Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: PBlcj9EMq0BOsztcmfVkoxAkbMyYzFOw0vDKv2ppYqY=
Subject key identifier: 0F:32:3C:D7:14:1A:07:DA:4F:0E:A8:76:C8:4D:64:75:6A:56:39:D2
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 01A0D8722BC978DDE680F7B3C8D12405FABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 15F4
Signing time: Fri 25 Sep 2026 12:02:36 +0000
Manifest this update: Fri 25 Sep 2026 12:02:36 +0000
Manifest next update: Sat 26 Sep 2026 12:02:36 +0000
Files and hashes: 1: 14VladBUxqaqZ-NNE8ER_uSwfHc.roa (hash: SrYCafFoP0SWSKgNsDYvBDk2UieF1/jSU5NqyuCubYM=)
2: otTbYOYedxsaU18vozv7H0qaULY.roa (hash: 0z94Z3PKNajsqszNsKqEJ/uzjuVZiI+UT7U7HnELbf8=)
3: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: 3U8N9BcgMoefFJVGkjtZ5cjc0TEe61lAI1HSNvvJ00E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:2b:c9:78:dd:e6:80:f7:b3:c8:d1:24:05:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Sep 25 12:02:36 2026 GMT
Not After : Sep 26 12:02:36 2026 GMT
Subject: CN=0f323cd7141a07da4f0ea876c84d64756a5639d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:4e:19:86:2c:99:40:09:9f:33:c6:90:93:
ee:06:45:ba:8e:06:d6:ac:89:cd:86:c7:74:0b:d4:
d2:96:cc:3e:a3:db:70:6f:9a:5c:86:15:d7:96:b4:
74:d5:77:90:3d:46:1a:be:c6:66:1d:cd:64:44:4d:
a1:79:5e:fd:db:c0:65:31:96:05:21:c7:bc:74:22:
be:64:3a:7e:a8:0f:e2:1d:0a:0a:58:67:30:d3:4a:
70:07:e6:46:35:db:13:a1:9e:f7:04:2c:8d:71:ee:
6d:86:a7:4c:99:98:3e:54:45:80:9a:51:eb:0c:6e:
84:c4:bb:c7:d6:90:08:bf:e2:b6:21:ea:a3:91:3a:
81:5c:e6:c4:ca:ce:ae:53:3d:6f:9b:8d:89:c8:23:
ff:e2:57:8f:d1:79:56:80:a1:e4:b6:7f:d6:db:05:
7d:22:1e:06:42:ea:92:7c:ec:26:d3:57:45:2e:2b:
46:6f:f0:e0:dc:f2:27:c2:e8:cb:c9:a8:e5:53:66:
8b:d2:31:11:8b:10:55:53:25:b8:7b:1a:49:8a:9c:
8d:3e:95:b1:b8:de:91:b8:37:66:e0:9b:b1:7a:1f:
79:92:ca:ec:02:ae:85:e0:fd:b5:08:27:67:72:30:
b3:b8:20:2a:56:1f:82:29:fc:94:bb:a7:55:f7:94:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:3C:D7:14:1A:07:DA:4F:0E:A8:76:C8:4D:64:75:6A:56:39:D2
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e1:42:cc:2b:fd:9c:01:88:fa:f0:76:5c:01:ce:98:53:80:
a4:19:dd:f8:1c:9c:06:c7:40:cc:98:0d:c6:22:51:74:6a:c4:
6d:80:93:bb:71:d2:e6:83:f3:b1:e5:2c:8b:26:1f:0e:91:d1:
85:99:c5:e6:8f:12:d5:4b:8a:23:0f:04:bd:6b:4d:5a:ec:bc:
d4:b0:e7:c9:67:9e:c8:1c:9d:13:e3:7d:a5:55:9c:1b:0f:73:
89:f4:94:6c:9f:c2:95:1d:72:a1:39:cc:f2:e1:41:2a:a9:18:
dd:92:3d:42:03:06:82:7a:00:be:fa:74:3d:2a:5b:91:25:22:
4a:ec:23:e4:a9:61:e9:53:0a:9c:38:f4:1f:3c:e5:66:8b:ec:
e1:45:b6:9e:84:64:03:74:70:86:1a:35:1d:d9:77:22:5d:25:
15:f4:e6:c7:0a:19:73:ff:1e:11:89:23:bf:04:cf:2d:2d:0d:
b5:fd:24:06:29:d7:43:3c:a0:8f:8c:ce:20:8c:9d:07:2c:3a:
44:ef:d8:f5:2a:cd:f8:56:33:42:1d:4f:c2:5c:2a:0c:25:ff:
74:b2:bc:16:86:62:7a:57:0c:e9:39:23:82:7b:b5:bd:c1:28:
51:db:1b:3d:fb:47:e3:88:d7:69:56:ec:3e:b5:72:0e:59:2d:
6c:c7:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:46:49 2026 by rpki-client