Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: 8tPuPTKNp24sFC6CEUMo9oORgVRyJ4uxAZ+ba4Ah4bc=
Subject key identifier: 03:40:B6:19:36:31:8D:03:AD:18:B8:4E:40:85:70:BC:3B:78:C2:91
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 019E1C468D53E53B98EF8F27EF8571B54F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 141F
Signing time: Tue 12 May 2026 13:00:46 +0000
Manifest this update: Tue 12 May 2026 13:00:46 +0000
Manifest next update: Wed 13 May 2026 13:00:46 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: 8C86PNB2NhMOrAgOExXzgTxMXmo6BOR7Mz/y/Rqfb3Y=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:8d:53:e5:3b:98:ef:8f:27:ef:85:71:b5:4f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: May 12 13:00:46 2026 GMT
Not After : May 13 13:00:46 2026 GMT
Subject: CN=0340b61936318d03ad18b84e408570bc3b78c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:8a:6c:fe:4d:19:06:17:fe:cd:ac:2c:f7:
52:e7:5e:71:cd:13:28:fd:40:84:e4:aa:98:d1:e9:
bc:a4:a0:ec:8a:da:42:90:e7:cc:c4:5a:4e:d6:ef:
a6:5c:a7:73:6d:57:ea:90:d6:e7:31:4a:ca:28:32:
62:12:57:6c:38:3f:27:7d:d2:b9:cd:f9:f6:e5:ef:
99:46:8d:8e:6f:95:b8:56:a3:44:34:f6:f0:c6:1a:
3a:37:e2:56:2b:61:b3:5a:c0:87:f2:50:99:1c:59:
e8:a8:c1:3e:7c:e2:70:36:b3:b8:c9:03:ea:cb:d2:
6d:f0:78:c3:b5:c9:d7:38:41:80:cd:63:87:f7:7e:
e0:cf:98:c2:7d:a6:eb:b1:93:b4:c1:f6:89:74:f1:
2a:70:6b:be:66:3a:65:e6:cb:05:b8:a6:1d:b1:67:
47:ac:4a:b0:20:a0:0b:4b:a7:b0:ad:10:6f:92:c9:
78:99:e5:b0:ce:81:2d:01:be:41:aa:7a:93:f6:8d:
f1:4a:8f:7a:28:50:20:ed:71:e0:7e:dc:6a:24:30:
97:b7:e3:07:fb:90:32:a2:e6:ad:b9:40:50:07:84:
4a:eb:12:b7:9f:50:e5:c5:02:4b:35:b3:d1:d7:6e:
d9:0e:fc:c3:08:19:f0:a8:bf:63:63:6f:e1:95:dd:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:40:B6:19:36:31:8D:03:AD:18:B8:4E:40:85:70:BC:3B:78:C2:91
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1d:0e:a0:9b:c5:6f:55:aa:b5:55:ee:10:23:f9:be:76:0a:
2c:a9:d9:da:76:33:99:db:9e:fd:f9:48:f9:7e:06:1e:25:4b:
38:94:e0:4d:53:82:59:8d:0c:44:8a:2e:d0:51:51:46:f6:c9:
cc:4d:35:a7:f7:5f:8c:0d:47:c2:ab:e5:45:02:3c:8e:57:73:
81:d0:ea:a7:24:8d:cb:c4:16:20:5a:ec:30:6f:aa:80:eb:5c:
87:55:b2:76:d8:8e:89:d2:da:30:1f:c2:ac:f6:da:6b:45:5e:
fe:97:18:ed:52:21:9c:b8:18:1b:89:c1:19:a0:31:27:f7:b7:
90:23:25:42:92:b4:34:5f:72:6e:a7:f3:75:e0:6f:6b:c2:30:
1e:63:fe:b1:61:3e:86:ac:02:9f:d6:18:f8:80:9f:5f:d5:6e:
50:ec:8a:52:67:53:58:5a:42:9e:11:9d:33:56:9a:55:5d:74:
f4:ef:a2:3f:9c:72:a3:d8:ad:7a:2f:3f:ca:aa:c1:d7:95:c7:
e9:c6:dd:fb:96:82:16:64:3c:85:30:aa:30:b1:cd:4b:f3:b4:
6f:72:94:90:ea:3a:1e:e7:b4:8d:28:1e:f5:44:eb:c0:19:52:
36:ae:63:97:3b:14:ce:a9:38:2a:5c:cc:0a:9b:02:2f:51:2f:
a1:46:1c:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRo1T5TuY748n74VxtU9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NGY5ZDJkYmVkOTc0NTM4NDA1YTc5ZjZlYzdlODZjNGFl
ZGQzZDEwHhcNMjYwNTEyMTMwMDQ2WhcNMjYwNTEzMTMwMDQ2WjAzMTEwLwYDVQQD
EygwMzQwYjYxOTM2MzE4ZDAzYWQxOGI4NGU0MDg1NzBiYzNiNzhjMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmmKbP5NGQYX/s2sLPdS515xzRMo
/UCE5KqY0em8pKDsitpCkOfMxFpO1u+mXKdzbVfqkNbnMUrKKDJiEldsOD8nfdK5
zfn25e+ZRo2Ob5W4VqNENPbwxho6N+JWK2GzWsCH8lCZHFnoqME+fOJwNrO4yQPq
y9Jt8HjDtcnXOEGAzWOH937gz5jCfabrsZO0wfaJdPEqcGu+Zjpl5ssFuKYdsWdH
rEqwIKALS6ewrRBvksl4meWwzoEtAb5BqnqT9o3xSo96KFAg7XHgftxqJDCXt+MH
+5AyouatuUBQB4RK6xK3n1DlxQJLNbPR127ZDvzDCBnwqL9jY2/hld1VmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANAthk2MY0DrRi4TkCFcLw7eMKRMB8GA1UdIwQY
MBaAFEVPnS2+2XRThAWnn27H6GxK7dPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2Ut
ZmFhZTRiYWViZWZmLzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2UtZmFhZTRiYWViZWZm
LzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANR0OoJvF
b1WqtVXuECP5vnYKLKnZ2nYzmdue/flI+X4GHiVLOJTgTVOCWY0MRIou0FFRRvbJ
zE01p/dfjA1HwqvlRQI8jldzgdDqpySNy8QWIFrsMG+qgOtch1WydtiOidLaMB/C
rPbaa0Ve/pcY7VIhnLgYG4nBGaAxJ/e3kCMlQpK0NF9ybqfzdeBva8IwHmP+sWE+
hqwCn9YY+ICfX9VuUOyKUmdTWFpCnhGdM1aaVV109O+iP5xyo9itei8/yqrB15XH
6cbd+5aCFmQ8hTCqMLHNS/O0b3KUkOo6Hue0jSge9UTrwBlSNq5jlzsUzqk4KlzM
CpsCL1EvoUYc1g==
-----END CERTIFICATE-----
Generated at Tue May 12 22:11:42 2026 by rpki-client