Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: jKjrnZbI4fnFsfQG3K1CjXuSnd0aOJda3TA8Z3ILRos=
Subject key identifier: A0:9D:C3:0F:A1:D6:7A:72:32:5D:50:50:AB:B6:9A:00:A4:8C:03:0C
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019D265F5CD85316901D08E155009DC587A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:16 +0000
Manifest this update: Wed 25 Mar 2026 19:01:16 +0000
Manifest next update: Thu 26 Mar 2026 19:01:16 +0000
Files and hashes: 1: 39SWcIru4OOLf3jMU1giDlE-804.roa (hash: VHGE9nOLuGsrrsrjhfRfN6xG0b3Ab1haHqJsSirwxJQ=)
2: q2Eizro8coJ0vQbXr19bHJH4bc0.roa (hash: tmAf20SndhrgKXo0idQ98M/X9oFaPmCTdoXsGpxVz5o=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: /Fs6v/y55heh5dXiM18oRe29ngbHeDGLX3N8AKCmTPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5c:d8:53:16:90:1d:08:e1:55:00:9d:c5:87:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Mar 25 19:01:16 2026 GMT
Not After : Mar 26 19:01:16 2026 GMT
Subject: CN=a09dc30fa1d67a72325d5050abb69a00a48c030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:3f:9b:20:09:9f:3a:aa:07:0d:dd:69:4c:
58:6e:40:4c:d2:30:1c:54:fc:ef:3d:3d:64:80:8d:
9b:6b:b5:0e:9f:51:91:b7:a6:ce:62:4f:d6:47:57:
b6:61:e3:9c:8a:4f:41:b6:f3:e2:b3:81:23:9d:c0:
b8:a2:6c:fc:bb:44:46:b6:b2:60:33:3c:f5:c3:a6:
af:43:55:bf:c8:17:ea:6f:de:f0:ed:1f:52:f7:56:
c4:28:cb:ca:24:19:15:11:df:ac:57:11:27:9b:fb:
95:1a:f5:91:8e:f0:3f:1d:07:ca:c2:57:e5:e7:29:
47:94:ae:07:96:70:e7:6a:d2:58:4a:47:2f:67:e8:
f6:50:2b:53:59:37:9f:9c:fe:09:1e:14:d3:77:63:
05:8b:8f:61:d5:38:45:b8:92:0f:12:83:a9:71:88:
72:bb:7a:fc:24:b3:05:bc:5b:63:34:c6:06:14:57:
67:1f:46:f8:af:4f:25:0c:7b:e9:1b:15:4a:b1:fa:
4c:1a:cb:39:65:73:8f:16:44:4f:94:c2:c4:6c:a1:
52:cc:60:36:00:eb:0c:77:69:6d:cc:51:6a:58:6e:
3c:66:19:f6:49:23:52:58:71:15:4e:0d:34:31:c0:
c0:57:a5:dd:dd:65:8b:a1:1c:50:37:9a:26:79:dd:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:C3:0F:A1:D6:7A:72:32:5D:50:50:AB:B6:9A:00:A4:8C:03:0C
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ab:01:d0:50:03:81:1b:43:44:1d:79:63:05:6e:37:2a:51:
e8:52:7f:25:bf:c5:9d:a7:ad:cb:4b:35:e4:4c:61:3d:9e:85:
cf:97:04:58:bf:1b:15:5b:d1:8e:a3:9c:16:94:8e:07:f8:08:
23:2f:fa:23:72:33:f2:1e:d7:9d:18:15:19:0c:5a:26:20:e8:
20:f3:44:e9:d5:a1:1a:4c:87:5c:8c:fb:88:17:a0:7a:68:ca:
4f:dc:8a:8c:66:5a:c3:9a:7c:9a:ee:b7:db:bc:00:15:49:b8:
c0:f8:2a:42:a5:8d:41:c8:f0:d8:f6:ff:cf:d6:ea:1a:f6:55:
f8:02:10:6f:63:15:e1:36:1f:ce:c7:fd:7b:c7:d7:3a:d4:36:
e0:4e:66:31:6e:78:30:14:8d:56:be:c7:18:5b:97:04:3c:f7:
c9:69:1d:79:2b:9b:71:c8:25:b0:4b:e2:1f:f2:db:43:79:5a:
3d:68:83:ad:dd:35:73:85:b9:c1:e5:4e:c3:0c:72:39:a9:b0:
03:dd:77:a2:5d:ef:e8:a2:66:23:c7:c9:b4:00:ef:4e:08:e9:
b6:b4:bc:12:ee:ec:87:96:7f:20:60:eb:ec:ca:f0:d5:05:a3:
6a:60:92:63:1f:63:1c:81:77:9d:9d:66:e7:f0:b2:a3:28:fd:
c3:be:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:52 2026 by rpki-client