Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: NRVnWaPnZlUQgTLlFAReAh+t04XmgZGM9VCVpN4fqsE=
Subject key identifier: F8:6B:A2:D0:20:C1:C0:83:CA:48:DC:4F:EC:95:F3:EB:24:50:82:FD
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 019D273AEEBD0ED4E61DA5154E95006A39EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: o1FIboSQp4CIWKPx+Z0t+Qw7fOjKFHotHbPVsPK4Dg8=)
2: owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa (hash: 9TpRwQpuHtfrhW+ZMSGdpj4DGSlbRkJ1Rg7NyhKguk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ee:bd:0e:d4:e6:1d:a5:15:4e:95:00:6a:39:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=f86ba2d020c1c083ca48dc4fec95f3eb245082fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:d7:da:33:6d:53:33:8a:30:42:79:9e:44:
2c:2c:11:12:53:ab:37:5f:64:26:1d:43:f6:d9:5a:
f9:7c:35:83:b2:f0:ab:fb:c0:23:a1:43:5c:58:8c:
eb:09:00:8e:17:14:0c:90:96:6f:f3:2f:9b:ad:df:
2c:b0:1c:c4:2a:97:3d:93:ba:46:05:de:bc:15:32:
77:6a:0e:b7:21:8a:34:f8:c3:30:12:93:a3:28:5d:
16:2f:58:b0:00:00:c2:98:b0:36:70:64:06:76:41:
8b:f1:3b:8c:64:1e:44:4d:f7:22:8c:43:0a:fe:72:
ff:d7:b6:e6:5f:aa:ad:26:32:9a:d5:30:44:63:bd:
fe:90:8e:d7:72:9c:cc:7c:bf:33:df:86:16:1a:db:
f0:59:28:ed:31:bb:43:1f:72:44:b2:0b:e8:71:83:
ac:04:97:ff:36:c4:78:a1:2b:ed:64:7c:5b:38:e1:
7b:e3:7c:ba:64:41:18:53:2a:aa:bb:87:54:f2:6d:
59:56:14:4c:74:ce:e7:31:3f:f5:b3:ca:f4:24:2f:
35:76:db:3f:1c:cf:6f:43:1b:e2:e1:8f:5b:71:27:
ad:cd:39:9d:4d:c5:53:33:dc:c3:2d:60:02:cb:72:
8f:08:1d:f3:30:ac:45:b9:67:84:35:a2:f9:f9:71:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:A2:D0:20:C1:C0:83:CA:48:DC:4F:EC:95:F3:EB:24:50:82:FD
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bb:59:18:ea:c9:94:eb:f6:f5:27:83:0e:6d:82:cf:b1:ca:
8d:1e:36:7b:04:66:99:95:0a:e6:78:5b:37:b3:25:52:15:01:
a5:79:b6:ac:de:9a:4c:52:f8:67:7b:f5:b1:3a:dd:1c:91:16:
83:c6:7c:f5:44:d2:1c:92:58:ba:3a:da:95:c8:58:d0:bc:3f:
a6:87:49:54:b8:c4:ba:44:a2:4a:6b:61:55:8d:11:70:a6:5f:
f3:b5:04:06:60:c2:3d:ff:ce:8d:ab:5d:ce:6b:00:be:60:83:
a3:94:61:c7:5f:4d:bc:e6:86:57:f0:b0:7c:c0:99:05:d0:52:
06:30:c3:90:6d:1b:e2:6b:7f:f0:1d:c8:c9:f7:f8:f0:fd:ba:
1d:e9:ab:09:3d:79:13:39:d9:44:38:72:e5:99:cb:dd:87:68:
d2:1a:00:f6:1f:da:f0:5a:2a:d2:76:e2:d2:e1:de:81:4f:a9:
71:29:9b:b6:b8:dc:cd:cc:69:3f:27:fe:0e:0d:ef:b6:ff:22:
48:42:cf:ff:53:30:09:09:ba:30:6b:e1:b1:5f:43:e3:77:a1:
58:e3:7b:17:99:d0:b2:9e:5b:7f:07:ff:b0:eb:43:fe:09:d2:
ad:41:7e:f2:b8:fe:61:b0:be:8c:b8:96:4d:d1:07:57:7e:8c:
6c:fa:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:48 2026 by rpki-client