Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: CfZqmYVaal7BcrFiHu4y64mcfIBCdB5sGMS+unBxv+A=
Subject key identifier: 70:67:FA:24:38:5F:AB:AB:DF:71:A5:EB:69:45:CF:8E:C3:BC:4C:5F
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 019F92ED49D825D8851F81F3B34F7E8B964A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 14E1
Signing time: Fri 24 Jul 2026 07:00:52 +0000
Manifest this update: Fri 24 Jul 2026 07:00:52 +0000
Manifest next update: Sat 25 Jul 2026 07:00:52 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: 6jYHh0r7fCP8Ipx3lu/PEWXgLETeQ/mEMxWmOuXAFdU=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:49:d8:25:d8:85:1f:81:f3:b3:4f:7e:8b:96:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Jul 24 07:00:52 2026 GMT
Not After : Jul 25 07:00:52 2026 GMT
Subject: CN=7067fa24385fababdf71a5eb6945cf8ec3bc4c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:11:62:83:7c:8e:56:40:c6:49:cc:ab:2a:
c1:34:34:9e:52:4d:c2:22:ee:e3:58:d6:65:11:13:
c9:c0:8c:4b:16:c9:21:cc:f7:79:19:a5:a9:0f:40:
b9:8d:cb:63:03:bc:c2:62:47:af:05:a3:71:01:d0:
76:d1:2d:e1:ba:fb:f6:ef:3c:05:44:08:1d:e4:49:
e7:d3:84:5a:fd:51:b3:aa:5c:ba:ee:b9:e6:34:37:
3b:14:45:eb:fe:8a:d0:6f:48:04:99:19:3a:9b:58:
9f:17:02:30:75:ff:b4:36:4f:fa:d4:53:4e:1d:c4:
17:44:b4:5b:e0:b5:2c:8e:87:28:25:e8:50:eb:6b:
2a:24:30:81:b2:70:3a:b4:52:6c:9e:32:dc:5f:30:
a0:aa:a8:a0:4f:5e:74:11:4d:50:de:d6:07:dc:f5:
a6:a4:ab:07:e6:a9:b2:ec:78:fb:20:ec:90:1a:94:
d1:62:48:47:9f:7c:91:43:ec:d7:02:cc:78:2b:3a:
ac:9e:1c:1d:33:78:88:3a:be:1b:88:e0:d7:df:69:
fc:5b:72:0d:89:45:ae:ff:87:58:2e:b8:70:32:ed:
24:3d:bf:69:f7:05:eb:60:da:ac:e0:a5:ef:76:6d:
62:cd:3c:50:c8:13:df:aa:61:94:22:77:1d:25:c6:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:FA:24:38:5F:AB:AB:DF:71:A5:EB:69:45:CF:8E:C3:BC:4C:5F
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:15:1e:5f:ef:fe:df:90:ea:a1:02:4b:0f:5b:21:45:c5:49:
82:1e:5a:56:e9:ae:47:60:7b:b4:7c:c1:1d:9b:5b:9b:ad:88:
3a:a9:07:c8:42:0e:d2:8d:f5:6e:74:69:22:08:ac:38:5e:fb:
7a:28:92:4d:73:a3:87:c3:34:fe:05:97:2a:bc:ab:9f:3c:0b:
50:85:23:45:df:84:eb:87:7e:14:f6:d2:4d:8a:4a:47:f7:c3:
ab:1f:66:5a:13:e6:fc:0b:b5:a2:a3:42:ed:aa:a7:83:2f:71:
56:21:29:e8:5c:eb:2d:7d:6e:46:32:81:1f:b5:a3:ba:fb:c8:
3a:f4:97:4e:29:af:c9:21:da:c6:7e:d9:93:ad:71:d3:31:2a:
18:38:41:14:8a:25:7d:45:b6:bd:35:4e:3f:1c:bf:23:1c:80:
48:3b:15:06:d1:c1:02:1a:90:33:1b:90:1a:d7:8f:a6:db:f9:
63:a5:db:2d:a4:5a:2e:28:dd:b1:91:c2:01:14:ff:b7:ce:4d:
ef:92:77:e4:52:5a:ef:09:aa:4a:cd:c1:98:44:74:23:32:9a:
1d:05:e7:59:3b:58:f1:e2:9a:62:ae:5c:6c:fe:b2:56:b2:fa:
ac:ea:9a:ea:09:eb:aa:8a:97:77:b9:9d:26:40:61:15:b1:e2:
97:fc:14:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:43:42 2026 by rpki-client