Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: ie78+iHK8Q7+yNVBbrS6FOUt+ylRgb7FbZ01X0x3M5A=
Subject key identifier: 54:F8:5B:6D:94:5E:E5:DC:3A:2C:40:A9:C3:59:82:37:17:A9:99:0A
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 019D27A92713B37DDFACD619A6DC7A60B4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: 0531BAkLXZV67nncfLvNCkjbh-k.roa (hash: euvg4/4Sr2jxjMgLytVs8+6OJsRY0QQOvsQOdksVnGQ=)
2: MgSoiC6Hu1yTUAZdbU-vK0dVtuc.roa (hash: a2ZSZdWNOxousuGf0RH1BivI79B+5I59lCuIYIMOr3Y=)
3: WwX0JTR-L90JZbPhPbc6WFq_tJM.roa (hash: W2cWm9/jLU8s1tVrrv8IZTosQohnszilkPH0YNaiEbE=)
4: rN2UtVdj6caj6yMxQCrHsSKZMvI.roa (hash: Z3x5j+qIaBAKVKD7voN6LPA49rIP+QJqgn0Mulf73dQ=)
5: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: DOF5/gPDr581AX9nlfc1yg+7YpSo1TbDHHQ/lz9i098=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:27:13:b3:7d:df:ac:d6:19:a6:dc:7a:60:b4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=54f85b6d945ee5dc3a2c40a9c359823717a9990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:27:e1:96:56:0e:27:66:7d:19:86:10:ee:
77:fd:41:8b:16:c7:cc:d2:77:c9:cf:67:f0:a4:c7:
7d:02:41:14:fb:63:ae:4b:37:2f:2b:70:10:32:bb:
8f:17:a4:c9:a8:f3:7c:f3:0a:ba:7d:03:33:e4:74:
b7:36:fb:51:a8:2b:e1:c3:2c:d1:44:f8:d0:24:e5:
b7:64:96:9d:13:0e:84:5b:bf:c7:86:77:7f:c6:cd:
09:18:83:97:0b:da:82:96:61:b4:5a:fd:a7:13:66:
86:bb:5c:ef:64:9e:02:c1:33:e4:35:92:d2:20:e7:
0c:9c:e1:57:42:06:88:1f:9b:81:38:f9:77:19:80:
da:9b:32:b7:96:14:4d:ef:e8:6d:e9:2c:36:29:a9:
35:15:d6:85:4b:f3:93:f8:50:c3:27:d9:53:63:0d:
30:86:ca:eb:82:90:a3:8d:2e:83:18:d4:b6:ec:e4:
0b:4a:3f:97:da:49:34:f5:1f:f0:0e:ec:15:2c:ba:
2e:20:dc:7c:d3:64:f4:5f:c6:a5:35:48:34:30:76:
15:b8:c0:28:47:65:34:a1:a9:04:e6:04:e8:3a:2b:
ea:0c:51:c9:f3:93:a8:e0:c8:27:83:fd:e0:51:f5:
93:88:64:8b:d2:1b:fa:17:df:da:ab:99:26:a3:7f:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:5B:6D:94:5E:E5:DC:3A:2C:40:A9:C3:59:82:37:17:A9:99:0A
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d3:19:03:62:9f:43:03:a5:b4:2e:25:9f:e3:45:49:11:26:
c2:7a:ad:43:88:71:37:40:29:cf:22:f5:06:e1:ed:66:70:05:
0d:2a:ba:bb:c9:ff:2e:d8:17:9d:41:bf:59:41:60:ac:55:54:
44:96:9f:fe:1c:dd:23:5f:37:c4:8e:9f:e8:14:cc:3e:e7:ff:
21:92:d2:23:e3:50:c0:ea:f9:00:f5:19:36:46:58:dc:3e:ae:
f5:54:31:71:04:79:bf:fb:0a:00:d1:6a:73:19:a3:36:92:bc:
12:dd:81:1b:8f:d6:d2:50:0b:58:f4:bf:8e:c6:8a:b5:51:88:
8b:90:ef:5f:08:70:0f:af:30:dd:2d:71:5e:49:2e:5d:ec:5f:
55:12:c5:0b:0e:bc:dc:44:d6:ef:94:37:a5:6b:d3:06:6b:bb:
6b:e6:28:03:4b:dc:9a:9b:34:5a:0d:19:9c:7a:a3:34:a9:3f:
1b:80:fd:26:57:a8:7a:ad:26:e0:f8:ad:ca:5b:39:57:ce:b3:
94:32:85:e0:8b:56:31:8c:53:ea:27:74:44:37:54:5b:20:b9:
28:e5:4f:eb:43:93:a4:0c:bb:e1:0f:38:7d:e7:a5:04:3b:89:
f5:36:72:8a:62:6a:27:48:90:b3:cd:d4:25:92:f2:1e:58:7c:
22:d4:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:33 2026 by rpki-client