Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: NifqFi8zunUHHH2yC7pEgsWb8G9iF6PXuJj3OThkdB8=
Subject key identifier: A8:BF:E1:CB:E7:A7:BF:A5:A3:A9:09:B6:BD:BD:9F:BB:44:61:D2:B8
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 01A0CFA4936FBEDE9C49E32673F05464444F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 1585
Signing time: Wed 23 Sep 2026 19:01:04 +0000
Manifest this update: Wed 23 Sep 2026 19:01:04 +0000
Manifest next update: Thu 24 Sep 2026 19:01:04 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: rD6He7WSksCJMUGGbUopLf1hGsKroRNwVHMEDPP/9gM=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:93:6f:be:de:9c:49:e3:26:73:f0:54:64:44:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Sep 23 19:01:04 2026 GMT
Not After : Sep 24 19:01:04 2026 GMT
Subject: CN=a8bfe1cbe7a7bfa5a3a909b6bdbd9fbb4461d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:66:eb:e3:c5:f9:6f:8a:7e:25:b4:dd:ba:30:
81:8e:c9:1b:06:70:cc:e7:b7:d2:be:6c:9a:f2:4b:
03:06:0b:5c:0e:5e:d2:2d:7a:52:6d:f4:d8:01:cc:
0a:61:ad:e5:f2:81:ad:de:e2:9e:9e:b2:2e:c5:51:
4e:e0:bc:8b:15:82:bc:4e:3a:fb:97:99:bb:16:13:
df:b6:db:c8:53:76:36:2e:30:3c:03:58:af:3f:8a:
11:db:25:03:1a:9b:22:b7:07:52:69:00:2d:e8:6e:
a3:10:c6:eb:b3:ae:45:0d:04:0f:22:48:80:18:af:
bb:67:45:ae:52:72:20:b6:54:69:12:b9:70:99:7a:
9a:ad:b7:4d:bc:8e:d7:f3:83:b1:d6:9d:62:90:d1:
78:fa:32:ef:f0:e7:06:cb:a5:f1:f6:21:16:b4:bc:
65:68:11:6d:63:c2:6d:80:cf:10:bb:ca:68:79:3d:
ff:f5:d8:88:61:57:1b:f8:6f:c4:34:3c:11:eb:41:
b4:13:d5:4e:77:19:1e:9e:ce:5d:9b:8b:66:d4:c4:
c9:4c:45:06:b8:25:81:7d:aa:41:84:73:e3:cf:cf:
d8:d0:44:9e:12:22:a8:89:03:54:b8:25:4b:97:34:
99:7c:b5:a4:6f:77:c4:ff:f9:5c:d4:72:9e:0a:4f:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:E1:CB:E7:A7:BF:A5:A3:A9:09:B6:BD:BD:9F:BB:44:61:D2:B8
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:9f:87:27:ec:b7:12:45:ba:2a:e2:d1:5a:84:87:2a:f8:
de:84:43:dd:fa:8e:da:91:ac:29:72:2a:36:b3:db:ca:25:6c:
f4:fc:17:d7:08:8a:10:ad:75:2c:74:54:2e:52:2b:5b:7a:4f:
a3:fb:a3:ae:89:1e:a1:f7:f6:dd:b5:9a:92:b8:b5:03:47:8a:
f0:be:3d:83:77:63:9e:37:c1:08:bd:63:83:12:0f:7f:d7:1c:
da:5d:92:0e:28:60:2e:d4:97:13:d7:75:89:57:50:f0:7e:50:
d3:a2:f4:0c:66:34:1a:39:97:a6:b6:52:e7:39:fc:ac:2d:4a:
9d:47:7d:69:0a:8d:57:be:5e:dd:78:52:53:2d:ac:b0:f7:6c:
dc:48:b4:68:ae:57:fe:27:3c:c0:8a:1a:45:92:01:54:e5:57:
53:b6:b1:8b:ae:93:2c:d2:c9:90:99:3b:68:f9:8b:d9:92:93:
e0:20:52:fa:37:1e:6a:e3:a3:ce:ca:0b:c8:2f:2f:db:91:ae:
c3:c9:d0:95:c4:27:60:44:10:fe:43:9c:08:c1:c3:28:d0:5c:
b8:27:74:ff:de:f0:9e:ab:d3:f2:9b:4a:b7:81:4e:fd:c1:f3:
30:09:a6:bd:16:e0:5c:c2:e8:34:ef:74:ec:e5:92:f7:1f:50:
79:1f:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:38:31 2026 by rpki-client