Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: B+SoXGTnGJv3G+N9Qj299r2FdsA1Ww3LxPdmZMoQPO4=
Subject key identifier: 20:80:8C:B2:30:A6:8F:5D:A6:4A:6E:7B:D5:D6:A3:8C:55:57:EA:81
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019D28BBF509860518F35C9A07A9F6AD0AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0CD9
Signing time: Thu 26 Mar 2026 06:01:39 +0000
Manifest this update: Thu 26 Mar 2026 06:01:39 +0000
Manifest next update: Fri 27 Mar 2026 06:01:39 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: 9TO8J7uy+0KLWHrGyehhg8SUTSfv0dWTpo2oW79DOas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f5:09:86:05:18:f3:5c:9a:07:a9:f6:ad:0a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Mar 26 06:01:39 2026 GMT
Not After : Mar 27 06:01:39 2026 GMT
Subject: CN=20808cb230a68f5da64a6e7bd5d6a38c5557ea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:15:3b:7e:fc:04:f6:3f:fe:cd:eb:e7:b9:
3e:21:9b:08:f1:a9:d7:06:f8:b6:a2:f6:76:29:e8:
fa:0b:3e:b4:07:98:27:ff:ee:c3:6b:81:fa:51:08:
5b:08:60:6e:f7:5c:c8:01:fa:ad:04:21:bf:20:e6:
17:d8:a2:10:3b:5d:2b:52:d1:92:90:c2:ee:2b:34:
66:a5:24:4d:e9:54:b4:8d:91:6a:e5:43:88:6b:09:
7f:91:82:cd:db:d0:b5:6a:06:40:70:3f:fa:85:a4:
68:89:06:50:a4:cd:e7:3b:86:c9:9d:bf:5f:16:39:
91:19:e8:8d:56:08:bc:b2:4a:0e:36:28:16:69:0c:
62:18:0e:f1:ff:c0:45:be:61:ce:1f:a7:4a:25:5c:
eb:e8:d4:17:1f:36:ec:10:5c:af:c6:5c:8d:39:06:
be:0a:a5:a1:44:a1:74:5b:d1:c3:ad:63:d6:ed:17:
4f:a1:e1:c8:08:c4:5c:f4:a1:31:db:2d:a7:37:82:
ae:6e:b7:59:aa:b6:9c:23:d5:18:92:42:9b:b4:0e:
b0:11:bd:f8:4c:28:af:48:c8:8b:c4:22:8a:6e:e2:
01:95:4e:dd:f0:0a:40:bb:55:d7:ca:5e:a9:bb:53:
aa:c0:41:e2:f2:a6:d2:ae:b3:ba:fa:da:94:6e:76:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:8C:B2:30:A6:8F:5D:A6:4A:6E:7B:D5:D6:A3:8C:55:57:EA:81
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:12:cd:bd:60:dc:4f:4a:dc:9c:9c:6a:28:ca:24:54:0c:
02:51:ab:7b:2f:58:87:f8:d3:f6:3d:32:e0:44:2a:79:d3:eb:
6c:02:a2:8f:aa:b8:e2:84:20:8e:0f:d5:88:4a:68:12:88:1d:
bf:a4:75:d9:a1:b6:bb:9e:be:9f:fb:46:10:45:ad:8d:26:61:
ca:d0:b4:2d:76:14:12:5e:5a:87:cf:9e:ab:cc:3e:ba:b2:50:
e0:72:94:7b:f0:8f:76:d7:41:2d:8c:36:1d:17:6d:66:29:a3:
56:4d:3f:c6:91:70:eb:c8:7d:b3:56:90:5d:29:61:7f:ba:3d:
f3:0e:94:9d:2e:9c:79:b2:9e:f7:8b:d2:b2:8c:b6:1b:07:9b:
7a:a0:6b:0d:91:3d:39:91:ab:b4:51:72:e9:dd:23:1b:f7:9f:
7e:94:75:cf:6d:e2:15:12:d9:6b:cd:f9:92:78:37:7d:64:56:
ba:75:0c:7f:ce:73:0f:e8:00:f3:96:55:fc:7c:7f:1d:91:29:
83:44:ab:d3:b1:10:27:a6:77:0f:b0:ed:ae:21:21:1f:15:5e:
17:c7:c6:c1:01:3f:9b:cb:63:a5:bb:f6:c4:2a:fc:12:3a:08:
00:e2:da:c3:9c:af:25:76:eb:3a:eb:45:17:dc:36:8c:de:30:
1b:6a:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:34 2026 by rpki-client