Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: 6CDuN8OSxmR1f15GH2H5luXNbBsMd2C+aCcYKPXcz/U=
Subject key identifier: 13:02:A3:7E:BF:E4:D4:EA:9F:BE:ED:95:0A:BB:29:98:E5:08:76:41
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 019D284DE0AE8CB7A05F52236EB9492637FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: OflZg6TFsEKRZGwqwFjxO_4uzgA.roa (hash: 9iTUJuItwJxSzT9lJ39rRuHUjdkumJ61tcp/ZIi1CnM=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: 4NUG99rD0n7uMYCOvkxKYTuBI3rJmTwCiKRUcmaoMKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e0:ae:8c:b7:a0:5f:52:23:6e:b9:49:26:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=1302a37ebfe4d4ea9fbeed950abb2998e5087641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:ed:21:df:ee:dd:1a:f7:9f:ca:72:b1:04:
bb:cb:78:f3:f6:36:14:5e:ce:96:a3:87:38:c5:30:
20:a8:83:34:6f:2e:a0:93:11:ba:b9:07:68:42:e9:
4a:15:ec:27:d0:b3:f2:92:9d:18:1b:9f:4b:7f:95:
f2:ec:28:86:12:3c:04:d2:40:cd:49:d5:35:d7:6b:
5c:01:96:10:ad:e7:ba:df:6d:59:ae:71:b6:aa:c2:
58:bf:98:fa:cb:32:03:fc:b2:63:97:00:9a:d9:ee:
b5:f7:69:af:8f:3f:f6:db:1f:8d:cf:27:43:e4:c1:
f6:9e:6a:f2:9b:75:c5:4f:6c:10:87:c0:5f:37:81:
66:5e:46:b9:dd:d2:c8:93:a4:14:d3:43:cf:08:ff:
94:42:0d:8e:95:7e:8d:ef:5d:aa:aa:39:df:48:d4:
03:3b:56:d3:85:af:f4:7d:7c:3b:6f:ed:4b:1f:12:
ab:27:f9:3d:c3:f5:31:24:cf:51:86:2b:6b:9d:62:
52:8f:79:ef:d3:b2:e6:9d:8c:94:45:40:c3:2f:f0:
17:20:94:3e:fd:13:9b:cc:c8:89:9f:7f:37:c9:0c:
db:bf:9a:7e:74:07:04:77:e7:10:11:75:07:43:80:
81:da:27:ae:ed:17:31:a4:22:17:6a:2b:17:0f:7e:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:02:A3:7E:BF:E4:D4:EA:9F:BE:ED:95:0A:BB:29:98:E5:08:76:41
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:89:04:cd:ff:2a:3c:ad:7c:b8:1d:63:72:5d:92:62:21:2f:
fe:fd:b2:15:a5:ee:a9:46:16:ab:ee:ef:4b:12:5e:56:2f:76:
db:39:98:f5:cc:94:53:5b:04:a6:5b:c8:2e:1f:b4:e3:5a:73:
2f:c9:f8:4e:33:ef:ff:78:f6:84:28:c0:8a:07:14:35:f9:1e:
e6:6f:43:c1:26:e3:b4:6f:fe:7e:e6:27:7c:6e:b1:2d:a3:85:
0b:82:e9:60:29:b8:bf:93:f2:10:8f:2e:73:d7:f3:98:c3:5b:
c8:ea:43:04:8e:ed:30:9b:32:6e:3a:9b:22:ea:a0:12:61:80:
85:ad:54:1e:6f:73:cc:86:a7:2d:5b:bf:79:43:44:2b:b8:1e:
71:35:97:9e:9b:d4:44:5c:0b:00:fc:09:c9:3f:23:66:95:f7:
4b:0a:8d:78:7e:83:97:ec:95:40:7f:dc:98:42:86:6e:51:ba:
7f:f7:42:46:b2:7b:48:03:2b:cc:d5:e5:7d:90:f5:ed:b9:43:
79:af:cb:08:7c:97:c7:6c:e9:07:b2:35:12:c1:db:9e:d4:58:
e0:5e:6e:b5:2e:fe:b9:ef:13:42:e8:10:cc:91:35:67:d9:40:
9c:d7:29:e3:6a:63:7d:23:98:54:74:25:9c:b7:c9:43:71:83:
8c:c7:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:10 2026 by rpki-client