Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: OA0dtgo/YtFf4JiTmDPMdwAnRyHVo31nOcsQMSnKw0w=
Subject key identifier: 55:91:23:22:23:7A:F6:64:27:D6:5E:5D:31:C3:FC:C4:FE:1C:DD:3E
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019EBE7FB28BC9FA7600CD9966131A09B408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0296
Signing time: Sat 13 Jun 2026 01:01:40 +0000
Manifest this update: Sat 13 Jun 2026 01:01:40 +0000
Manifest next update: Sun 14 Jun 2026 01:01:40 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: zQBlDaqwhn3yJmvuHB2phnJz62rglb2FnOf8KX8TVPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:b2:8b:c9:fa:76:00:cd:99:66:13:1a:09:b4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Jun 13 01:01:40 2026 GMT
Not After : Jun 14 01:01:40 2026 GMT
Subject: CN=55912322237af66427d65e5d31c3fcc4fe1cdd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:c9:d9:57:44:06:ef:d2:b4:b1:04:f0:6d:
0f:48:b6:e6:dd:9a:cb:90:b3:3c:a3:2a:41:bc:ba:
c1:c9:cc:69:0c:86:3b:27:4f:8e:12:29:d1:83:82:
63:83:e2:97:2f:aa:57:ee:e9:ca:08:da:bf:47:55:
a3:88:c0:f1:87:d5:8e:47:1a:d1:d2:93:37:93:ce:
a9:f7:09:8f:70:bf:f0:ce:b8:2d:9a:aa:b5:08:2d:
7d:4d:f7:03:a4:8f:45:67:38:8f:f7:f1:91:1c:6f:
b3:60:a1:b4:f2:4a:9f:6c:f1:4c:a0:e2:50:3a:0b:
8b:18:7e:36:b5:ce:27:26:be:4e:23:97:88:e0:13:
7f:6b:3c:c7:ad:d5:4b:71:75:27:56:b1:c9:3b:cb:
c8:d8:69:b6:09:b1:dd:97:d9:1a:3d:df:1d:4a:66:
d4:3b:a0:b6:04:e2:a7:0a:bb:71:28:1e:9e:c7:74:
b8:b5:0c:3e:c4:c7:bc:fe:57:05:d1:2b:3a:e1:82:
aa:08:41:8d:5a:46:97:ca:a4:de:70:bf:25:26:10:
20:9a:89:de:12:13:f5:50:7f:77:70:76:1c:ee:7c:
67:f7:37:ff:55:f0:ee:b5:e3:75:08:52:0f:cc:79:
76:1d:d2:5d:c9:eb:ff:82:dc:66:70:4e:59:2a:9a:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:91:23:22:23:7A:F6:64:27:D6:5E:5D:31:C3:FC:C4:FE:1C:DD:3E
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:be:22:5d:1c:78:95:80:ae:1e:39:46:3a:3d:d4:3f:a4:
29:ef:b2:3d:ac:e4:ad:17:83:37:a3:21:7f:58:ff:f7:6a:7d:
18:27:df:cc:08:c4:fb:c3:fe:dd:6c:ec:0c:af:d1:64:53:96:
95:1e:d9:c3:1f:38:f1:2c:8f:a5:26:80:14:bc:81:05:81:36:
13:da:e4:d2:d7:60:09:02:99:32:15:a6:4e:c1:f5:fb:f4:30:
7f:a6:74:fb:f2:30:41:e0:41:64:34:2b:18:54:80:84:31:a2:
fb:d8:67:00:3a:35:7e:52:60:9f:69:15:6c:25:ca:b6:74:bf:
03:9d:d5:71:70:bb:76:af:6d:34:e1:d1:e2:17:f2:20:40:e0:
04:24:2a:b4:f9:7f:ca:1b:16:a8:c8:df:70:b4:49:74:0e:6b:
5c:27:02:e9:70:53:49:64:65:4a:6f:e8:8c:f9:9c:4a:45:a5:
99:3e:58:73:64:19:e0:34:46:4c:11:7a:80:c6:4c:40:59:24:
fb:f0:c8:02:bd:29:a5:de:55:ed:a4:5c:36:df:fc:bd:f9:d5:
51:ec:a8:14:d3:35:03:d9:ae:46:8b:e2:0d:f2:29:c3:9a:b9:
d6:5d:c8:3a:54:5c:87:77:f7:9f:71:72:d7:55:50:ac:91:f7:
c5:16:66:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f7KLyfp2AM2ZZhMaCbQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi
MDNiNmYwHhcNMjYwNjEzMDEwMTQwWhcNMjYwNjE0MDEwMTQwWjAzMTEwLwYDVQQD
Eyg1NTkxMjMyMjIzN2FmNjY0MjdkNjVlNWQzMWMzZmNjNGZlMWNkZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKrJ2VdEBu/StLEE8G0PSLbm3ZrL
kLM8oypBvLrBycxpDIY7J0+OEinRg4Jjg+KXL6pX7unKCNq/R1WjiMDxh9WORxrR
0pM3k86p9wmPcL/wzrgtmqq1CC19TfcDpI9FZziP9/GRHG+zYKG08kqfbPFMoOJQ
OguLGH42tc4nJr5OI5eI4BN/azzHrdVLcXUnVrHJO8vI2Gm2CbHdl9kaPd8dSmbU
O6C2BOKnCrtxKB6ex3S4tQw+xMe8/lcF0Ss64YKqCEGNWkaXyqTecL8lJhAgmone
EhP1UH93cHYc7nxn9zf/VfDuteN1CFIPzHl2HdJdyev/gtxmcE5ZKppAGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWRIyIjevZkJ9ZeXTHD/MT+HN0+MB8GA1UdIwQY
MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt
MDM4NTM0OWZmMWU4LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4
LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdW+Il0c
eJWArh45Rjo91D+kKe+yPazkrReDN6Mhf1j/92p9GCffzAjE+8P+3WzsDK/RZFOW
lR7Zwx848SyPpSaAFLyBBYE2E9rk0tdgCQKZMhWmTsH1+/Qwf6Z0+/IwQeBBZDQr
GFSAhDGi+9hnADo1flJgn2kVbCXKtnS/A53VcXC7dq9tNOHR4hfyIEDgBCQqtPl/
yhsWqMjfcLRJdA5rXCcC6XBTSWRlSm/ojPmcSkWlmT5Yc2QZ4DRGTBF6gMZMQFkk
+/DIAr0ppd5V7aRcNt/8vfnVUeyoFNM1A9muRoviDfIpw5q51l3IOlRch3f3n3Fy
11VQrJH3xRZmAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:14:38 2026 by rpki-client