Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: LNnH3wsQyViU/NJpFnjAvPGEYLriuLtc/l7or1o03JI=
Subject key identifier: 6E:47:C6:31:7D:4A:FB:FD:25:68:78:E1:29:A4:93:0B:44:6A:12:DE
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019D2703ECF0FD29666DAC223730C5B5244F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 01C3
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: r75gvAia7GzXpmywgApLg0kC5Y1p36BZ6KbjU1NiyP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ec:f0:fd:29:66:6d:ac:22:37:30:c5:b5:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=6e47c6317d4afbfd256878e129a4930b446a12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:2a:29:fc:28:cb:28:64:ec:b3:9f:c3:1a:
9e:4e:24:c4:04:1b:a0:89:8d:7f:86:98:07:d8:0d:
28:1f:ff:d3:65:1c:db:59:30:da:b7:b6:90:c3:48:
22:db:54:ab:f6:fe:59:0a:77:3f:37:75:4e:d0:9b:
7b:03:5a:29:38:df:9b:2e:f4:7d:ed:25:39:96:31:
53:0d:7b:7f:7c:88:1a:d4:c5:e4:51:23:60:75:2a:
aa:88:33:85:85:d9:04:6a:16:a2:66:fa:94:12:c3:
2f:98:6a:0e:ca:7f:19:c8:b9:5f:c9:6e:ef:07:98:
37:d8:1c:25:35:3a:31:2d:a2:7b:31:a3:fb:13:bf:
b3:dd:f7:14:24:f6:d9:7c:5e:2a:74:08:bf:3d:34:
6f:94:8e:8c:d6:e1:1c:8b:3c:08:8f:65:5f:81:1d:
c8:59:7c:11:cf:ce:95:4c:21:08:d5:e0:38:e1:22:
f9:87:1a:29:b0:41:6d:32:fe:31:f7:f7:3d:23:01:
9e:80:1d:a1:4d:61:ed:47:16:0c:7b:b2:34:ee:83:
5a:40:91:c0:28:6e:79:38:e9:16:fe:7b:c0:d8:6c:
14:64:42:fd:16:45:47:20:d6:88:41:57:aa:75:31:
7e:16:20:29:e0:a6:b5:fe:15:cf:28:1f:55:ce:ad:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:47:C6:31:7D:4A:FB:FD:25:68:78:E1:29:A4:93:0B:44:6A:12:DE
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:2e:10:a5:aa:e1:6b:73:4f:9b:41:45:9f:2d:ff:3d:7e:
e0:eb:8a:50:c3:f5:0c:ec:14:72:04:27:77:64:06:cf:8e:80:
c0:2e:99:b7:f6:04:8a:4a:37:b0:38:c0:cd:41:a6:73:ec:2b:
c2:3b:91:3b:19:36:c0:9c:60:45:db:6e:4a:80:71:ae:18:e3:
a6:1c:01:8b:25:28:12:71:0d:e1:6a:ef:be:b2:6a:31:37:15:
b3:93:1b:4a:50:ba:83:2a:67:a4:ce:e6:fc:84:14:17:e0:a5:
5d:20:f9:c1:05:81:96:30:a8:75:dc:e9:e0:f6:97:f4:4f:44:
3f:08:9e:57:c7:45:58:79:d4:6d:6d:15:4f:f9:2f:a1:b4:99:
61:cc:1c:d8:cc:d5:1e:db:28:55:6f:09:1f:3b:17:c1:9a:79:
d1:44:a6:b3:cf:77:e5:57:75:1b:02:25:06:a6:f0:6b:b1:28:
8d:c6:bc:8f:ab:09:de:81:d8:45:64:39:d8:21:6b:0c:36:d3:
6e:92:0f:7c:73:c9:a7:52:68:7d:b7:c4:ac:6d:00:85:f6:cb:
d0:ba:66:46:b8:26:ec:4c:28:84:53:5e:2e:40:2c:d4:e5:15:
b8:65:3e:7c:f7:37:ad:32:07:da:84:e2:a4:50:a7:71:c7:4b:
7e:64:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:54 2026 by rpki-client