Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: EBJOKA3VWuI+9at8NoP4zSSmYIQhujZKiNLBTO1e/iw=
Subject key identifier: 7A:24:8D:F4:D0:C9:09:63:A9:F3:6D:66:F1:16:0C:A1:F4:EF:99:53
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 01A0D83B69DCD568657D0E89FE665CC9FA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 11:02:47 +0000
Manifest this update: Fri 25 Sep 2026 11:02:47 +0000
Manifest next update: Sat 26 Sep 2026 11:02:47 +0000
Files and hashes: 1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
2: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: 0NF9AOOpe9rDmrF0f3L7Z/YHRweXiR20e6hpZCkeKWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:69:dc:d5:68:65:7d:0e:89:fe:66:5c:c9:fa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Sep 25 11:02:47 2026 GMT
Not After : Sep 26 11:02:47 2026 GMT
Subject: CN=7a248df4d0c90963a9f36d66f1160ca1f4ef9953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:10:06:a0:ec:00:60:ba:a6:08:aa:12:bc:
5b:11:29:3b:cc:f2:07:b3:b3:c7:d0:1c:d8:c5:9e:
4b:c1:b6:0f:b0:9d:dd:35:e2:65:af:07:c2:24:62:
f7:76:03:5e:84:a8:c8:2d:57:b2:71:16:94:ee:e5:
80:f8:b0:5f:b6:f1:aa:09:63:78:14:e2:d5:f3:f3:
d7:fa:a6:79:ba:c4:55:0c:26:d9:86:15:ec:94:07:
e9:3a:01:b1:e3:3c:30:fb:ae:a6:92:16:72:10:f8:
41:2a:ae:b4:3f:13:1a:1d:76:3b:f7:b6:06:10:31:
17:ff:2d:dc:25:43:c4:c9:e1:7b:96:3f:a5:bf:d8:
83:fe:f6:94:16:cb:9b:04:d2:ec:77:34:cf:36:43:
bd:ea:45:28:e3:73:22:6d:df:8a:1f:5b:c0:56:11:
9f:9e:a2:bb:84:25:97:ad:b7:c5:d3:52:6b:56:ac:
f3:33:82:6d:bd:d9:42:30:ed:6f:fb:b6:97:dd:d6:
cd:d9:2b:f9:d8:1d:b0:8b:f7:0c:9f:7c:df:1b:66:
da:98:a1:6c:2d:9f:8e:e3:0d:14:29:1c:84:67:3d:
69:55:fb:c1:e1:a0:f0:db:25:47:b6:ed:b2:82:83:
7c:28:b2:db:82:05:2c:6f:72:94:70:87:8e:6d:7e:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:8D:F4:D0:C9:09:63:A9:F3:6D:66:F1:16:0C:A1:F4:EF:99:53
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4e:83:ff:4e:f2:0d:ed:49:77:89:52:31:52:4e:8f:72:9d:
9c:1d:a9:43:0d:ff:a3:53:51:84:03:01:33:d5:61:25:b9:05:
e9:ee:7f:c9:7b:2f:b8:d1:f7:08:d8:66:b5:4c:7c:08:60:36:
0c:98:ef:68:3c:e1:69:ad:50:e1:d0:e7:5e:f8:00:0b:76:09:
28:1d:a4:73:44:bb:ce:8d:4a:9a:93:26:66:1e:d2:52:e2:23:
89:81:87:25:10:52:08:e3:6b:a4:2d:f0:76:ef:7b:bf:7a:43:
54:4c:72:92:a5:22:7c:63:4c:73:9e:e3:49:01:46:07:9c:e5:
c8:f0:83:45:18:96:0e:5b:32:79:f2:15:c9:66:53:5e:52:6f:
f9:3f:61:8e:aa:ea:91:d8:29:f2:3b:e6:65:5f:bf:60:ba:a9:
2f:cc:c2:35:d0:cd:5b:19:73:b4:34:77:ea:0c:81:92:9c:97:
24:b5:01:9c:5b:af:51:8c:29:8b:ca:e7:fb:d0:23:d9:63:c7:
cd:dd:dd:07:be:3a:b1:2d:1e:5f:a4:f3:d6:bd:e3:61:d3:a7:
35:ff:93:b6:44:03:c4:db:e6:c6:e4:5e:f5:66:4f:86:87:bb:
d7:36:b2:75:80:2f:8a:ea:a7:1b:a7:93:b1:19:71:fc:c6:e7:
a3:6f:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:44:23 2026 by rpki-client