Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: Yn5kVXFckM9vccfiYQ8StAp0vzvdPXWyAN7cTWBdinQ=
Subject key identifier: C4:B9:28:6E:7D:D4:3D:A1:59:01:5E:D4:75:EF:62:34:46:BE:83:6D
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019D2BF32E231C1FFB29E7B442A6743022AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 05E9
Signing time: Thu 26 Mar 2026 21:00:50 +0000
Manifest this update: Thu 26 Mar 2026 21:00:50 +0000
Manifest next update: Fri 27 Mar 2026 21:00:50 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: O7QYzOIoEU01LYCxshbhndJ8wbaNHhNaxqSqFtDlyKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:2e:23:1c:1f:fb:29:e7:b4:42:a6:74:30:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Mar 26 21:00:50 2026 GMT
Not After : Mar 27 21:00:50 2026 GMT
Subject: CN=c4b9286e7dd43da159015ed475ef623446be836d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:c5:0c:99:8e:54:1e:2e:5c:06:b7:0f:6e:
fc:9e:ec:77:d9:6e:03:b7:de:a3:44:9d:a2:ac:35:
cc:54:ec:f4:15:e6:60:55:72:e2:f1:e3:8c:19:21:
30:cd:74:2e:06:4f:5d:f4:17:f8:d6:68:1a:5d:2c:
62:2d:b9:c2:07:5f:9c:04:ee:85:45:3b:93:2e:42:
2b:37:5d:74:3c:52:5d:b0:29:24:8c:a5:fc:dc:b0:
c0:42:20:18:09:d2:f7:aa:40:32:9f:ed:16:50:97:
aa:45:46:8d:4a:dc:c4:78:a6:f1:20:59:61:10:33:
76:55:6c:44:7f:c0:af:a1:be:6f:78:d2:39:e2:e1:
b9:7c:af:8b:91:48:31:bb:88:c9:5e:83:c6:40:54:
a4:62:45:3a:d1:ed:02:9e:3c:24:de:7b:ef:e4:6a:
85:61:37:dd:04:33:5e:92:67:5b:22:ce:05:86:a1:
dc:40:a0:60:91:6f:95:ec:e3:63:8e:cc:5a:7b:a4:
29:6e:fd:b6:26:3c:fb:df:ac:93:5f:16:c4:4d:92:
82:dd:e0:b4:60:53:ae:51:88:ba:70:bb:18:f2:45:
2c:eb:a4:b1:1b:dc:31:26:09:6e:f1:38:c6:f1:a5:
7a:4a:66:5c:49:e5:96:8e:8a:27:42:f5:f4:31:9e:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:28:6E:7D:D4:3D:A1:59:01:5E:D4:75:EF:62:34:46:BE:83:6D
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f8:7a:4f:8f:f0:09:c4:01:e9:12:a4:c0:a8:56:15:16:15:
1a:96:b9:1f:45:1e:45:b2:63:68:06:cf:76:3f:43:c9:50:b6:
51:76:2b:70:9c:32:52:3d:2a:09:5c:bb:a2:40:d9:99:57:f2:
7b:ef:55:15:70:fb:ef:bf:18:64:0d:98:7e:d6:ad:b1:61:b7:
62:c7:85:86:c5:7c:db:0d:7c:6c:f1:c5:59:70:c4:6e:6f:c5:
a3:0b:85:b7:d2:52:99:d0:4b:f5:65:70:0d:93:43:ab:e7:4f:
d7:9e:3f:ac:94:eb:86:72:f4:d6:15:9b:8b:a6:7e:6b:73:66:
1c:f9:81:67:70:87:ca:56:e8:7c:64:9a:14:1c:d4:33:81:cc:
c0:cf:bc:a9:6f:37:8f:16:87:d7:8e:ba:cb:3d:91:a3:8c:11:
e4:1b:a0:15:a8:37:88:e4:f0:09:e5:f8:50:89:c7:94:32:e7:
c5:aa:f4:9e:43:12:91:7c:1b:57:4b:74:25:2c:df:b0:8e:0e:
de:7c:a3:84:86:dc:74:5a:82:6a:43:3c:67:c2:b7:f5:a8:9e:
76:89:85:0e:59:a9:8c:51:18:ec:94:9a:a8:a5:a5:c8:2d:6d:
f1:e2:37:57:dc:1a:7d:d8:ef:f6:81:47:5f:40:d3:1f:bb:80:
bb:24:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:21:59 2026 by rpki-client