Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: s16facNR4HeeEssMN5ieQ2i3LsCc5ZpSS9PXlHlurdg=
Subject key identifier: 26:E0:16:CA:22:A3:3D:4E:EA:7B:A3:F2:D9:8B:F7:59:06:04:CA:76
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 019D25F0EA81B84AD62B4BC28C1DDA5E5FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 0862
Signing time: Wed 25 Mar 2026 17:00:38 +0000
Manifest this update: Wed 25 Mar 2026 17:00:38 +0000
Manifest next update: Thu 26 Mar 2026 17:00:38 +0000
Files and hashes: 1: PjGZVG-uOaDVHbHbJIUYe0z8jmg.roa (hash: 6MncPoLprurVYfiY9ZBImtV4SOtSMwf+QcTHZ6cdyhk=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: stA2jCElp4RMo6nQTtq5fWXgAO4bDHWVPQ229LZBumk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ea:81:b8:4a:d6:2b:4b:c2:8c:1d:da:5e:5f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Mar 25 17:00:38 2026 GMT
Not After : Mar 26 17:00:38 2026 GMT
Subject: CN=26e016ca22a33d4eea7ba3f2d98bf7590604ca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:f9:41:c3:c5:4c:af:d2:2a:d0:27:95:75:
05:1a:86:e1:22:8f:3d:d4:f9:e0:7e:9e:ea:ad:3c:
19:91:63:30:bd:75:91:2b:78:48:b4:c5:64:04:5f:
66:df:09:b4:64:ac:dc:88:a1:3b:35:c9:06:e8:1f:
29:85:84:a5:34:54:08:b1:63:7d:e7:ac:b9:91:97:
ac:fa:43:15:01:6c:df:11:11:d7:1c:10:ac:e4:27:
f8:01:9c:9b:9c:0c:67:cd:5c:11:a6:c6:a9:79:8c:
64:46:47:30:5e:d8:06:c7:5e:3d:27:5f:d3:f0:75:
78:a6:24:80:7f:93:61:25:78:41:ac:14:10:16:e7:
0c:47:ee:4b:4b:94:62:8c:3f:ad:f0:70:e9:1c:48:
6f:2c:fc:6b:7a:de:ea:d8:89:27:97:30:fc:2d:88:
2f:e7:5e:1c:52:f0:e7:74:99:da:fb:4c:b3:02:5c:
6d:bf:14:77:22:f6:19:b3:88:4e:84:b3:d3:0c:f4:
1d:97:10:91:a0:ef:63:9c:0a:ef:10:29:d8:11:a1:
47:9c:bc:fd:64:0f:56:c2:bb:38:35:5b:fd:83:41:
00:87:c7:cf:8a:ab:0e:ef:5b:45:b8:a0:76:5f:5e:
24:09:8b:e4:35:0c:ca:4b:1e:30:05:9e:41:df:89:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:16:CA:22:A3:3D:4E:EA:7B:A3:F2:D9:8B:F7:59:06:04:CA:76
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:62:97:a3:75:de:a9:ce:b3:a1:eb:e1:ee:b3:1e:51:88:39:
c7:6d:94:3e:b2:59:8d:4d:46:c2:cd:b1:ea:67:d8:f7:a4:c3:
5e:b6:87:24:1c:65:82:d1:7e:49:6a:13:75:c8:b7:b6:08:db:
b6:8b:9e:f4:ac:34:bc:3b:4d:18:48:57:51:77:b8:9f:ab:42:
04:6d:cd:4e:97:18:46:7b:80:a0:08:43:17:62:27:cc:9d:70:
07:62:30:af:9e:88:5c:7d:02:a5:cc:d4:2f:c6:f1:46:37:fa:
85:d4:64:f0:be:f3:c6:c0:ec:92:5b:36:e8:c7:d1:91:44:6f:
73:70:0c:82:cf:b6:73:1a:b5:57:58:80:9b:06:eb:e6:05:2d:
d1:94:a6:41:ff:8d:7b:ea:8f:5c:d8:80:18:3a:a9:98:da:81:
0b:f5:f9:a7:71:9f:83:42:05:be:f7:21:9e:79:f1:1c:04:fd:
a7:ae:d2:ec:f1:7f:d6:fe:df:a7:00:3d:b9:03:9c:75:d0:64:
73:c6:f6:c1:a1:e8:51:e0:57:0f:76:bd:f1:9b:da:e7:d9:0c:
ce:e1:ec:dd:62:dc:47:6e:fb:07:a0:0a:ef:f4:5b:ce:90:c9:
c2:71:29:f3:0f:ac:92:26:ff:76:29:c4:c9:a6:47:f4:87:f7:
13:66:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:57 2026 by rpki-client