Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: SRcr3wcAFs2peh68Ka7HMRvDDK2C8clMOad+txj5xek=
Subject key identifier: B7:58:E7:D3:29:FD:93:6B:75:CB:93:27:AD:89:3B:5B:6F:C0:6A:70
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019F93FFB5096A575B9D086384CCAED27FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0728
Signing time: Fri 24 Jul 2026 12:00:36 +0000
Manifest this update: Fri 24 Jul 2026 12:00:36 +0000
Manifest next update: Sat 25 Jul 2026 12:00:36 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: MCsNLcQtsxLaxYmLxaCACuD6H9jd1PwOfN/g4yKbqG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:b5:09:6a:57:5b:9d:08:63:84:cc:ae:d2:7f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jul 24 12:00:36 2026 GMT
Not After : Jul 25 12:00:36 2026 GMT
Subject: CN=b758e7d329fd936b75cb9327ad893b5b6fc06a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:55:9f:39:df:e6:38:f9:29:85:93:09:6a:
cc:74:4c:7d:e7:56:a2:b1:04:23:98:45:1c:e5:7f:
34:7e:26:d5:db:e9:a4:97:33:32:8c:64:f6:b8:56:
74:01:b7:69:c0:6a:29:85:40:17:bc:06:06:15:0b:
90:c4:20:51:c4:8f:c5:3c:f6:89:ef:b9:a7:24:d9:
b1:66:28:36:aa:c1:e2:1e:89:81:1b:99:71:6d:6c:
0e:55:0a:20:ff:bc:a8:6e:db:6a:13:4a:82:27:0a:
5b:4b:71:38:07:06:05:5b:95:63:c9:0f:68:a7:8c:
ad:6d:90:5a:15:cc:8c:02:25:8e:09:24:b7:76:24:
44:cf:d5:dc:e6:a9:c5:3b:99:91:db:b4:59:90:b5:
77:ed:41:7e:cb:b4:4e:40:f0:b8:3c:2c:00:c0:00:
d6:16:8b:28:69:36:48:d4:e1:5e:18:72:7d:03:49:
18:e5:40:f0:a9:e1:6e:05:28:6f:61:92:ae:2d:cb:
20:7b:8b:38:fd:86:e7:1e:4c:e0:83:50:a2:8a:10:
cb:4b:1c:88:b1:dc:9d:f0:6c:f6:9d:e9:28:60:2b:
aa:8b:cb:b2:a0:43:bf:00:db:27:39:92:02:2e:41:
11:01:48:8c:e3:f6:fe:cf:ae:c2:2f:49:f8:09:ec:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:E7:D3:29:FD:93:6B:75:CB:93:27:AD:89:3B:5B:6F:C0:6A:70
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:a0:47:8a:64:df:ca:3d:9a:5b:52:14:e4:b2:e3:db:fe:
1e:02:7e:be:65:70:ee:13:7d:c2:2c:50:a7:8e:65:50:5d:f2:
ef:40:f7:3f:41:1d:77:aa:fc:89:d7:a2:21:5b:04:14:04:c6:
99:95:7b:0d:f9:5b:b0:9a:60:fa:35:e8:a2:74:40:b6:a9:ec:
9b:e7:d9:84:5b:a8:a3:34:e4:00:bf:07:cd:0e:ea:39:9e:27:
c5:9a:ab:33:89:a8:77:cf:f8:47:a4:cc:10:d4:50:99:41:97:
f7:19:e0:f5:f8:02:14:20:b3:3d:61:f3:04:c3:fa:28:ce:ca:
6b:16:9e:5e:9f:c1:35:cf:fe:cd:a3:8d:78:a1:11:8a:c2:49:
fe:f6:94:6a:ee:1b:91:9d:cc:9d:09:37:40:f0:d8:e0:e9:37:
50:22:7c:f6:30:36:08:ff:32:c3:8b:d8:fe:2b:43:1f:56:9a:
28:1c:8d:ea:17:7c:c2:52:67:79:37:e0:ad:35:71:c8:00:b7:
4c:4c:13:69:14:8a:ff:d1:d2:2b:a8:e4:e4:c4:96:cd:3b:38:
be:c7:3a:57:08:23:ec:8c:91:2d:d5:85:36:d5:d3:e6:7a:02:
8e:26:b6:30:de:6c:42:c7:e8:42:e5:c7:03:1b:08:90:62:13:
59:c1:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:58 2026 by rpki-client