Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: nYcntGuUWTXaB70Go6bizgFaCYlFkRFaB/UgROO7yJg=
Subject key identifier: 97:90:72:B0:0E:8C:01:C9:E1:81:7D:5A:CE:F4:B5:DD:95:5F:00:23
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019CAB6AFD9CE21D386E4502E65E0A437D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0183
Signing time: Sun 01 Mar 2026 22:00:41 +0000
Manifest this update: Sun 01 Mar 2026 22:00:41 +0000
Manifest next update: Mon 02 Mar 2026 22:00:41 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: eFAmdbufZtpYzbDnPRjsen4jYSkI9qMsB/3oQCpMaCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fd:9c:e2:1d:38:6e:45:02:e6:5e:0a:43:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Mar 1 22:00:41 2026 GMT
Not After : Mar 2 22:00:41 2026 GMT
Subject: CN=979072b00e8c01c9e1817d5acef4b5dd955f0023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:81:b2:8d:64:e2:ee:cb:7a:bd:b0:52:9c:
8c:32:3c:a4:e5:e9:80:0c:07:2c:7e:86:dc:b7:c6:
c0:62:f1:7d:63:c1:b2:d9:8f:bc:47:ee:2d:7d:86:
01:d4:bc:28:ff:7b:ad:60:3e:d6:49:0f:7f:2a:7c:
4e:5d:54:08:a8:f8:53:86:fa:1d:42:e4:e3:ce:e5:
05:62:14:c6:43:f8:8c:d8:91:2b:a5:94:48:50:ac:
e2:4b:27:95:4a:87:9c:8d:55:ca:bf:3e:77:fd:a2:
db:74:bf:f0:0d:93:60:d9:e9:d1:7f:20:d2:86:62:
71:c5:6d:f9:15:bc:d7:d4:7f:d6:9d:75:e3:10:9a:
6e:57:0a:8b:e2:ae:76:3e:9f:be:e1:89:38:12:48:
85:c1:ea:1e:2c:bc:2b:e1:d1:c4:9c:cf:c5:7e:16:
fd:5a:39:62:29:b5:c3:cc:43:07:ea:25:0e:4f:8f:
a8:13:d8:07:73:35:4a:66:b6:2c:11:19:a2:9c:a8:
1c:80:b6:9e:c0:67:14:7a:13:dd:3b:79:e2:02:2b:
bd:20:63:2f:2a:21:0b:96:f5:9f:47:6e:04:c5:39:
dd:b7:09:49:66:21:46:f9:23:c7:3e:28:32:1f:fd:
11:2e:75:26:1e:92:f5:8b:39:23:97:b0:6c:03:44:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:72:B0:0E:8C:01:C9:E1:81:7D:5A:CE:F4:B5:DD:95:5F:00:23
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:c5:53:f4:24:47:f9:a2:99:39:f9:27:fc:ee:5e:61:6f:
d3:5d:e5:00:56:9a:33:42:f4:2f:26:51:b3:1a:59:cf:5d:5c:
f0:fc:49:71:83:f7:d2:fa:be:ec:45:26:20:93:10:51:9a:3c:
2a:33:15:3f:1b:0c:ec:e7:f0:f7:76:42:6b:24:51:f3:68:7f:
98:42:7a:38:4c:bb:ba:22:cb:85:b3:01:32:e7:a1:d3:11:f7:
04:52:de:09:9e:e3:0f:e9:67:5d:50:58:59:5f:d2:08:b3:16:
ac:6a:90:d0:23:07:c7:b1:57:0f:fb:25:49:8b:ba:a8:9d:7b:
fa:6b:0a:fa:d7:2c:29:ef:d4:6b:27:39:03:ce:5f:e8:30:4c:
91:20:2d:9a:d5:4a:f0:7e:92:99:95:96:46:d0:b4:99:49:67:
67:e0:7c:c3:34:f0:a6:5e:c9:9f:47:84:80:a7:46:9d:94:f0:
0d:20:c2:f8:be:a3:8d:1b:b5:b0:c7:f2:ed:96:c6:49:ae:06:
30:03:c0:9e:2c:90:ad:93:ac:a7:3d:e3:28:2d:98:8c:9a:50:
f2:78:bb:97:b3:b5:30:94:d6:bd:1d:6c:38:cb:fd:e6:f4:f1:
7a:75:01:f2:4f:6f:03:c4:68:42:b0:3a:af:e9:aa:d8:81:89:
ec:c5:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:47 2026 by rpki-client