Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: UKVm0aUlrNpvdR46zc8AbSqN7GyLNmPuy0WDMGxs/24=
Subject key identifier: 84:D2:F3:C9:EE:04:85:C2:95:92:18:C9:22:FC:63:6B:6B:86:6B:AE
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 01A11C3EB0EC2E7A392370AE725B36F99726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 1A9A
Signing time: Thu 08 Oct 2026 16:00:32 +0000
Manifest this update: Thu 08 Oct 2026 16:00:32 +0000
Manifest next update: Fri 09 Oct 2026 16:00:32 +0000
Files and hashes: 1: JWU_Eybq_voKppgJUuEJOKd0rVU.roa (hash: njhB/xlo+7JtkXiroETjNYgdxqkXiy6zH7cizTgQk+0=)
2: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (hash: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: BO37z/3F7T/5JfYwYHhbMaiozX+KOoc4JHtcYRWQJSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:b0:ec:2e:7a:39:23:70:ae:72:5b:36:f9:97:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Oct 8 16:00:32 2026 GMT
Not After : Oct 9 16:00:32 2026 GMT
Subject: CN=84d2f3c9ee0485c2959218c922fc636b6b866bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:10:c6:2e:1d:c0:d8:fe:7a:49:a9:6e:44:
43:b6:65:41:68:89:a2:be:95:9d:39:9b:60:43:64:
c2:90:71:9b:25:52:0d:26:19:ff:e3:12:0f:21:e3:
27:4b:29:b1:28:54:51:7f:a4:a7:c2:78:81:04:85:
3e:18:70:f5:0c:d0:fd:4d:df:b9:a6:2d:60:c4:bd:
b5:45:e9:8d:27:11:4a:32:52:b4:34:04:13:1e:e4:
89:24:6c:b8:c2:b8:e9:8f:e8:c2:80:61:10:5a:4f:
4f:64:ef:c4:86:50:70:c5:15:07:5d:e9:2b:fa:71:
86:b5:e7:0b:f8:28:da:87:22:4a:72:bf:19:45:60:
23:86:ce:ba:82:20:d7:35:70:f2:12:13:ad:12:ef:
aa:cd:c7:65:78:fa:cb:ee:e3:70:ae:87:28:c2:bc:
9b:d8:a8:e5:7f:32:87:4e:76:f1:4e:41:c0:2f:c8:
8b:f3:65:f3:4f:84:e5:1f:fc:72:ed:d4:b1:f5:e3:
fe:b9:cf:40:ed:a2:03:f5:0e:ab:31:15:91:59:96:
b6:e1:8c:b3:c7:78:e4:88:b6:b6:a6:12:40:bb:e8:
08:49:d9:ad:95:25:b9:af:38:31:3d:97:bb:26:aa:
e7:68:7d:17:8b:31:98:d0:91:44:a2:37:39:62:39:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:F3:C9:EE:04:85:C2:95:92:18:C9:22:FC:63:6B:6B:86:6B:AE
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6b:74:76:00:49:de:c5:80:c7:9d:bd:ec:31:4d:29:6b:c8:
42:5f:89:00:7d:b4:9e:28:14:d3:26:c8:a4:0f:05:bb:20:1f:
3f:24:0d:a2:2a:20:b5:2c:ad:b5:ba:77:8c:ab:80:c7:4d:5d:
b9:a9:ca:e1:d3:5e:63:a6:19:5b:dd:62:f8:74:43:ed:78:a4:
28:71:47:7e:2d:1e:5c:a6:bd:05:fc:2a:bb:9a:f8:d3:f0:28:
10:39:8a:b7:ee:07:1c:a8:32:fd:39:be:75:34:e6:90:2d:db:
d8:8c:f3:03:3c:89:d7:82:1d:31:9c:e7:16:22:22:b3:8b:57:
a7:e6:15:f6:2a:e3:f3:7c:4b:b5:b9:fd:2e:45:20:0d:60:f2:
af:b3:ee:7c:59:4b:29:70:ac:d7:41:d8:3b:74:30:23:cf:02:
14:b7:7c:f8:dd:c3:28:47:05:99:01:03:ca:4b:f8:0a:16:3d:
27:30:05:6a:2a:59:3f:12:ed:9a:62:30:79:2d:c6:c9:9d:a4:
ed:2e:6f:ea:a2:af:4c:de:1b:02:86:b7:0c:ce:2f:8f:89:07:
47:d7:b3:cc:58:1b:8c:45:19:e7:7f:8e:fe:2b:18:9f:94:19:
89:84:b1:63:b3:77:00:df:a8:b9:4a:30:8f:e6:ea:00:ef:a8:
53:66:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:41:46 2026 by rpki-client