Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: qMTN6cmYJYcm2zg6znS/UaKiP7DhhL0+bsDCLKBV2JI=
Subject key identifier: 34:CC:62:2A:44:B4:54:35:BA:C7:A7:68:65:21:C2:D6:CC:79:CA:B1
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 019F90FF6E98F965DA1D371A784D0221352D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 14E0
Signing time: Thu 23 Jul 2026 22:01:26 +0000
Manifest this update: Thu 23 Jul 2026 22:01:26 +0000
Manifest next update: Fri 24 Jul 2026 22:01:26 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: qVSgOVBo073N3QmTZs4IP7pQ88vaw7nukDndUXsNIMY=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:6e:98:f9:65:da:1d:37:1a:78:4d:02:21:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Jul 23 22:01:26 2026 GMT
Not After : Jul 24 22:01:26 2026 GMT
Subject: CN=34cc622a44b45435bac7a7686521c2d6cc79cab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:de:f8:0f:28:67:0e:87:a2:1d:27:93:3e:d5:
ae:d0:ea:18:ce:33:ec:aa:a2:60:18:40:45:47:27:
e6:85:3c:f6:9a:81:38:17:8d:59:99:d0:20:78:14:
44:73:9b:69:33:f3:4a:ea:26:7d:c1:de:93:5d:1a:
80:9e:89:c7:0c:5f:bb:98:04:0c:7e:8f:3b:b4:4b:
b6:2b:66:3d:12:55:c2:49:4f:12:62:37:a4:cb:04:
8e:c1:d7:a3:38:47:5f:1c:27:b4:1e:d5:6b:2f:e5:
28:7d:ef:a6:11:09:04:c0:a5:64:f0:65:77:28:99:
39:37:e7:1f:a6:50:32:d5:8b:5d:e4:75:49:97:47:
b8:a7:df:a5:7a:b3:a7:f9:98:a4:36:59:ee:e3:e8:
af:38:d6:07:0b:47:7f:1c:c6:ce:2f:5e:c6:7b:87:
c4:19:60:75:02:68:84:14:df:14:db:c7:cb:cc:da:
38:34:05:66:6a:75:46:13:9e:67:2b:73:0d:bd:4b:
89:0c:41:63:93:28:99:61:86:ec:1c:14:b7:bf:35:
3b:fe:d0:69:e8:39:e7:08:1b:72:14:8d:78:c9:b9:
d9:36:fc:11:4e:ed:99:37:1c:42:59:60:6b:4b:7f:
ef:d3:fc:61:6a:d6:6e:b3:a2:15:50:25:5b:dc:25:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:62:2A:44:B4:54:35:BA:C7:A7:68:65:21:C2:D6:CC:79:CA:B1
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:a8:0a:43:e9:bd:ce:a6:85:c2:f0:db:6e:d7:4c:4f:ec:
a7:d3:2d:28:0f:84:6c:7d:f4:c2:8f:5e:5a:93:c4:ad:66:7c:
27:9b:39:17:f5:62:f6:48:fa:fe:84:2a:b9:bf:ab:dd:d7:8c:
7b:d1:f0:f4:b6:36:ba:36:be:65:49:81:ce:37:ee:53:98:ce:
6b:38:e2:1b:72:68:4c:de:5c:b9:2b:02:29:73:12:18:da:46:
0f:87:11:42:ce:36:d9:c8:f4:df:1e:88:6a:12:5e:06:cb:05:
0b:e3:96:a7:ac:a5:3e:53:5a:c5:3e:0f:fd:b0:fb:2b:10:14:
ac:18:2f:5b:d9:49:13:3b:67:33:9d:8c:5b:8a:db:d9:08:d1:
4c:b3:a4:e0:e8:50:94:71:bc:67:15:f7:78:11:0f:bd:08:9e:
73:89:77:73:da:00:a5:e3:66:36:70:f3:a1:5a:e8:60:f0:e4:
a3:b9:5e:69:60:ce:cc:43:27:8c:19:06:c3:1f:38:95:0d:00:
90:3f:24:91:16:ab:82:b7:a0:bf:89:d5:c9:cc:fa:30:fd:8a:
e6:0b:51:99:d7:72:27:da:a0:22:d2:f1:29:51:ee:61:52:0e:
61:1f:23:2a:c4:3c:80:1b:ce:a4:9e:e2:72:c6:c3:54:68:b7:
a6:d2:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:04 2026 by rpki-client