Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: fjsIAz/UNvyNy+VpEVhizQlJrX998sIEU/ZfG0MQcWY=
Subject key identifier: 48:D9:81:40:C3:BE:D7:70:58:0D:D0:42:75:40:07:7B:04:DF:4F:7E
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 01A0CDB552018F82B8332066057FE5BFE352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 03A7
Signing time: Wed 23 Sep 2026 10:00:07 +0000
Manifest this update: Wed 23 Sep 2026 10:00:07 +0000
Manifest next update: Thu 24 Sep 2026 10:00:07 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: ZBqn/QHkvzJwVHaW6rSAEi15Q6sNS4Qu2/Xm77oup6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:52:01:8f:82:b8:33:20:66:05:7f:e5:bf:e3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Sep 23 10:00:07 2026 GMT
Not After : Sep 24 10:00:07 2026 GMT
Subject: CN=48d98140c3bed770580dd0427540077b04df4f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:3f:18:bd:f8:fd:80:a9:28:89:73:fc:1a:
a8:a1:36:21:52:b5:9f:eb:1b:0f:5e:52:65:5e:99:
04:1e:24:55:23:21:63:b3:b6:fd:39:f8:a7:82:a3:
d0:78:19:24:df:a5:84:0f:c0:59:29:1e:c6:c4:4b:
d3:0b:be:5e:65:ce:23:5c:8e:3a:90:66:43:3b:03:
80:79:aa:8b:c4:e0:df:55:b0:5d:b4:64:6f:3c:5d:
29:f2:d7:31:5b:3e:ba:5f:27:2e:a2:c0:27:c4:8a:
4c:fa:c4:d4:75:cc:b9:1a:da:e8:58:f9:3c:03:7e:
fa:7e:39:80:4a:7d:d4:f4:1e:07:c0:48:a9:d5:39:
eb:69:7b:bf:9f:aa:8b:cf:00:8b:62:59:00:bf:d7:
6b:10:8b:a9:7e:b2:9c:8f:ac:a6:1c:5a:e8:36:47:
c8:81:bb:2e:a3:1b:c0:83:ad:c8:96:d9:a2:f3:90:
69:a8:47:9d:d3:ed:cf:be:6c:3f:eb:6f:c0:09:fe:
6e:1a:83:23:93:89:92:de:60:16:e8:c0:6e:db:2b:
ed:03:a4:20:dd:0f:95:f9:37:b5:2b:bd:a4:13:fb:
33:3f:d7:86:1e:b0:57:3c:fc:0f:32:19:bf:96:f2:
ad:6a:c9:07:16:2c:be:d4:d0:6d:68:99:71:b2:f6:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:81:40:C3:BE:D7:70:58:0D:D0:42:75:40:07:7B:04:DF:4F:7E
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fb:68:06:6f:19:0e:71:33:34:9c:8d:3b:c7:ab:51:99:90:
a1:7a:d7:60:85:ef:68:51:67:20:21:85:2d:50:55:68:ec:2e:
60:0a:69:e5:ce:e3:4b:5d:80:f8:31:8f:3a:c5:a2:da:d3:17:
74:34:61:00:b0:ce:c1:18:f9:5f:ae:80:e9:a4:e5:38:2c:f6:
1d:31:ee:46:06:15:6c:75:99:df:c2:02:e8:82:2a:7c:6d:04:
b4:fb:04:46:74:e2:0d:00:be:5d:a1:d1:0e:4f:3c:19:1a:73:
67:fb:6c:62:e3:09:55:e0:5e:51:3d:81:f7:d8:fe:f8:97:91:
e5:29:f1:57:c3:32:82:2d:5d:d8:7b:bc:41:00:6e:2d:5a:7f:
49:7c:44:cd:eb:8c:88:51:75:64:12:10:d3:e6:9d:91:df:fd:
31:6b:1d:19:bd:17:bf:60:3b:6d:b8:3f:d9:62:89:5b:00:a8:
2f:aa:38:a2:46:d9:92:7d:ea:64:4f:a5:1c:0a:35:0d:95:a9:
14:8e:dd:00:eb:e6:97:0e:96:fb:81:90:ef:96:90:6b:ca:36:
9d:16:f7:e6:bb:f7:2c:a4:2f:7f:4f:db:14:93:1c:f3:27:89:
46:0e:70:2e:29:b0:e8:15:e2:80:9a:e1:62:f6:4b:2a:cc:36:
73:85:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:37:26 2026 by rpki-client