Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: NgdnMCZygkFqyFPbiS8OwV49+bPqq68pF8Z0lSkaSUI=
Subject key identifier: 7F:6A:D1:D6:64:64:98:D7:43:1D:AB:BB:A8:B9:F2:40:88:81:0B:0A
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019D27E049FB80FF3CDDAAD8DDCD7EEA5E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: g8rzwSVqLcQpv4+6xfFFr1VNxkidyC8ATxQA5WHQNsQ=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:49:fb:80:ff:3c:dd:aa:d8:dd:cd:7e:ea:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=7f6ad1d6646498d7431dabbba8b9f24088810b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:fb:21:4a:91:68:43:8c:9c:41:b9:26:5a:
84:03:21:e4:c6:1b:4b:4b:dd:3a:6f:4d:44:2e:f2:
31:2c:28:fe:b3:03:37:91:b2:6e:a7:bd:53:bf:72:
77:97:aa:81:e7:14:c3:4f:72:08:39:46:bb:13:92:
c0:21:ba:58:7e:a4:5d:82:11:5c:ca:50:4a:f9:05:
cf:7f:bf:c1:96:e2:a2:c1:d7:07:52:ad:02:8b:62:
a4:ea:2d:5a:9b:1e:61:f1:5c:08:de:32:f6:4f:ec:
49:51:76:82:a8:36:44:d6:a7:16:4d:c0:e7:0a:0a:
bd:cb:1b:51:78:d0:77:e1:0c:00:32:48:8c:a6:fd:
a9:69:4e:f0:41:d9:8f:04:38:90:a0:36:aa:96:c0:
1d:c2:16:92:27:7a:6b:1c:c3:53:1e:72:31:77:c8:
76:f1:65:94:47:01:c6:2d:2e:f0:25:c1:83:2b:d4:
5f:19:97:87:a7:96:70:4d:4e:d0:6b:89:fa:90:b9:
71:f5:1c:8c:90:b2:41:e7:77:6c:ca:87:97:d9:6c:
f9:9b:ff:a7:77:a3:7e:32:35:51:34:b7:8a:a8:6a:
07:b5:3c:5c:0a:7b:3f:7c:02:31:9a:2b:33:f8:36:
98:b8:14:7c:ee:79:4e:f0:7e:d5:ca:50:97:4b:5c:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:D1:D6:64:64:98:D7:43:1D:AB:BB:A8:B9:F2:40:88:81:0B:0A
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fb:18:03:e0:f0:6e:c5:f3:96:1a:f4:0e:9f:d8:d1:a7:42:
00:b9:01:a0:47:1c:65:26:ab:ad:8d:e5:71:e0:ae:35:dd:21:
39:1f:6d:d8:08:2e:39:25:33:c7:72:67:ac:84:8c:ec:1a:df:
a2:46:55:04:ad:2d:a7:7a:be:77:62:30:d8:07:70:a3:71:83:
0b:8a:06:27:0d:2b:f2:0e:33:47:e6:71:b6:07:a2:29:d7:a4:
9f:4d:29:62:fb:80:98:63:13:a8:f4:05:bf:b6:d0:34:e6:60:
a1:1f:9a:1f:34:ae:58:c9:8a:4d:c3:9f:37:c4:42:e0:ef:f5:
8a:04:72:72:d2:e2:5f:b1:0e:19:ef:61:cf:07:73:83:56:e6:
aa:b3:65:6f:14:37:06:85:4a:2d:d9:cb:93:8f:5f:9d:1c:72:
6a:5b:57:e9:e0:2a:ab:83:a5:65:93:01:04:ae:47:9e:35:16:
0a:fe:cb:d1:97:43:0e:09:70:49:3e:c8:68:de:c2:4a:e6:06:
0f:6f:65:73:87:3b:ef:2a:d1:4f:31:f1:c9:75:ef:de:40:e4:
e1:2d:71:52:b7:f4:07:e9:4d:2b:39:ac:45:34:3e:0d:be:c7:
70:a9:02:85:d0:13:1f:7e:6b:a6:6e:20:9f:ab:25:ae:b2:72:
17:f0:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:24:31 2026 by rpki-client