Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier: kkDMz4psX3YB2QJCHs57HPRzKMZ54aiWo7J2Ag9OWS8=
Subject key identifier: E8:34:AB:49:90:2A:55:0C:1B:F9:53:63:DA:D6:C9:63:D8:0F:72:A3
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial: 019D29CE15AB79AEA368047BF4C5A0EA46AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number: 0109
Signing time: Thu 26 Mar 2026 11:01:04 +0000
Manifest this update: Thu 26 Mar 2026 11:01:04 +0000
Manifest next update: Fri 27 Mar 2026 11:01:04 +0000
Files and hashes: 1: rANm87WqORmafEWHghrrK-0l72M.asa (hash: Fgz6vPciEn1J0Q0dP4IkhgZ0dZebnzwKhwY9olb/BWo=)
2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: Uo/Kn1FiWaUaZC5K8rCTFPoxznPhzLPSWvNwJ7iUAvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:15:ab:79:ae:a3:68:04:7b:f4:c5:a0:ea:46:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Validity
Not Before: Mar 26 11:01:04 2026 GMT
Not After : Mar 27 11:01:04 2026 GMT
Subject: CN=e834ab49902a550c1bf95363dad6c963d80f72a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:9d:6b:86:2e:4f:34:d3:05:71:cc:dc:8e:
e9:e9:f8:f8:7c:5b:6e:e4:24:1c:fc:fa:68:58:81:
49:23:61:bb:20:15:38:fa:fc:e4:6c:c4:88:ab:03:
66:ba:02:4c:01:5b:92:43:7a:88:6a:10:5f:da:c9:
fd:e4:63:d8:28:8f:e0:49:50:89:6d:50:c9:29:24:
fb:f6:ab:ef:c6:56:d6:5c:56:9f:6f:7b:ca:8a:8b:
cb:2a:2c:ba:b2:c1:16:be:4a:95:0a:84:47:db:bb:
cc:00:f8:5a:99:b9:d4:5f:97:59:a5:06:1f:5a:1d:
f9:f2:bb:6c:e8:8a:a1:66:af:69:4a:41:6d:34:be:
f4:84:74:43:73:68:74:e5:8f:88:fe:89:a3:36:1b:
9d:04:9a:bb:23:3b:fc:a0:48:0a:46:98:c2:a7:bd:
36:fc:fe:cc:f1:c0:cf:8a:7d:dc:57:f9:c9:c4:05:
83:75:26:18:de:83:7a:7c:47:4a:2f:d8:80:c6:ec:
75:89:ff:67:79:d5:6b:57:4f:64:69:4f:4e:35:bd:
05:93:bb:2d:e1:5a:7e:57:c6:90:35:20:f0:59:94:
63:f9:e5:9a:96:79:79:62:87:63:f6:3d:a2:93:07:
b6:0b:84:58:77:d8:1d:c5:df:14:cf:94:f1:3b:05:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:34:AB:49:90:2A:55:0C:1B:F9:53:63:DA:D6:C9:63:D8:0F:72:A3
X509v3 Authority Key Identifier:
keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:ec:ba:c0:c3:34:d5:51:37:18:b7:f2:8a:c9:7b:35:da:
85:66:9c:a5:fb:f0:f1:33:7e:5e:b4:16:39:4c:de:29:d3:30:
e9:e2:5d:dc:b3:0b:ac:ff:ff:4a:53:31:a8:80:f8:17:e5:21:
2d:27:c2:b4:90:0d:e1:89:a0:9e:7e:41:c0:99:60:4d:24:cc:
45:a4:14:5b:cb:a0:9e:8b:f3:d9:78:ae:cf:f6:01:30:42:8d:
f5:94:2e:3b:bd:84:c7:48:a9:8c:1b:b8:c8:7b:e0:2b:5d:34:
36:1a:75:9d:8b:f8:37:38:e9:6a:fd:fe:9c:11:41:3f:8e:a3:
78:e3:55:58:7c:d5:fa:d2:8d:f4:ac:fe:27:bd:30:f6:70:f8:
ad:32:02:e9:6f:6b:c9:57:ee:31:75:94:c4:bc:99:b1:60:78:
cd:58:ec:c0:8d:5c:bc:f3:3c:e4:ba:0d:d2:52:21:e4:19:47:
18:54:cd:1f:11:a2:ca:b0:76:36:19:48:ff:96:39:28:90:fc:
a8:8c:28:af:55:0b:81:02:b2:46:c8:a4:d8:47:4d:f5:e8:1d:
f3:a6:c2:ac:e6:ea:35:3b:c2:5b:d0:a3:df:23:26:a5:76:a9:
fe:91:6d:e9:8a:d2:c9:11:9c:6c:28:57:17:49:0b:0a:b7:4d:
e7:c6:26:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:09:30 2026 by rpki-client