Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: 87KXv/aQIwlKhiSoKd7hEdrsjkA8n0Lfgi+In0hSiJ0=
Subject key identifier: BF:66:A0:B6:5F:6D:1D:6F:D0:FE:73:AA:67:FF:1E:B1:C7:CC:95:0C
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019D9705E5ECA3DC0EE363A6D518BB0898A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 01FD
Signing time: Thu 16 Apr 2026 16:00:39 +0000
Manifest this update: Thu 16 Apr 2026 16:00:39 +0000
Manifest next update: Fri 17 Apr 2026 16:00:39 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: 2nlFQ5kLnjpoKd8iP1IjOWT/F6vWAJgQqBcriJZxtrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:05:e5:ec:a3:dc:0e:e3:63:a6:d5:18:bb:08:98:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Apr 16 16:00:39 2026 GMT
Not After : Apr 17 16:00:39 2026 GMT
Subject: CN=bf66a0b65f6d1d6fd0fe73aa67ff1eb1c7cc950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:c2:5c:5c:cb:1d:dc:7f:f9:85:81:93:8c:
8a:29:de:23:d0:6d:88:f9:22:f1:5d:2f:4a:39:2f:
85:79:1b:2e:11:a9:6e:fa:7b:23:19:0d:24:6e:22:
b3:68:61:60:4e:b0:00:03:74:2f:ef:81:c8:9c:31:
c1:e1:f3:1d:22:0c:fc:53:e9:ea:86:1b:83:89:d9:
c2:a3:2d:63:58:bf:ff:f3:4b:d3:24:3b:1a:3b:f2:
6e:d9:ac:3b:54:62:b9:77:18:7c:e2:c8:ee:41:c8:
f7:d8:b8:2b:4d:28:8f:92:28:60:ce:7b:b2:f1:a1:
bc:12:26:b2:75:3a:ea:7d:f7:7a:2a:55:11:88:b9:
ea:e4:86:21:cb:e0:c9:95:a7:02:bf:96:28:45:fd:
56:47:ea:2b:8a:83:a5:de:89:5f:d6:d4:42:23:24:
73:44:10:7c:9d:bc:e5:f1:e9:1a:30:e6:1b:2d:35:
67:a0:22:df:bd:91:c1:db:06:30:80:82:04:62:dc:
0b:4c:fe:ef:09:43:ed:59:e8:14:8e:c5:b2:49:69:
13:6d:6e:0d:90:47:a2:fd:9b:27:3f:a1:00:dd:b7:
11:7f:35:39:f2:a3:4e:57:5e:25:a6:e0:e3:4f:37:
7f:36:4d:5b:37:ca:0e:60:33:4e:a4:de:89:aa:a6:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:A0:B6:5F:6D:1D:6F:D0:FE:73:AA:67:FF:1E:B1:C7:CC:95:0C
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e1:cb:c4:c8:fd:26:3e:68:70:f9:de:dd:3f:2f:f6:19:a5:
93:70:83:4a:88:79:82:21:55:17:a0:0d:9a:ac:bf:df:db:d4:
df:b6:e8:1e:b1:ab:9e:a5:fb:5d:0e:d2:8a:e0:7d:f3:0a:95:
c8:ba:eb:5f:07:c8:c2:2c:be:c1:e4:19:8d:d7:d5:e7:0a:2f:
cf:b4:7c:43:37:7f:80:63:03:65:b1:f9:07:f3:a7:0b:e7:a0:
a3:41:a1:34:ad:f4:4a:03:0e:1b:d7:3d:35:7e:9a:82:8f:23:
ac:3f:f1:36:94:49:d7:02:54:b1:7b:10:c0:c3:2e:34:64:78:
7b:67:a8:40:65:81:41:58:9a:75:61:37:00:b1:36:f4:04:81:
85:73:33:dd:9c:e4:d3:c7:44:cb:c6:da:0a:c9:27:ab:91:44:
1e:ba:b5:ca:58:d4:b9:d6:5c:cd:cc:12:99:03:d7:9e:c9:ee:
45:d4:33:f6:30:64:9e:89:78:07:60:d0:77:80:74:8c:3a:c9:
62:de:61:86:c4:ac:9d:45:41:02:27:24:47:66:ae:17:78:71:
c9:0d:49:2a:76:f6:61:19:80:a5:4f:6d:f8:4f:57:c5:0f:d8:
32:50:c5:59:b5:7f:8e:3b:b8:4f:1a:9d:dd:3e:ba:51:49:18:
9b:2c:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:47 2026 by rpki-client