Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: PNieS70h4ZrMB/NivboklnUF9B3EvUDRZKX+TMiKpIw=
Subject key identifier: F8:D8:7B:39:A8:CF:5F:AE:14:F7:46:79:7A:1A:64:8F:62:DC:8F:03
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 01A0DFF3815D849603B49B220F5EB1C7E07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1A7D
Signing time: Sat 26 Sep 2026 23:01:12 +0000
Manifest this update: Sat 26 Sep 2026 23:01:12 +0000
Manifest next update: Sun 27 Sep 2026 23:01:12 +0000
Files and hashes: 1: 0531BAkLXZV67nncfLvNCkjbh-k.roa (hash: euvg4/4Sr2jxjMgLytVs8+6OJsRY0QQOvsQOdksVnGQ=)
2: MgSoiC6Hu1yTUAZdbU-vK0dVtuc.roa (hash: a2ZSZdWNOxousuGf0RH1BivI79B+5I59lCuIYIMOr3Y=)
3: S0e9H4nYj-dsFcnpYcONEEZPd4E.roa (hash: NU7H83v507Zrj9FWzAhWcvmD14bF+kjt08VtHrtE1qY=)
4: rN2UtVdj6caj6yMxQCrHsSKZMvI.roa (hash: Z3x5j+qIaBAKVKD7voN6LPA49rIP+QJqgn0Mulf73dQ=)
5: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: 6cmQ/9NCJ3tNPjXPyu0QAm8RHcJ+s7wFTER4BeA920g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:81:5d:84:96:03:b4:9b:22:0f:5e:b1:c7:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Sep 26 23:01:12 2026 GMT
Not After : Sep 27 23:01:12 2026 GMT
Subject: CN=f8d87b39a8cf5fae14f746797a1a648f62dc8f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:e1:d2:e8:62:af:0d:67:64:6f:b5:17:8d:
98:3d:f8:7f:cd:f6:47:02:b8:ec:96:ef:da:73:87:
d2:ce:67:58:7c:62:b2:6c:bc:6c:7d:7f:e1:db:50:
eb:dc:5d:08:62:0f:68:b8:54:89:d0:07:61:a4:63:
74:ca:da:2a:8c:6c:89:38:98:3c:31:1c:5b:fe:f0:
0e:5f:61:8f:5e:e0:fb:73:f7:7f:4a:4c:51:f2:21:
1e:36:4b:b6:59:29:65:fc:b9:d3:b6:4c:7f:00:37:
50:ec:3d:d9:3a:c2:46:2d:5a:55:9c:38:09:c4:54:
7b:10:ec:a2:72:11:a3:78:38:7d:fa:6c:23:83:7f:
e8:d9:55:90:d4:15:51:6c:44:1b:d2:30:8a:bc:f8:
b4:95:93:ee:f1:b4:f0:96:34:51:74:fe:6a:d1:10:
97:0e:c2:28:57:a3:92:fb:f8:82:d8:19:ac:ae:57:
c5:fd:a3:83:70:25:40:e2:af:42:8a:16:92:71:28:
55:fc:fb:6f:93:f2:4a:2b:f2:ec:27:1d:00:b9:a6:
1a:7f:3b:f8:64:7f:60:51:43:88:d6:60:bc:e8:69:
66:39:d6:39:31:b4:8b:24:c9:d8:4c:11:80:ad:a8:
a1:6b:bf:fa:9e:ee:f1:5f:db:b2:47:83:c7:f8:9f:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:7B:39:A8:CF:5F:AE:14:F7:46:79:7A:1A:64:8F:62:DC:8F:03
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a9:4c:81:15:67:01:cb:a3:6d:4e:15:5e:c5:fc:b0:63:83:
22:a9:92:8d:53:b1:fc:2f:b6:fe:ea:8d:ec:40:b1:22:37:c3:
2e:63:da:80:fe:78:29:29:22:04:15:d6:5a:1f:1b:ef:9c:f3:
bb:64:f9:51:d0:9d:46:b8:8b:b2:a9:c8:4b:d7:32:6b:3f:1a:
e5:dc:a5:a2:35:32:d4:cf:d2:a5:9a:c1:d1:f9:ee:83:d7:77:
0a:20:06:72:c7:bb:f5:cd:32:d1:26:a9:ca:0f:29:a4:f5:55:
67:02:9e:a5:7e:f6:74:68:1c:9c:40:eb:28:50:39:db:8b:77:
6f:89:3b:05:2e:27:4e:8f:d8:20:6a:fb:05:ea:56:cf:b0:7a:
dd:d1:04:b8:b1:4e:08:da:b0:3c:b8:7b:c6:8e:91:c4:9b:4b:
5f:08:62:4a:c1:34:d7:44:6f:69:86:2f:a4:2a:a6:00:d0:e7:
23:96:e7:39:45:99:a0:6a:8e:c4:d9:2b:60:61:c6:1c:5d:1e:
3b:0a:f0:35:9e:08:c4:9b:a0:1b:c0:85:b4:f2:e1:97:01:39:
57:bd:ca:9f:d6:05:40:ee:7c:54:2e:a2:98:92:99:6a:04:72:
a3:1b:ed:17:c6:a5:1f:a5:15:fc:b8:bc:64:fd:2f:80:64:25:
f4:c8:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:03:47 2026 by rpki-client