Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: MyCgUoS7MaI1oc6tKx56qfbpazs0gX3AeYvM0t2caPQ=
Subject key identifier: B6:80:58:EE:90:03:12:69:33:43:4C:C0:81:7E:39:70:AF:11:83:8F
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 019D2AA9BD45CB028BE83F19FA0D5DB6942F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 018B
Signing time: Thu 26 Mar 2026 15:01:00 +0000
Manifest this update: Thu 26 Mar 2026 15:01:00 +0000
Manifest next update: Fri 27 Mar 2026 15:01:00 +0000
Files and hashes: 1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: sq2ULkwtFUvSuECt1Q5MmvPLS85/+9XmBPqCkKGefCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:bd:45:cb:02:8b:e8:3f:19:fa:0d:5d:b6:94:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Mar 26 15:01:00 2026 GMT
Not After : Mar 27 15:01:00 2026 GMT
Subject: CN=b68058ee9003126933434cc0817e3970af11838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:b0:f4:45:54:41:34:cd:e4:bd:7d:a7:fe:
a6:2f:1b:27:89:85:0b:bf:a1:f1:ea:88:78:6d:f6:
7b:8b:bf:2c:a7:e9:8a:5d:7b:bd:66:71:d8:3f:aa:
e8:0e:5b:86:d8:84:1a:b0:eb:d4:52:8a:8b:f3:8b:
81:c4:21:c5:70:54:69:0d:eb:e8:25:e2:4e:12:b9:
5e:4a:a6:c8:6c:c3:d2:34:77:06:96:45:92:89:f4:
5b:b0:ba:1a:5b:ef:a3:57:dc:6f:82:6e:10:09:80:
c0:b7:0c:f6:39:4c:f1:4a:67:30:ed:97:e2:5d:a0:
10:e3:7e:e9:0b:a9:98:81:e1:b3:a7:63:e9:dc:80:
85:e6:ee:92:41:d3:60:c6:0a:e3:c1:01:dc:29:30:
bc:58:89:ce:4c:04:6f:55:3e:e1:21:68:97:26:f9:
96:4f:2f:d7:46:1c:2b:47:fa:41:68:22:40:a1:ac:
0c:b2:f8:1a:ad:44:a3:10:4d:48:a1:ad:71:d3:6b:
56:29:06:8f:6d:f1:04:65:1f:d9:60:5d:56:d7:29:
93:ea:60:57:1f:f3:12:dd:88:d3:d1:76:99:01:b3:
9d:54:ab:bb:25:92:59:7e:a8:02:7f:6f:11:be:77:
7c:53:a4:cf:b0:1a:72:60:b9:cf:cc:39:43:98:1d:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:58:EE:90:03:12:69:33:43:4C:C0:81:7E:39:70:AF:11:83:8F
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:81:54:d6:13:01:8f:bd:9d:e2:c4:95:4e:37:89:ad:3a:ac:
be:f5:bd:43:57:98:5d:15:b3:be:3f:55:8e:1c:6f:63:0c:a1:
c9:f7:e5:39:08:8c:f0:38:da:a7:b8:76:cb:90:b7:12:47:a5:
47:d6:36:3c:11:ab:1c:50:c4:78:d8:a7:86:f6:08:8b:d7:0c:
3a:89:92:c1:94:01:d5:ac:24:01:a7:f4:e4:91:f9:4e:b0:02:
73:ef:11:8c:35:f6:7e:3a:8f:ac:30:0f:d6:a3:0e:0e:50:4b:
04:90:24:75:73:4b:7c:39:9e:84:2b:c3:89:cd:60:84:29:2b:
27:78:d3:8d:c2:23:9d:be:9c:39:9b:cd:75:79:61:23:fa:41:
80:33:b2:1c:df:fe:d3:1d:06:2b:b7:19:bf:ae:6c:56:1b:04:
c9:cf:77:26:d6:0f:7a:08:34:ac:de:12:4e:e8:1c:0c:5b:4e:
bb:a5:0c:39:17:5d:98:bb:74:a6:37:6f:5b:78:15:d2:e4:5e:
73:f7:24:3c:3a:16:3a:da:65:c1:b1:ff:9a:e1:6f:d8:d3:1e:
06:b5:7d:02:d5:40:88:cc:02:60:2d:9c:93:ae:48:14:4e:23:
1b:43:6a:ad:7f:5c:f6:eb:3b:6c:28:eb:66:d4:d2:64:39:cd:
75:25:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:11 2026 by rpki-client