Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: 8qcSDyy8XIUT3mnobw2MGsWcRnbVyRDJkpUna3Xx2Xk=
Subject key identifier: 88:4C:C4:51:2F:D3:4A:24:FE:A2:5E:91:88:73:D3:D7:6A:97:20:38
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019FAA19E707F412695588BA35623EF715AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0310
Signing time: Tue 28 Jul 2026 19:00:51 +0000
Manifest this update: Tue 28 Jul 2026 19:00:51 +0000
Manifest next update: Wed 29 Jul 2026 19:00:51 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: 9vqEftytIwiPK3wTFAI26QR4/QSZnWxmvVlYskdaNjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:e7:07:f4:12:69:55:88:ba:35:62:3e:f7:15:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Jul 28 19:00:51 2026 GMT
Not After : Jul 29 19:00:51 2026 GMT
Subject: CN=884cc4512fd34a24fea25e918873d3d76a972038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:66:9a:4d:98:4e:cc:12:a2:ad:72:49:ac:
30:6a:37:14:94:45:37:60:52:19:ba:51:f8:3b:1a:
22:05:c9:6a:b7:72:01:d9:c2:6a:0d:fd:6f:92:c6:
72:c1:f8:d7:34:46:89:aa:9e:fe:99:5b:84:37:5c:
5f:d1:73:f5:36:4a:62:3a:7c:a8:5f:51:e5:db:d9:
5b:37:3f:3e:9d:64:de:ae:c0:eb:72:2d:ce:a3:3a:
ea:eb:86:0f:2e:6c:5c:c8:5d:a1:cf:79:d7:c0:64:
cf:62:a6:69:83:5e:bc:e2:7c:63:70:65:2a:82:1b:
ab:9a:47:17:af:c5:e5:f8:7a:57:b9:97:d8:3c:97:
c0:f5:80:82:b0:81:f2:9a:f0:cb:15:36:29:36:0c:
83:86:77:8f:7e:d5:8f:63:23:8e:a5:97:98:67:ca:
b5:15:44:22:6e:4e:c2:d4:b8:68:73:88:5b:ec:7f:
51:b8:2d:40:d9:c5:bb:84:08:6b:bf:d9:d0:08:47:
99:2c:7c:d3:a0:a4:7a:52:93:63:eb:cd:d6:a1:d8:
55:95:28:63:f8:7d:fc:47:51:0e:2b:97:2f:75:d6:
02:3b:ef:a9:aa:d7:7b:c3:08:90:29:02:5b:4f:88:
e3:36:ef:b5:76:45:77:92:fe:02:0d:86:3e:b6:4d:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:C4:51:2F:D3:4A:24:FE:A2:5E:91:88:73:D3:D7:6A:97:20:38
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ec:33:6f:42:b1:0a:e1:4c:85:f1:36:ff:10:e5:1c:ab:d7:
54:6f:1f:65:96:85:87:8f:d8:9b:20:cc:87:4f:17:78:08:96:
1b:3f:c6:b7:8e:b4:db:01:9b:5f:52:b1:9d:d2:05:7d:77:12:
a2:bf:0b:63:73:30:f6:71:96:e1:d2:e9:82:14:7a:43:3a:46:
cc:96:9e:6d:3a:b2:f9:8e:f5:dd:13:6c:f5:c6:d6:91:6e:c1:
e9:c8:88:d2:bd:b6:64:03:9c:4e:80:05:0a:b0:1e:71:01:5f:
54:ab:3c:e0:a5:ae:2c:32:69:68:6f:b0:f6:40:e5:03:3d:20:
be:6b:f0:c9:c1:25:1f:b8:70:ed:bb:6d:39:5b:1f:d0:bf:fe:
0c:cb:06:94:3d:10:56:70:46:12:7f:11:fd:32:e7:4c:94:1e:
45:0d:87:83:21:7b:12:2b:22:8e:94:b8:c1:05:e4:cd:a7:ee:
13:e1:95:1d:d5:cb:6d:e6:73:f9:0c:91:2f:61:79:0d:c7:e6:
6e:67:55:4f:99:50:85:16:38:09:3d:d1:43:c5:d9:e6:22:0e:
48:15:95:f3:da:0a:49:15:01:51:5c:ce:fb:60:ed:53:4b:cb:
72:fb:1a:f4:89:ee:e0:85:5b:fe:c4:80:05:23:7b:75:2d:56:
59:18:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:52 2026 by rpki-client