Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: gJBA9gLTrM0LnsDjAkFFfJDOgHl0HC01P0H5uUyDLCk=
Subject key identifier: B5:80:21:B6:B3:9A:76:87:2D:09:AB:70:FD:E6:89:19:5D:0C:8C:26
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019E1D593670604295865C9111714B16D890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0666
Signing time: Tue 12 May 2026 18:00:46 +0000
Manifest this update: Tue 12 May 2026 18:00:46 +0000
Manifest next update: Wed 13 May 2026 18:00:46 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: 1Yd77RXLlAj+to4D1ypvBzhjEL1O/yY9y6m6BQ4pK8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:36:70:60:42:95:86:5c:91:11:71:4b:16:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: May 12 18:00:46 2026 GMT
Not After : May 13 18:00:46 2026 GMT
Subject: CN=b58021b6b39a76872d09ab70fde689195d0c8c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:7e:62:30:73:79:31:2c:90:d3:af:ba:29:
38:eb:9f:16:9a:1e:d4:25:b9:51:53:b2:c5:fd:fd:
2f:66:cf:c9:00:56:c5:62:14:0f:af:aa:5f:68:ef:
16:19:06:1e:7f:51:8b:ec:73:ec:09:e7:62:21:70:
15:1d:21:9f:11:a5:0c:90:f5:6f:4a:f6:7d:da:33:
86:4d:d7:d4:f4:4d:d7:0a:70:3c:55:a6:97:f8:6b:
c3:e2:03:46:6c:06:54:fd:40:1f:0a:64:2a:87:a9:
f8:21:fc:57:7f:64:16:c9:e4:76:71:d4:bb:1c:1b:
b1:7c:2f:49:ec:8b:25:e0:2c:71:f8:ef:8d:62:f6:
d0:9a:de:2a:e6:9a:3b:5e:d3:5b:90:d1:90:f4:3d:
d5:d5:f6:02:f2:8f:35:52:b5:70:ec:e9:0d:ce:ff:
9a:5c:e0:d6:2e:1c:0c:55:b8:29:7b:6f:77:e9:d3:
3d:aa:8f:83:12:dc:1b:3e:5d:d4:75:e0:e2:5d:56:
4b:69:51:4d:58:fe:ba:3a:c5:64:35:18:5d:ea:6a:
12:b4:9d:2f:6d:5f:0d:59:81:60:f4:a1:fb:0f:c2:
b6:01:f0:ce:81:93:03:43:22:71:1e:66:d4:03:2a:
2a:51:6d:a1:8a:f9:44:e8:32:cd:a5:c6:40:61:6f:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:21:B6:B3:9A:76:87:2D:09:AB:70:FD:E6:89:19:5D:0C:8C:26
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5f:7c:1c:fc:dd:7c:b6:4d:fb:dd:ae:c2:de:3c:e0:ec:25:
39:67:78:4a:c4:b6:31:f8:42:f2:69:aa:cc:b4:32:ca:e6:0e:
20:29:91:1c:f1:de:3c:86:3c:07:79:b0:f6:30:5b:50:b9:b5:
76:15:cd:fa:ed:bf:b5:a0:7c:8e:32:e4:64:66:8d:64:bf:88:
62:42:6e:e3:c6:e0:9f:15:cb:46:f7:3b:77:d6:12:fb:bc:3e:
a4:e0:48:77:4a:fe:ef:9e:32:5a:b7:0c:dd:39:94:dd:04:9e:
f7:4a:97:f9:bb:5c:33:9c:5b:4d:c3:02:e3:75:9e:8e:f6:1e:
6e:b5:7c:2c:f1:fd:39:fc:25:36:70:2c:33:08:3a:3a:55:cc:
50:42:01:9d:f9:74:8e:56:41:fb:85:cf:b9:90:8e:46:c3:ea:
63:fd:d3:3f:05:21:95:ae:51:f5:13:42:58:d5:2c:e4:69:76:
be:f8:51:8d:9f:8b:1c:f3:ee:44:fa:fd:6c:3e:f7:d0:78:44:
1d:e2:2f:4f:af:be:70:70:5d:cc:12:22:d2:3c:46:82:de:0f:
ec:12:38:d3:f5:c8:ac:30:42:46:c7:7e:65:b2:fe:4f:f5:14:
81:6f:95:5e:06:4b:8d:5c:bb:d8:2e:c7:b7:1e:e0:04:cf:45:
c6:41:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:42 2026 by rpki-client