Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: hYiddlQFOMGSPYbDtU4Ty3Qzs5SUZVCZmENJXRgD9v8=
Subject key identifier: 32:09:0F:A6:74:41:F4:F8:50:CC:D9:59:50:40:60:24:07:D0:5E:70
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 019E1D59E25A455169B40136E5CBD856BDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 148A
Signing time: Tue 12 May 2026 18:01:30 +0000
Manifest this update: Tue 12 May 2026 18:01:30 +0000
Manifest next update: Wed 13 May 2026 18:01:30 +0000
Files and hashes: 1: 14VladBUxqaqZ-NNE8ER_uSwfHc.roa (hash: SrYCafFoP0SWSKgNsDYvBDk2UieF1/jSU5NqyuCubYM=)
2: otTbYOYedxsaU18vozv7H0qaULY.roa (hash: 0z94Z3PKNajsqszNsKqEJ/uzjuVZiI+UT7U7HnELbf8=)
3: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: b2Fh/ySQ+CxUbmKLPVyxDzFDmG5rAWS0XkVq2mUcJGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:e2:5a:45:51:69:b4:01:36:e5:cb:d8:56:bd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: May 12 18:01:30 2026 GMT
Not After : May 13 18:01:30 2026 GMT
Subject: CN=32090fa67441f4f850ccd9595040602407d05e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:30:19:b2:ef:5d:2a:ce:4e:a3:69:57:cb:
6d:05:2e:da:ca:2f:29:af:5d:02:d2:a2:1d:be:a0:
2e:31:31:25:4d:f7:22:2a:c0:06:93:af:5a:c2:c1:
6f:46:31:ea:39:73:9d:7a:ec:8d:c4:97:95:39:76:
90:b3:7b:15:cc:f4:52:c2:26:26:17:90:aa:36:92:
f1:e4:8d:23:ab:f8:90:bb:c9:19:01:94:6c:34:72:
7a:30:f5:b8:05:1c:1e:24:39:65:ad:b4:7e:12:d7:
3e:6a:21:14:ba:23:f8:9c:c8:eb:1c:be:78:21:fd:
37:97:d2:4f:de:c9:27:0f:73:41:77:ec:da:d6:3f:
8d:b5:b9:c0:9f:01:e8:fb:a2:e8:5c:d7:4f:f4:82:
a5:79:ac:4b:65:b5:96:f3:61:10:d5:c0:a0:c5:14:
60:75:fb:29:d1:63:8c:39:ab:39:83:c8:4e:0d:62:
a3:81:40:a9:de:af:6c:54:3d:39:50:9c:af:b0:fe:
84:8f:12:12:1d:86:e5:56:49:21:02:57:d7:21:6f:
a8:d0:b7:bb:d1:fb:31:c6:82:dc:55:50:cc:4d:4b:
26:d4:07:11:c9:f8:91:74:9a:5a:5b:b4:f5:79:3e:
e7:f9:09:65:d7:f3:d1:cc:f5:97:07:f0:d3:51:57:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:0F:A6:74:41:F4:F8:50:CC:D9:59:50:40:60:24:07:D0:5E:70
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:64:82:a0:6a:75:9e:22:22:66:14:db:4b:6a:40:8a:6a:a2:
64:e6:f2:c1:ff:2d:d4:f2:b1:ac:2a:56:e8:89:b3:2c:d2:f2:
92:3c:b8:d5:da:79:ff:02:54:25:dd:d5:db:7a:7e:60:22:f0:
cf:ff:79:41:3c:5e:03:31:19:16:41:b9:10:9d:4c:5f:48:27:
98:15:36:3e:b5:7b:4f:16:ea:55:80:ea:89:3f:12:e6:2d:52:
a5:96:02:43:2f:93:06:3f:ab:11:07:c8:58:95:50:2a:86:5a:
9c:e1:db:07:7c:f4:e2:78:5d:05:5e:28:80:ae:70:ee:f0:6a:
0b:b3:16:17:b8:07:c3:ea:d5:d2:e0:e8:4a:5f:38:f1:1b:ca:
87:a1:d4:cc:11:39:16:fe:91:0f:f1:a1:71:54:bb:83:00:d4:
68:72:81:3d:20:66:89:b6:48:00:64:4c:0e:59:67:68:4b:3b:
2c:78:d1:6b:9d:37:ca:4a:8d:85:ca:51:89:66:68:b4:0d:cf:
2e:63:c9:11:3f:53:d6:fc:e9:70:8c:6e:2d:ae:ed:ed:30:ab:
64:02:b6:5d:8e:6d:a5:6f:63:5b:f5:7b:55:ed:1c:cc:02:d3:
78:07:5e:09:cb:1f:b1:00:c1:fb:f8:91:a6:79:0d:03:11:84:
11:02:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:36 2026 by rpki-client