Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: RH7dbsTaXgo/KG6Pl9PPN7l4Lctijx01Pibm1KElaLM=
Subject key identifier: 94:C5:48:75:4F:1C:90:DD:E0:00:E9:26:5E:1D:44:45:E0:CC:1B:30
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 019D284D84D9492B97A6FB174102794D0335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0CCC
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: 5POQaq2FIBregxvYNKnQ0LZ68eA.roa (hash: 3ZBwuPJNCoHXmfqEKRXgDso3hRBamUObQVJiGRHt5+M=)
2: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (hash: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c=)
3: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: SPJ7zwliBko0+GRpXCnqhy9DZRFA+A23bG4BBNhzVpI=)
4: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (hash: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:84:d9:49:2b:97:a6:fb:17:41:02:79:4d:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=94c548754f1c90dde000e9265e1d4445e0cc1b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:2a:ab:d8:f2:17:0c:2c:ce:6d:e7:29:39:
9c:53:72:02:cb:af:e5:f7:1d:e4:8b:f7:e1:07:36:
ad:f1:f6:e8:2a:57:99:48:08:c3:a3:5b:dc:ed:87:
dc:4f:11:12:db:b9:e6:32:b4:f7:6f:4d:eb:ec:99:
41:d5:26:bc:63:f7:c3:62:6d:55:91:09:2e:76:91:
0d:4b:cb:27:a0:db:16:27:f0:fb:b6:c4:65:ea:d4:
bc:66:8c:13:2a:f5:43:cd:f2:58:53:b0:d3:f1:cc:
68:0b:36:0b:45:7a:9e:bf:8a:49:07:11:7a:e7:6f:
3b:f5:c2:8c:f5:44:27:01:75:14:27:f9:73:a6:ef:
0a:c9:e2:12:84:f8:56:5c:ae:80:32:e7:fc:fc:f1:
85:dc:b6:b2:85:62:eb:5a:1c:98:09:94:e9:83:de:
50:79:ee:9a:25:c0:43:33:6e:fa:f0:d4:c6:51:9b:
b6:37:09:58:aa:bb:b7:4a:00:ec:dc:02:ca:7d:a3:
4d:11:b9:85:53:bf:43:b9:e2:57:77:7d:8e:6f:61:
1a:67:07:b7:a4:51:86:42:db:b2:e6:01:5e:d5:74:
a3:cc:5a:73:fb:fb:d6:c4:6f:28:c9:d3:68:48:60:
4d:09:c6:6c:3e:13:89:3d:90:7d:82:57:86:0f:7a:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:48:75:4F:1C:90:DD:E0:00:E9:26:5E:1D:44:45:E0:CC:1B:30
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:7e:f7:1f:c5:9b:83:b1:4f:3d:85:49:8c:26:80:ab:c0:
79:4a:1b:d3:cb:d8:98:b2:d6:00:a0:d7:43:a1:14:8d:ce:10:
a5:17:70:72:3a:f9:02:c8:7f:b5:1e:2a:c0:c0:82:f1:7d:2e:
02:8f:fe:18:77:66:f5:aa:98:03:d6:e5:45:31:eb:6a:ed:66:
c7:43:26:32:f8:b2:7c:64:8d:1f:7f:7e:a4:ab:2e:05:82:73:
cc:3b:29:9d:5b:89:49:68:dc:22:d7:61:af:8d:ee:29:6a:20:
54:bc:71:a5:2e:d4:31:8a:23:da:54:4c:c8:30:e1:45:85:30:
2b:e4:6b:43:af:b4:08:eb:85:14:3c:4c:2a:76:29:d2:be:b2:
c5:ec:2f:a7:e5:30:49:f5:b6:80:66:cc:5c:9b:31:a9:00:27:
26:9a:f5:c7:a1:d6:a3:b4:f6:e5:9e:ba:7f:1a:ee:f3:66:af:
fb:78:80:e8:d6:7f:ba:3f:98:00:7d:eb:17:8f:ef:a8:74:57:
61:fb:3a:4c:51:9c:a0:45:7e:af:3d:ff:83:11:88:8c:a8:69:
09:68:13:a0:58:91:49:46:1c:e1:0c:6b:15:f9:c1:05:14:ac:
bf:11:57:55:5f:44:02:e6:1e:d6:70:37:ef:0e:1f:c5:3c:9f:
e8:02:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:05 2026 by rpki-client