Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: G4w0LXENANCgPJCcjF2sQHHywFeWr63GpltSgezklaA=
Subject key identifier: 00:19:F3:04:87:40:7B:5D:F8:88:CA:0A:F5:F5:EF:ED:82:6C:DD:51
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 019D28F3088B17AA97AB9EFCAE4D7F7973A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 13A1
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: 7jYS9gDVEX9tzUHFmvI04TaA1ho.roa (hash: C2ax0Rr6kCcrNWLHMlCQV2VOflPoN/onpTnbRqEbck4=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: iCrZLj1GFbff6qaWYcIzgTQWHnejpap54o/fx0XZGws=)
3: UwQ7sjuo9Z4xTTN4jy0Vg5YZCzs.roa (hash: 6Mr+bWC9I29W/ywa1Cv/2GSNSvhjZ295ZxgyavssNUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:08:8b:17:aa:97:ab:9e:fc:ae:4d:7f:79:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=0019f30487407b5df888ca0af5f5efed826cdd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:d0:b6:18:eb:2c:23:be:0e:13:1b:0d:b2:
ae:2d:b9:8c:0f:d4:45:9a:d8:0b:e2:6e:57:01:cd:
5e:95:aa:49:58:06:67:65:61:45:35:4b:13:6d:35:
86:08:74:9c:0c:e4:5d:a4:48:73:7b:be:67:8b:61:
79:a9:c5:f5:a1:4f:1f:fc:2e:52:d1:6b:fd:e0:b5:
64:57:97:6a:46:e2:0d:7b:4a:bf:a6:15:a5:64:2e:
ab:3a:08:54:b6:b9:72:20:48:a0:ec:aa:bf:eb:38:
a8:84:58:33:1e:2c:49:fe:f0:a2:59:5a:41:6a:88:
88:2c:3f:0c:54:a7:5e:14:4e:54:5c:1e:07:3a:7b:
54:16:ef:68:3d:d4:08:2c:a0:5f:76:60:08:de:74:
a9:33:3c:bd:25:66:da:d3:d2:db:60:e6:ce:6e:8f:
ce:13:dd:3c:ae:d9:85:ae:ce:10:7e:d9:0d:ce:28:
c4:de:f0:27:f2:da:df:45:7f:2f:01:fc:b2:61:3d:
c2:66:11:fa:e4:60:1a:4e:18:dd:90:0e:33:27:06:
57:d1:65:90:2d:b3:34:8e:bb:0b:9c:cb:64:2f:56:
a9:07:bd:01:24:d7:83:6b:6d:3b:ab:6f:d1:8a:f8:
0e:8b:30:16:52:3c:24:63:3a:7b:82:f3:5f:58:c6:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:F3:04:87:40:7B:5D:F8:88:CA:0A:F5:F5:EF:ED:82:6C:DD:51
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:92:f6:47:e5:fc:63:45:06:4d:5a:d0:0e:a9:d3:db:bc:cf:
fb:33:73:fa:fb:33:e1:9d:b9:b4:78:bc:4e:4d:c6:59:cd:be:
ae:c8:42:7f:ca:4c:05:b4:0a:e5:23:54:db:59:ed:02:bd:5e:
f5:e0:d7:fa:e8:cc:b4:3b:d3:69:36:e3:b6:83:2b:d7:06:39:
77:e3:6c:63:ad:9b:7a:44:94:ac:9e:6a:3a:b5:23:3b:f2:ea:
47:a0:b0:12:fc:e7:5a:af:bf:d5:46:ab:1a:e2:d0:a6:37:91:
e0:15:09:05:90:73:42:cd:c6:3c:81:fc:c9:e7:96:25:ce:61:
02:5e:1d:15:31:0b:74:73:b9:de:bf:01:6c:40:f1:56:a6:5c:
c4:56:6d:19:e1:37:bb:13:7c:13:93:96:44:22:bc:cb:74:c6:
8a:ff:93:19:59:58:d6:de:f0:e9:8e:a7:db:c2:cf:4e:38:c3:
b9:e6:36:08:17:9b:9c:69:18:e0:cc:e6:0e:db:a6:90:58:eb:
49:12:0f:0b:58:7a:de:0d:87:44:d9:3e:65:c1:34:80:5c:6c:
c1:8b:b3:84:39:3b:e9:b7:f3:6a:8a:3b:da:99:d2:54:0e:8e:
9f:9a:01:30:cc:74:01:29:42:72:45:6e:2b:06:6c:87:e8:31:
20:bb:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:19:56 2026 by rpki-client