Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: zVn33THYt9QCr+BgeRGxpmj2LWe1wLG8yColTPnLC9c=
Subject key identifier: 4A:4E:21:FC:04:FE:99:7B:A6:19:41:91:93:00:EE:92:D8:FF:8E:EA
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 01A0DCF31FD67EC5859BBDA7E41FC63B1230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0EC4
Signing time: Sat 26 Sep 2026 09:01:55 +0000
Manifest this update: Sat 26 Sep 2026 09:01:55 +0000
Manifest next update: Sun 27 Sep 2026 09:01:55 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: yIFrZC6lGqkTGNUCFNkKh/ct1j4mU/uWGQheWbXlszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f3:1f:d6:7e:c5:85:9b:bd:a7:e4:1f:c6:3b:12:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Sep 26 09:01:55 2026 GMT
Not After : Sep 27 09:01:55 2026 GMT
Subject: CN=4a4e21fc04fe997ba61941919300ee92d8ff8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:09:24:00:b1:c1:35:3c:0c:ec:47:6e:95:
34:4f:e8:80:20:e1:c7:37:dc:c7:05:6a:27:f4:cd:
4c:70:0c:78:4a:b9:14:af:60:21:ca:ac:c1:c0:f9:
03:6a:52:bc:5a:f3:b9:c9:72:eb:be:41:f4:de:15:
aa:da:82:0a:c4:7b:20:7c:2b:84:80:a6:82:7b:a4:
99:df:72:63:f0:01:2a:27:2a:a6:44:6e:ed:a7:db:
2d:fa:84:79:ae:96:17:1b:7b:29:e9:d6:68:98:8f:
bc:9c:99:a3:ea:7a:e7:16:43:00:57:2e:10:66:5b:
59:b0:a1:8a:d3:1f:4a:34:e7:15:c4:e6:29:79:9a:
e9:8e:bf:40:16:07:bb:99:fc:0b:a3:88:50:ba:af:
98:45:06:f2:f0:84:b5:19:17:7c:ee:5f:5c:62:83:
cd:4c:bd:5d:a6:54:e9:a7:2a:a6:3b:33:8e:50:ed:
ae:f4:c7:71:8e:54:b3:93:cb:07:f3:e4:4f:1e:08:
e7:ad:a0:79:9f:88:cc:32:e6:e5:6e:64:67:58:93:
b7:d0:4a:88:3f:18:62:61:ce:7e:ce:d8:6e:81:ad:
7b:bc:3a:fb:cd:28:d4:b2:f6:58:1a:f0:a4:e9:35:
99:f6:6a:f6:d5:21:1a:0d:67:26:6e:f5:02:41:33:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:21:FC:04:FE:99:7B:A6:19:41:91:93:00:EE:92:D8:FF:8E:EA
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c6:b6:20:8c:71:6d:ec:3b:fc:12:bc:ee:da:cb:ce:e1:58:
6d:7c:97:1a:ca:61:7b:25:2f:5b:28:19:8f:b2:d9:c9:67:05:
8e:fd:29:d8:d3:b1:01:cb:18:6d:9b:72:d2:8c:af:e9:18:b0:
97:fa:83:d8:96:14:46:9e:42:ab:3d:ee:84:35:2a:ad:ce:e4:
5a:23:f9:c7:43:17:70:b9:a2:88:b8:8f:81:cd:ff:6e:0b:35:
0a:91:1c:31:87:ec:e1:30:ad:c7:b2:17:92:08:76:63:d4:88:
c6:7a:45:d0:ff:e3:aa:c7:d3:03:3d:e4:56:65:82:f7:56:c6:
81:fe:dd:b6:9c:31:32:dd:3d:4e:ff:6f:ca:43:a7:f5:07:59:
1e:4e:2c:7b:e3:0f:cb:4c:6d:64:df:9e:fe:0f:4f:d1:c4:0a:
de:a8:bd:74:c4:7e:e7:48:8c:35:3b:24:b1:ef:85:43:86:28:
3b:8e:9a:04:81:89:17:50:2d:15:a5:b1:cc:56:c7:71:7f:5e:
73:61:8e:c1:50:9c:38:35:72:c3:d4:c6:ea:b4:e7:fc:f2:54:
c3:ae:72:e6:a1:27:8e:f5:f9:ec:e7:18:cd:78:31:48:2d:3e:
79:8a:6d:35:b8:d3:87:21:32:05:89:ab:74:08:13:b6:a6:43:
07:f7:9b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8x/WfsWFm72n5B/GOxIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjYwOTI2MDkwMTU1WhcNMjYwOTI3MDkwMTU1WjAzMTEwLwYDVQQD
Eyg0YTRlMjFmYzA0ZmU5OTdiYTYxOTQxOTE5MzAwZWU5MmQ4ZmY4ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj50JJACxwTU8DOxHbpU0T+iAIOHH
N9zHBWon9M1McAx4SrkUr2AhyqzBwPkDalK8WvO5yXLrvkH03hWq2oIKxHsgfCuE
gKaCe6SZ33Jj8AEqJyqmRG7tp9st+oR5rpYXG3sp6dZomI+8nJmj6nrnFkMAVy4Q
ZltZsKGK0x9KNOcVxOYpeZrpjr9AFge7mfwLo4hQuq+YRQby8IS1GRd87l9cYoPN
TL1dplTppyqmOzOOUO2u9MdxjlSzk8sH8+RPHgjnraB5n4jMMublbmRnWJO30EqI
PxhiYc5+zthuga17vDr7zSjUsvZYGvCk6TWZ9mr21SEaDWcmbvUCQTMPJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpOIfwE/pl7phlBkZMA7pLY/47qMB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMa2IIxx
bew7/BK87trLzuFYbXyXGspheyUvWygZj7LZyWcFjv0p2NOxAcsYbZty0oyv6Riw
l/qD2JYURp5Cqz3uhDUqrc7kWiP5x0MXcLmiiLiPgc3/bgs1CpEcMYfs4TCtx7IX
kgh2Y9SIxnpF0P/jqsfTAz3kVmWC91bGgf7dtpwxMt09Tv9vykOn9QdZHk4se+MP
y0xtZN+e/g9P0cQK3qi9dMR+50iMNTskse+FQ4YoO46aBIGJF1AtFaWxzFbHcX9e
c2GOwVCcODVyw9TG6rTn/PJUw65y5qEnjvX57OcYzXgxSC0+eYptNbjThyEyBYmr
dAgTtqZDB/ebGg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:23:20 2026 by rpki-client