Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: BJqGaS+8UsxxHIv5dJ+eQYIitVEmD+iJC2t/ifqoa7A=
Subject key identifier: 36:92:67:07:F6:08:A5:72:AB:FC:BF:E9:76:B0:FB:5E:45:EB:46:CC
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 01A0C40D68A935740859879A5F9229039454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 03A2
Signing time: Mon 21 Sep 2026 13:00:08 +0000
Manifest this update: Mon 21 Sep 2026 13:00:08 +0000
Manifest next update: Tue 22 Sep 2026 13:00:08 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: HHoyJZAIPL2kSXE4Doku2gZRE+ezP2BmpgkGvKouXHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:68:a9:35:74:08:59:87:9a:5f:92:29:03:94:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Sep 21 13:00:08 2026 GMT
Not After : Sep 22 13:00:08 2026 GMT
Subject: CN=36926707f608a572abfcbfe976b0fb5e45eb46cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:1d:1b:f5:3b:b5:ed:14:1e:53:a5:24:92:
74:54:55:1a:19:d1:8d:87:d9:5a:70:26:0a:4f:6d:
58:bb:6c:85:df:24:55:4d:01:09:14:1e:3e:cf:2c:
fe:e3:fb:14:2c:a9:79:07:0f:20:85:c2:cd:29:20:
64:1f:18:3e:ef:f1:06:a6:17:18:f5:44:85:e8:4b:
46:a8:e0:3a:0f:7b:aa:65:e0:0a:a6:d9:fc:f2:b0:
e0:f8:7a:d7:b9:43:82:88:cb:7c:c2:b2:2a:95:b3:
34:ec:15:7b:4d:ca:93:24:50:6f:25:46:ec:7f:30:
d7:43:03:01:28:8f:32:ca:b0:df:37:6c:8d:39:c4:
36:d0:f5:3f:ea:80:75:e1:1b:58:62:f7:3e:a1:e9:
ae:22:58:ea:4c:b2:46:3f:5b:8e:58:80:55:6f:33:
b0:04:82:11:5e:4c:0f:b1:b6:66:48:02:50:78:6e:
0e:be:e5:66:b2:cb:80:3b:3f:cf:c8:2e:f7:cb:18:
f5:ad:d1:eb:69:46:a3:81:66:89:d7:55:fd:12:1c:
e9:c9:ab:82:4b:5f:df:58:d7:de:c1:8f:11:55:64:
60:81:b9:d7:f0:2b:3e:67:8f:d0:71:8e:e3:9f:20:
99:3a:be:8e:cc:92:b9:11:71:a0:d4:c2:21:04:9e:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:67:07:F6:08:A5:72:AB:FC:BF:E9:76:B0:FB:5E:45:EB:46:CC
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6d:93:a1:0b:82:f1:77:cd:e8:94:5a:84:12:8d:2e:a0:69:
45:b6:04:63:d4:0e:c8:34:79:45:c3:2c:d7:17:c7:67:d0:f6:
da:f1:dc:c3:5d:b0:ab:20:39:6c:28:38:3c:5f:7c:6d:a6:23:
89:0e:2c:b1:70:3c:e5:35:73:b8:91:46:23:36:f6:05:9f:d8:
86:c1:23:73:ed:43:22:c4:46:e6:d1:a0:9f:61:97:6e:af:ac:
15:47:c3:0d:f0:b1:ae:78:fb:cd:00:c9:21:86:c3:0d:70:7b:
be:ca:9c:e8:00:9a:18:60:e7:96:7b:1c:b6:74:27:28:58:04:
56:65:1d:55:1e:6f:86:e8:62:91:93:b3:9c:a0:ae:42:6d:d3:
8a:2e:9f:6a:6a:e2:93:d6:e6:55:6a:6f:1b:02:da:e5:07:d5:
24:7f:bd:9b:7c:c4:c0:29:5f:f1:6b:d7:1d:7b:4a:63:2d:f0:
23:60:40:4d:91:7e:ab:b3:d7:69:35:12:ed:d0:a6:2e:46:7f:
23:df:b8:03:eb:a8:b5:5b:de:41:99:5e:d1:76:76:41:f8:8d:
dd:27:2b:59:50:12:37:ca:e4:22:33:ec:42:6a:43:dc:ab:cb:
15:5e:77:a9:94:a5:c0:ab:0a:01:37:a4:5f:e8:7c:c5:35:1e:
b6:b0:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:30 2026 by rpki-client