Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: eFCkMC5/WpatxxM57fwrKIUAB4M5yfeNWVDqGMWiiXA=
Subject key identifier: 84:B9:6B:61:A8:FA:27:D2:28:2D:E0:AD:84:9D:0A:46:2E:8D:28:9D
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019D27A91F34EC3C2EE674B669BE96E50994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 01:01:27 +0000
Manifest this update: Thu 26 Mar 2026 01:01:27 +0000
Manifest next update: Fri 27 Mar 2026 01:01:27 +0000
Files and hashes: 1: P2z60TT5kqB-d0NQ2XA4fLTFBz0.roa (hash: H2tzNdLvq80tMnAzPWbwLl8MIdAmcLNud7Ng3jnGJBE=)
2: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (hash: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: VKaggv494bntfzET+p4/X5DND+GMNfLBow8jtG5Y9dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1f:34:ec:3c:2e:e6:74:b6:69:be:96:e5:09:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Mar 26 01:01:27 2026 GMT
Not After : Mar 27 01:01:27 2026 GMT
Subject: CN=84b96b61a8fa27d2282de0ad849d0a462e8d289d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:7d:97:00:d4:f8:a4:17:46:43:e4:9e:52:
09:cd:41:33:3a:5d:9f:f7:6d:f3:81:3b:bb:04:91:
de:65:61:f9:94:fa:fd:1c:94:fc:d6:d6:79:53:22:
10:ce:96:6b:43:28:d9:02:68:d6:33:e0:e5:1a:85:
d3:08:a0:71:bd:f9:1a:00:b0:c9:a6:cf:8e:9d:c8:
3d:69:89:3a:a3:4f:5b:ff:36:e1:47:c9:77:e1:c1:
35:50:0d:e6:2c:c2:8a:30:43:67:e8:ef:30:4f:63:
00:39:f5:b5:b6:c7:f4:6c:0e:32:84:5d:7e:eb:e0:
5d:0f:75:d4:26:9f:b1:bc:1b:b5:21:00:b7:eb:53:
27:25:fb:41:39:4d:7c:3d:29:8b:6e:29:a3:5d:37:
ee:f4:b6:05:ea:c8:a1:37:5b:bc:10:0b:95:59:06:
4d:44:5e:d3:49:86:d7:fa:e8:41:1c:fe:56:68:47:
f1:2f:98:97:56:dd:b7:df:8e:35:82:c1:ea:74:b5:
e4:e3:72:8b:7e:db:56:ee:b2:91:ec:19:92:85:d5:
2b:2f:a7:a4:d1:4b:27:f7:c9:c8:1b:cb:1b:86:0c:
81:a4:67:d8:99:2a:11:9a:ff:25:42:c2:18:68:c6:
ca:0b:f6:69:43:32:51:45:e9:98:40:4a:66:48:45:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:6B:61:A8:FA:27:D2:28:2D:E0:AD:84:9D:0A:46:2E:8D:28:9D
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:67:aa:7a:91:06:50:2f:f0:48:2c:b7:3c:3d:cb:e9:b6:ad:
59:c4:a8:a0:e3:02:86:40:04:a8:08:39:96:5b:47:7b:ea:ea:
27:ed:25:fa:36:19:c6:4c:2c:9d:c1:67:c8:37:0d:fe:a8:14:
9a:c2:76:f5:d3:a9:f5:09:90:5b:8a:9e:dd:c2:7b:49:56:5e:
89:1a:35:8c:cb:59:6a:f2:ca:99:ce:ea:a4:68:aa:31:b3:0a:
10:30:c5:91:7d:16:a1:7a:7d:00:16:ae:a2:10:32:7e:3b:41:
5f:b6:0c:df:6d:d3:1e:d7:b0:65:14:bf:e7:47:bc:1c:c4:6d:
36:e5:4c:d5:97:cc:04:63:74:83:97:6c:0f:81:4b:ee:82:8a:
66:65:d6:3d:6e:32:7b:66:da:12:f1:ed:af:f3:ba:bd:af:13:
34:0d:19:fc:49:9b:3c:f7:b9:33:6c:bd:64:87:2f:32:6e:e1:
2f:45:22:67:06:9b:8a:2f:a6:b9:d2:b7:9a:01:09:56:f8:28:
41:d7:f1:bc:1e:12:23:8a:b9:90:10:49:55:f6:3e:f3:18:e7:
f7:d1:7c:e9:dd:9f:74:d7:ba:ce:68:9d:8f:bc:60:ef:1a:52:
bf:34:1f:2c:c9:f4:02:66:9c:99:12:56:2d:35:57:e6:c6:57:
d7:14:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:01 2026 by rpki-client