Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: SfWW/wKOs8O9g9W175PrZbOQvhvG1j5HwroTklCtngA=
Subject key identifier: 01:96:0A:B5:11:1F:0D:C3:C9:95:81:C6:2F:EE:25:C5:A0:29:20:98
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019D27E04B4F885AA4D4FF3B3242E5BD8E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0BAF
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: xmERqEEpVPS8J6lvIe/+Nk19x6pu2BUSk7enwIwxbxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4b:4f:88:5a:a4:d4:ff:3b:32:42:e5:bd:8e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=01960ab5111f0dc3c99581c62fee25c5a0292098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:55:41:69:1f:52:41:95:f0:ec:13:38:9d:
6d:5e:ef:5b:1b:49:83:d7:12:b5:e1:10:47:ca:62:
47:5a:1d:cf:a7:76:70:81:43:83:44:5a:34:31:7e:
9e:ae:4c:ad:3f:dc:c7:b1:cd:2f:f2:c3:c9:57:2e:
e3:8b:71:88:17:47:c4:99:8f:87:1b:0f:06:00:c4:
ed:ec:7f:07:1b:2b:b9:85:41:8e:ea:21:20:c0:ed:
0e:ef:28:96:dc:cf:45:6d:92:0a:35:63:bc:6b:0a:
cc:2b:18:15:36:fb:59:13:3d:c1:5c:12:ef:bc:a2:
96:36:11:d8:da:47:aa:63:4d:3e:4a:a3:82:6b:56:
7a:81:a9:13:a5:f4:06:31:e0:e0:35:91:96:7d:11:
4f:6e:f6:9d:cd:a8:1d:0a:bc:11:7d:75:8f:1b:df:
dc:dc:87:4f:9e:06:a2:0b:1d:b7:6b:a7:d7:ff:b2:
7d:af:81:38:2d:e7:82:60:77:45:3b:1c:04:66:c1:
c2:57:8d:4e:ca:7b:99:64:d1:18:a3:e1:86:36:55:
cf:7a:fd:ec:5b:5d:b5:a0:01:0b:0b:88:f6:bf:8e:
f4:c8:0d:d7:8a:6d:6c:c4:78:f6:86:8f:50:a7:cf:
e1:ca:40:41:78:46:7a:3f:fa:b8:59:07:54:c0:38:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:0A:B5:11:1F:0D:C3:C9:95:81:C6:2F:EE:25:C5:A0:29:20:98
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:09:89:2f:23:19:11:85:db:26:fb:4b:b6:88:36:21:af:6e:
1e:f5:6c:a8:1e:58:61:c6:0c:4d:34:e0:d7:23:f1:88:0f:11:
c6:0b:5d:57:6b:9a:cc:e9:e4:6a:d4:dd:f4:a6:e3:d1:a7:0e:
73:27:50:3a:c2:9c:1a:99:91:73:95:09:b4:05:ea:c0:1e:5b:
d2:f7:07:6a:e3:11:5f:49:0c:d0:3f:e8:63:1f:80:3e:80:6d:
34:be:fc:59:6b:32:ba:74:7c:d0:10:c8:98:12:95:1a:2a:b1:
a2:ac:4f:98:db:99:59:93:b3:8e:02:d3:f6:48:a2:8f:d8:a4:
57:58:4d:81:9d:43:3e:04:0b:ad:a3:45:c4:42:04:68:38:4d:
67:50:02:31:79:ae:c2:4a:36:b9:5a:48:cb:5e:28:81:ef:37:
3c:bd:af:63:0e:1f:b8:2f:1d:4e:69:46:95:df:20:15:07:ed:
98:f3:de:bf:45:cf:b7:62:c7:43:33:c7:bf:60:79:11:0c:2b:
55:cd:f6:b4:cc:a9:38:64:fb:a6:12:e7:7b:cb:7d:14:f9:b2:
7b:1b:bf:b5:1e:0e:47:47:58:9b:f2:cb:74:d7:ec:d2:dd:3e:
86:ab:8b:8d:62:9a:a4:eb:78:e8:ee:9d:c2:ef:7d:d4:d2:25:
19:bd:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:25 2026 by rpki-client