Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: g6NF1hHv5aWf6x/9j0UT66CbtlwmS74qA9oXRLFO/sg=
Subject key identifier: 7C:CD:98:77:72:25:53:02:7E:C4:32:41:6B:66:CD:11:4D:D1:41:71
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019E1E351DF45AC8881A3EB141CB6B4351FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0243
Signing time: Tue 12 May 2026 22:00:57 +0000
Manifest this update: Tue 12 May 2026 22:00:57 +0000
Manifest next update: Wed 13 May 2026 22:00:57 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: EZL93dRbGrhRDr95AGF2qezkWJAxCMNurlHBY4q8kMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:1d:f4:5a:c8:88:1a:3e:b1:41:cb:6b:43:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: May 12 22:00:57 2026 GMT
Not After : May 13 22:00:57 2026 GMT
Subject: CN=7ccd9877722553027ec432416b66cd114dd14171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:29:b5:09:54:e1:4e:10:8f:01:23:9d:bc:
22:f6:4d:78:43:3a:95:c6:94:c5:34:30:7a:08:7f:
20:00:dc:b4:f2:b7:f7:c0:24:91:18:bd:c8:b6:20:
13:95:30:ef:f8:94:6c:2c:df:34:91:b1:2e:4c:0e:
0c:97:67:64:72:46:52:19:7f:84:9a:af:35:e5:f5:
29:af:a4:80:ed:7b:ff:5e:23:a1:cb:33:44:ed:11:
48:49:c9:8f:6f:6e:a1:f3:3e:ab:aa:3f:1d:29:74:
27:dc:6a:41:03:60:c8:bb:21:5d:89:5b:b5:c4:9c:
f8:28:8a:11:2c:40:35:32:d1:17:8c:43:14:1e:46:
64:a8:7c:a9:68:79:a3:de:3d:cf:66:1b:3e:d4:5b:
af:dd:72:d1:f9:47:b4:19:4c:f7:27:b0:a9:c4:88:
24:3c:78:15:94:d7:00:d6:13:c6:63:18:50:d8:cc:
9e:47:69:ff:c6:0f:09:a9:57:df:bf:70:4a:b4:5b:
8c:fd:d9:9d:b9:a1:1b:0d:10:8f:24:55:60:99:78:
f1:32:cf:17:d2:19:22:73:3c:68:e6:59:c6:d6:07:
5d:5a:e5:a1:3b:72:58:03:20:41:e0:d8:fd:fe:70:
ac:c7:5e:89:b2:90:aa:6d:1b:e5:03:09:cf:ff:21:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:98:77:72:25:53:02:7E:C4:32:41:6B:66:CD:11:4D:D1:41:71
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:3f:57:ba:2c:70:2d:fd:71:f6:62:9d:56:d7:b9:74:b0:
b8:27:3f:6c:8a:97:52:bd:4f:86:69:1a:1f:a2:18:4d:38:71:
fd:72:fa:8c:09:01:76:ab:3d:7f:13:a7:39:45:93:0f:a6:c1:
a4:35:22:5a:11:67:d5:d4:9f:05:46:eb:ae:b9:ba:99:5b:86:
60:ba:f5:2a:18:d8:ab:de:f7:33:27:b6:1e:3b:e7:40:8f:0a:
f5:98:a2:08:8f:23:8d:cf:0d:16:31:d8:db:37:a6:f7:6b:8c:
1d:cd:44:25:ff:08:6d:25:25:66:e5:3a:9a:a1:8e:33:61:6d:
47:22:c3:f1:a3:71:ad:d7:a6:cb:96:52:3d:b9:7b:8f:d6:8e:
04:25:28:b8:a2:64:67:f7:c4:58:8f:3e:18:53:bf:33:62:af:
db:be:e3:04:a0:b1:84:df:ef:05:4b:25:2e:63:a8:d4:fd:39:
df:3b:d3:77:c3:dd:89:a4:2b:f8:42:6f:03:2b:e4:2a:dd:cc:
2e:f3:61:fd:ac:d3:42:a5:19:db:10:dd:80:37:8c:f2:61:b7:
31:94:c0:94:bb:ee:64:0b:05:b4:fe:e7:43:d5:5e:5f:ff:1d:
38:a9:bc:f9:23:92:cf:ad:c9:86:18:f7:85:a3:74:d9:4b:ec:
66:6b:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:13 2026 by rpki-client