Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: 1waKQmV96QpQobKzO6wzY2uje0+PU+FhbLdErTkEcvI=
Subject key identifier: 0C:39:27:23:AD:1C:6C:78:BB:BB:BE:B1:68:D1:B8:54:D5:80:8D:9E
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019DA29CB1FF057E91126159433AA19CA233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0203
Signing time: Sat 18 Apr 2026 22:01:11 +0000
Manifest this update: Sat 18 Apr 2026 22:01:11 +0000
Manifest next update: Sun 19 Apr 2026 22:01:11 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: DE9y0l74w2KhV+LQQjX+OvhLQWkf7GQOoeO+WLGLG6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:b1:ff:05:7e:91:12:61:59:43:3a:a1:9c:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Apr 18 22:01:11 2026 GMT
Not After : Apr 19 22:01:11 2026 GMT
Subject: CN=0c392723ad1c6c78bbbbbeb168d1b854d5808d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:ec:73:b4:42:a4:bc:0d:9a:20:34:50:e9:
78:68:d1:e2:a1:16:f0:6e:11:ff:af:2b:3e:52:6c:
bb:f3:fd:01:42:6a:a1:ab:6d:6f:d9:8f:d8:77:20:
2d:e7:61:a7:56:9b:49:79:fa:ad:bc:a7:c2:4f:bc:
10:43:f7:41:ba:dd:48:a7:05:26:e1:6a:91:0a:a2:
94:14:65:22:22:68:ee:c3:34:72:95:f0:af:ec:68:
63:f8:12:21:54:c4:6d:d9:65:de:b7:83:69:db:c7:
b5:9f:23:7e:11:04:90:1b:73:ad:2c:02:37:7e:67:
31:7f:4a:5b:9f:30:30:15:f0:45:ea:af:c0:26:0d:
14:df:10:b1:f2:a0:24:83:ec:7b:12:6b:f8:c3:0c:
75:b5:e3:d5:df:eb:15:4b:cb:f8:b2:e0:a8:24:da:
0a:a7:99:5b:39:c5:f3:07:31:15:81:b8:4f:05:c8:
12:42:b7:22:ef:7b:07:3e:c0:88:ca:ef:4c:cc:c4:
e8:a8:25:56:2f:fa:b6:f4:11:de:d0:7d:8e:63:d6:
e9:ce:e8:d3:ff:a1:1d:7d:57:57:a0:12:4a:58:89:
d9:a0:59:d0:b9:1e:70:b8:db:fe:8a:f2:80:56:28:
ad:13:73:4c:d9:cd:ec:ed:96:26:a4:6a:46:6f:9a:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:27:23:AD:1C:6C:78:BB:BB:BE:B1:68:D1:B8:54:D5:80:8D:9E
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:da:af:60:4e:a6:2b:23:2d:da:72:51:86:9e:a5:8f:3f:5b:
46:9c:9d:de:2e:2a:6c:b7:cb:ba:d5:c7:1a:41:43:36:53:fb:
c1:26:9b:4e:af:3d:8a:8c:fd:0a:12:ae:14:ee:9c:cf:61:f9:
35:bf:2a:f2:f8:83:c1:6c:2d:00:8a:67:48:ad:c2:12:d1:97:
a5:e1:18:f2:ca:47:7d:b7:ba:49:0c:e9:0b:af:26:ae:d6:44:
87:ef:23:d8:2d:e6:3b:f2:c7:4b:5c:4a:f2:11:e8:3c:4c:8c:
ee:2c:c8:b7:31:a1:5c:31:2a:bd:8e:b5:4a:9d:aa:80:af:fe:
01:4b:7b:40:28:19:e8:c8:73:94:0f:d2:91:a8:9f:60:91:b3:
e5:45:a3:24:15:c8:85:b5:f8:f9:8a:10:df:23:29:a6:c7:0b:
0b:f6:a4:05:cc:61:3b:75:b9:db:d1:5c:2a:78:cd:9a:03:ee:
03:a7:84:87:f3:ac:bf:06:40:b5:39:ed:22:8c:8b:50:60:80:
b5:22:42:4d:d0:6e:a1:47:01:f6:5c:2d:67:a7:60:e1:fc:7e:
29:56:ef:c2:42:15:44:60:66:d9:8a:6f:34:63:11:33:56:4a:
45:e0:0a:ea:89:3f:02:8f:a2:07:30:1a:fe:e1:3d:2b:7e:51:
69:9f:d3:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inLH/BX6REmFZQzqhnKIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi
MDNiNmYwHhcNMjYwNDE4MjIwMTExWhcNMjYwNDE5MjIwMTExWjAzMTEwLwYDVQQD
EygwYzM5MjcyM2FkMWM2Yzc4YmJiYmJlYjE2OGQxYjg1NGQ1ODA4ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNvsc7RCpLwNmiA0UOl4aNHioRbw
bhH/rys+Umy78/0BQmqhq21v2Y/YdyAt52GnVptJefqtvKfCT7wQQ/dBut1IpwUm
4WqRCqKUFGUiImjuwzRylfCv7Ghj+BIhVMRt2WXet4Np28e1nyN+EQSQG3OtLAI3
fmcxf0pbnzAwFfBF6q/AJg0U3xCx8qAkg+x7Emv4wwx1tePV3+sVS8v4suCoJNoK
p5lbOcXzBzEVgbhPBcgSQrci73sHPsCIyu9MzMToqCVWL/q29BHe0H2OY9bpzujT
/6EdfVdXoBJKWInZoFnQuR5wuNv+ivKAViitE3NM2c3s7ZYmpGpGb5oM4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw5JyOtHGx4u7u+sWjRuFTVgI2eMB8GA1UdIwQY
MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt
MDM4NTM0OWZmMWU4LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4
LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdqvYE6m
KyMt2nJRhp6ljz9bRpyd3i4qbLfLutXHGkFDNlP7wSabTq89ioz9ChKuFO6cz2H5
Nb8q8viDwWwtAIpnSK3CEtGXpeEY8spHfbe6SQzpC68mrtZEh+8j2C3mO/LHS1xK
8hHoPEyM7izItzGhXDEqvY61Sp2qgK/+AUt7QCgZ6MhzlA/SkaifYJGz5UWjJBXI
hbX4+YoQ3yMppscLC/akBcxhO3W529FcKnjNmgPuA6eEh/OsvwZAtTntIoyLUGCA
tSJCTdBuoUcB9lwtZ6dg4fx+KVbvwkIVRGBm2YpvNGMRM1ZKReAK6ok/Ao+iBzAa
/uE9K35RaZ/Thg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:30 2026 by rpki-client