Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: JfKLJ5Jfy7D8lTH8AMwo5IvamMa9SO39QuUccxCXcB8=
Subject key identifier: 52:29:EF:25:48:5F:F1:36:76:86:59:F2:1B:E5:2E:35:8B:A0:65:7C
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 01A0D803FBDF57DC7755EF4E4AC1F74F2081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 07D0
Signing time: Fri 25 Sep 2026 10:02:14 +0000
Manifest this update: Fri 25 Sep 2026 10:02:14 +0000
Manifest next update: Sat 26 Sep 2026 10:02:14 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: MzhlnEkPFfLYk1_xoS-eW2rxNzo.roa (hash: xES0NKYjiPe+r5Rk7WIVkRnpa0zN2uHpDR7T+kBqWs4=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: FqBJeKPsrvPYwejP1HRSsq90GoqtgJihkb3mxHl7rjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:03:fb:df:57:dc:77:55:ef:4e:4a:c1:f7:4f:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Sep 25 10:02:14 2026 GMT
Not After : Sep 26 10:02:14 2026 GMT
Subject: CN=5229ef25485ff136768659f21be52e358ba0657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:ef:cd:5b:a6:18:ff:e7:ee:d5:a0:58:45:
83:2c:5d:4c:a1:eb:6b:c0:21:eb:0d:80:6a:f1:12:
82:53:34:2e:a9:25:64:4d:89:44:e9:2c:db:7b:60:
07:a0:b9:a0:f5:e3:d6:28:cd:39:03:6e:48:c4:a5:
06:74:3f:1b:0c:fe:dc:17:73:1e:58:40:da:f3:af:
71:df:6b:c0:09:1e:9b:29:6e:47:36:1a:17:31:cb:
21:35:2c:da:a7:15:30:aa:d4:54:75:5f:31:9d:c6:
28:aa:0f:83:02:fe:d6:75:c2:0d:df:8c:3f:a6:f2:
56:92:ab:da:c2:04:2e:26:74:1a:0c:2e:49:36:8c:
ec:8f:c7:c3:b2:08:70:ee:57:7b:1a:8f:03:1d:18:
09:b3:38:3c:e7:2f:19:05:94:bd:d5:c3:64:0f:7f:
83:da:25:fb:58:e3:b1:70:f7:b6:10:49:6c:ab:a3:
c3:91:ea:c6:a9:50:0f:91:2c:a5:7c:8c:af:e0:d0:
5e:1e:fd:81:ca:dd:d8:31:a8:ed:72:28:21:ce:4d:
f3:ee:9c:ba:08:6c:91:dd:85:30:00:de:8e:30:09:
4d:c9:78:ca:4b:54:d2:7e:f7:03:22:3f:74:13:7b:
69:6d:cd:3a:2e:8a:f2:99:78:6b:fb:1a:c0:8d:bd:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:EF:25:48:5F:F1:36:76:86:59:F2:1B:E5:2E:35:8B:A0:65:7C
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:ad:15:57:57:6a:e0:82:f4:36:89:cd:7c:55:09:26:1b:
3c:52:d3:c5:41:26:c0:32:d1:17:b1:57:af:ca:10:f8:c4:b7:
80:73:18:a8:dd:df:17:df:31:70:1f:cf:87:fc:4b:e7:82:72:
07:af:02:97:d4:23:ea:d6:2a:1a:26:63:22:02:74:bb:02:27:
92:d1:aa:c8:93:30:d0:26:ad:96:e8:dd:f9:ec:4b:58:a4:ec:
33:a1:a7:b1:82:da:cc:a0:4a:31:6e:a6:03:f4:62:4d:2e:db:
5b:ac:30:bc:99:1a:34:a9:27:e4:7f:0c:0f:c0:75:cd:bc:bd:
18:bb:f3:9a:80:d4:72:9d:37:77:f9:f4:9c:38:5d:27:b5:72:
a0:fe:61:b9:12:7c:d5:03:71:50:73:47:b8:5e:63:dd:32:cb:
30:cb:3a:54:7a:51:d8:55:24:e6:99:5b:98:2f:56:e2:96:cb:
72:5a:1d:ed:46:e1:62:da:b6:e3:4f:41:98:97:04:7a:79:23:
5d:fb:5e:99:47:8d:21:d8:c9:74:82:21:ca:e0:d7:f7:41:20:
8e:a5:fa:04:85:b7:73:fa:d5:bb:97:5c:56:cc:b6:4e:bd:92:
54:54:62:9c:23:48:89:7e:d4:b1:47:e9:31:b0:a7:ac:10:e7:
53:ac:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:01:18 2026 by rpki-client