Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: XcJuYd2vNttaiCAG4lT8oPr9wW8eNOxbfuehPR+izI8=
Subject key identifier: 46:B6:54:2C:24:6D:7D:4E:AC:BF:4B:3B:B2:54:65:F9:1B:4C:E9:36
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019DA48A97B10540360FF3AD7D52A7001C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 0204
Signing time: Sun 19 Apr 2026 07:00:39 +0000
Manifest this update: Sun 19 Apr 2026 07:00:39 +0000
Manifest next update: Mon 20 Apr 2026 07:00:39 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: V++cG9bfTeWWEE7X/l6U3NDuYMMOorbfHhEauIf5spc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:97:b1:05:40:36:0f:f3:ad:7d:52:a7:00:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Apr 19 07:00:39 2026 GMT
Not After : Apr 20 07:00:39 2026 GMT
Subject: CN=46b6542c246d7d4eacbf4b3bb25465f91b4ce936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:00:19:ca:34:a1:be:34:8a:74:c4:29:20:
3b:64:ce:d2:71:af:27:d7:13:71:79:64:20:75:a2:
d3:b8:34:14:0c:3e:69:a2:44:33:23:e1:38:f9:d1:
71:44:1d:99:76:ca:85:a2:fc:16:5c:fb:f7:48:0f:
1b:83:53:9c:80:56:4c:86:43:8f:13:81:d1:ed:50:
9d:a3:79:0d:fe:29:30:b6:1f:97:fe:a1:5f:63:18:
1f:c7:3d:2e:bc:55:c6:e0:0f:d3:73:7f:f1:d5:50:
6b:69:81:26:83:64:88:23:f5:f6:2c:a1:ca:68:b2:
01:34:03:43:41:28:b3:c5:83:3b:84:ee:41:9a:f6:
ed:ca:eb:46:3b:fb:7a:e0:10:22:f9:18:10:d0:39:
81:ca:16:49:4c:28:3d:02:17:ca:95:52:03:29:22:
07:5f:e9:68:e8:4f:31:79:6f:a7:a5:47:90:d7:07:
51:98:76:19:dd:27:ac:af:87:cd:27:a4:14:99:b5:
88:e2:4f:bd:03:b1:91:ce:33:47:55:25:eb:c4:97:
c4:39:1d:47:c4:43:f5:74:fa:24:d0:99:10:42:ff:
cb:5b:8d:24:88:27:64:96:e6:09:f8:62:c6:07:0b:
ee:e5:70:7c:22:54:b9:45:d6:1c:09:df:d8:bd:99:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B6:54:2C:24:6D:7D:4E:AC:BF:4B:3B:B2:54:65:F9:1B:4C:E9:36
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:75:05:17:2b:2a:62:a4:55:56:86:31:91:15:9e:4b:c5:4d:
53:72:48:81:72:0e:e6:5e:8a:b7:51:ad:51:f6:59:bb:a2:af:
27:58:5a:f9:1e:91:c7:5d:0b:38:42:86:4c:b7:83:e6:1d:6d:
9f:ce:9d:0a:92:fb:a1:e3:6a:58:11:45:0b:f8:7a:9b:3a:89:
b1:bd:e3:2a:b7:6e:48:a0:0b:51:c5:9d:b2:3e:ec:83:d4:2c:
da:33:65:0d:13:5f:2c:63:e5:84:1e:6a:d6:b6:44:4f:80:e6:
37:19:c2:a5:f2:4a:35:7a:7d:91:12:48:60:6b:ce:90:a4:97:
6a:22:ed:7b:d6:0b:f9:db:0d:51:37:54:3d:f5:de:c4:35:26:
c8:e5:6c:4d:18:36:2c:0b:a4:ed:eb:6d:dc:24:1c:82:1f:02:
64:a5:7e:fa:ee:90:d7:c5:1f:65:3f:5f:6a:ca:39:cb:7f:0a:
37:83:d1:28:54:5c:a2:43:10:df:ce:8c:63:70:e8:98:a7:e3:
c5:8f:86:9b:af:cd:38:ce:3f:e6:b8:71:59:5d:3a:f9:af:a6:
20:b2:96:2d:14:ce:42:36:c7:65:2b:9a:99:23:10:69:41:2c:
46:af:b8:9b:37:be:f7:d0:06:3c:6a:3a:fe:dc:7f:e1:de:b7:
6a:02:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:16:13 2026 by rpki-client