Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: N4mUxG/NDO+xM9zhq9d5mJQgNCMBnb4dW7tjvF0O15Q=
Subject key identifier: 29:8B:C5:C2:91:28:C0:E0:5E:58:74:3F:68:EF:F1:5F:85:EC:75:04
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019F92ED3F0BC26A224DC29BA5433D1486C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0304
Signing time: Fri 24 Jul 2026 07:00:49 +0000
Manifest this update: Fri 24 Jul 2026 07:00:49 +0000
Manifest next update: Sat 25 Jul 2026 07:00:49 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: PkPn4UNgmFI/BVXUI19+BoXikvtmJ4kESed6v4N/M2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:3f:0b:c2:6a:22:4d:c2:9b:a5:43:3d:14:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Jul 24 07:00:49 2026 GMT
Not After : Jul 25 07:00:49 2026 GMT
Subject: CN=298bc5c29128c0e05e58743f68eff15f85ec7504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:3a:a8:94:52:a4:33:06:1f:42:ef:b0:f3:
7f:8c:05:04:d2:b0:37:a5:72:e1:32:08:c5:30:ae:
73:01:65:a2:02:09:56:80:42:05:c9:b4:8d:78:60:
20:8b:18:9f:71:3b:ea:96:1b:9f:b1:b7:b3:68:30:
34:fd:40:65:48:0f:dc:5f:50:4e:ad:fb:e2:89:d5:
e7:05:d7:a6:12:19:d9:0f:55:02:08:8a:94:67:70:
50:2b:cd:d4:a1:53:c2:ef:db:fc:8d:e9:b3:eb:21:
50:4d:65:75:14:91:7c:79:99:e4:51:71:83:f9:8a:
68:21:26:17:ac:2b:41:87:bd:7a:9c:38:ba:2b:7a:
05:06:8f:29:cd:48:c9:a9:e0:85:51:61:5b:7b:64:
ac:d9:76:41:a3:39:8c:42:70:20:81:92:2e:b4:44:
6c:43:a8:e3:1b:26:27:72:db:c3:70:3d:77:39:a5:
de:7b:25:eb:e4:49:3e:f7:64:f6:04:96:8b:d6:0b:
0c:d9:e6:1b:94:65:ca:f2:17:a2:87:b5:c8:eb:ba:
f0:13:85:14:ed:27:5c:b0:ea:ee:b9:e2:67:11:9d:
9a:0d:03:0f:f7:80:97:8b:75:76:97:38:36:64:51:
d6:1f:33:c9:c6:39:20:00:9e:db:3a:8f:3c:05:fc:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:C5:C2:91:28:C0:E0:5E:58:74:3F:68:EF:F1:5F:85:EC:75:04
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:01:c4:80:8f:57:e3:80:4a:d6:11:a6:15:98:a7:3e:9f:67:
08:38:e7:12:33:6a:5f:c4:34:92:23:8d:1b:11:e0:8a:78:0d:
ab:0e:5f:8c:5f:d5:46:53:8f:2b:c5:49:bb:c9:fd:6b:b2:73:
3c:d7:b3:64:4e:a4:a8:a8:b4:98:ae:38:6c:a3:29:fc:60:49:
a7:d1:bf:9e:4c:89:0b:24:f7:97:08:f7:35:2b:56:6a:da:e5:
25:5e:1a:b7:6d:6d:35:a3:69:38:4a:3d:66:16:5b:b1:52:67:
34:ab:06:38:7c:49:2a:37:f9:5e:16:7f:df:86:66:80:b9:5f:
06:6e:e9:b4:5a:39:eb:fe:dd:d8:9d:19:3d:99:0c:1a:30:40:
6b:2f:f4:3a:82:a6:b3:49:6e:a7:5c:75:9c:bb:a1:d2:70:e6:
ac:c7:01:39:d7:33:22:d7:d3:87:c2:74:13:99:d2:6a:a4:ca:
4f:a1:50:f0:1d:9c:7b:9b:39:0f:6c:70:7d:6b:8e:a9:95:f2:
74:f0:1b:01:54:74:e8:6a:ed:e2:a0:5f:6e:e6:4b:65:6c:0d:
69:47:3f:db:5f:83:91:56:09:2f:23:6a:89:b1:da:a3:9b:b0:
aa:4f:86:47:52:35:7e:24:b4:33:e6:fb:27:db:85:8a:a8:c8:
76:21:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:33 2026 by rpki-client