:8d:4f:2e:21:33:
e1:a0:16:d6:f8:63:26:60:f5:79:1e:be:3b:fd:ae:f1:cb:4b:
0c:98:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:59 2026 by rpki-client