Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: 5uolme9MRId7ijZEr6eV7QBmmW3Sgx5h5OIbi8UPP3k=
Subject key identifier: 3F:45:8C:68:10:BB:A9:7E:72:63:6B:CA:AD:A5:A4:B9:D5:B2:7A:B0
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 019D2816DDE86933F7A560DD64A5E37D808F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 140B
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: 14VladBUxqaqZ-NNE8ER_uSwfHc.roa (hash: SrYCafFoP0SWSKgNsDYvBDk2UieF1/jSU5NqyuCubYM=)
2: otTbYOYedxsaU18vozv7H0qaULY.roa (hash: 0z94Z3PKNajsqszNsKqEJ/uzjuVZiI+UT7U7HnELbf8=)
3: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: Pg/j4qDbtIGnTVvHHn6JAvbsQHQByM/gNigxzCBOWsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:dd:e8:69:33:f7:a5:60:dd:64:a5:e3:7d:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=3f458c6810bba97e72636bcaada5a4b9d5b27ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:ef:06:f4:d9:50:35:60:99:af:07:6c:05:
e5:e5:68:52:0f:05:0d:fe:e2:12:54:c7:e0:ed:65:
ea:53:3d:02:22:c1:30:d9:5e:4b:01:c7:8a:ae:16:
0c:97:59:e8:34:41:d3:d8:f3:6e:9b:82:9e:a4:de:
88:2e:07:8a:2f:69:86:00:ca:08:53:b7:f3:04:9c:
34:a1:14:e1:7d:1c:0e:1c:f4:27:d0:44:54:d2:71:
f0:0e:9e:80:fc:90:4f:18:3f:c2:28:43:e6:19:c0:
2f:b5:ac:3c:c1:72:41:de:38:87:79:26:33:82:ec:
b6:75:8e:78:10:fa:1b:d2:e0:90:81:ca:eb:df:09:
56:e7:a9:7e:c3:47:6a:10:4d:4f:ba:19:09:7c:96:
80:62:70:16:c8:7f:b7:f4:41:df:e3:14:35:f8:cb:
93:59:8f:c6:4a:af:f0:ea:9d:f6:be:20:f1:7f:78:
06:92:a3:14:49:2c:9d:5f:ca:04:17:e2:33:98:f7:
be:90:77:d8:30:4e:43:b8:df:11:e7:30:34:d5:62:
71:e4:69:ea:eb:d4:be:e7:38:15:81:a2:2b:1d:88:
12:4d:f6:f4:ee:44:e7:cd:0b:32:56:b5:8f:b0:44:
77:b0:e8:b6:c5:4b:fd:21:70:70:3d:06:07:40:e4:
e1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:8C:68:10:BB:A9:7E:72:63:6B:CA:AD:A5:A4:B9:D5:B2:7A:B0
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:92:2d:de:b3:26:2d:78:e6:a2:51:2d:48:6a:af:de:6e:3d:
76:2b:3b:e8:df:28:95:77:11:be:7b:69:7b:6b:97:73:97:4f:
87:b8:45:b7:93:91:ec:00:a0:51:0d:a5:34:1e:be:e1:94:29:
ae:10:0d:6e:93:61:f6:64:f3:af:ef:de:a5:aa:30:8e:5c:19:
59:9b:e0:39:f6:d0:8a:1d:13:49:29:1f:af:62:28:fb:11:26:
c3:4f:5e:ce:9f:8f:83:be:0d:34:cb:58:95:9e:37:a8:10:ab:
46:98:e0:86:8f:d5:c4:b1:0d:4a:e6:86:70:a2:e1:ab:be:22:
dc:f6:10:76:1d:f7:cb:1e:85:4a:59:ba:af:21:69:f1:05:41:
dd:0a:ff:b6:a1:9d:b5:33:0c:22:04:bd:5f:10:d5:8e:37:23:
3d:0a:d9:8a:f9:14:29:b5:9b:8c:97:c9:5c:81:a3:5f:2f:60:
a0:b9:d9:62:27:a9:03:ab:a9:f4:6e:68:6c:d4:a9:91:54:96:
37:c7:b5:c9:c4:6c:f1:cf:59:51:36:d6:c4:50:35:ab:5a:a1:
71:2a:a6:f9:38:67:d9:ed:42:c3:e0:c1:5e:e5:a7:e4:0d:92:
48:c0:8d:6d:79:99:ea:2f:66:d7:95:3b:76:ec:dd:de:a3:3c:
e9:78:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:06 2026 by rpki-client