Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: OGwrTH0vDTflW28TVjg50ynnLFrH3dMgD/r/PTx438I=
Subject key identifier: 2D:05:C0:21:73:53:05:6C:81:D4:26:61:FF:0C:80:33:CA:E0:29:57
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019E1DFE826297B34D1C83355E5ACA75E430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0D58
Signing time: Tue 12 May 2026 21:01:19 +0000
Manifest this update: Tue 12 May 2026 21:01:19 +0000
Manifest next update: Wed 13 May 2026 21:01:19 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: fruB5QQKuZlFzetg/UgE2LLt6oUqaHkaUeEBF6kSn4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:82:62:97:b3:4d:1c:83:35:5e:5a:ca:75:e4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: May 12 21:01:19 2026 GMT
Not After : May 13 21:01:19 2026 GMT
Subject: CN=2d05c0217353056c81d42661ff0c8033cae02957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:75:77:e8:26:88:3d:3b:e0:92:d2:e5:fa:6c:
0e:6c:a0:29:03:ab:0d:18:08:d9:5b:59:dc:5f:ea:
41:d8:a1:a6:6d:4e:37:e4:78:15:e1:da:6f:68:f5:
39:3d:0a:81:b6:2e:1b:b4:7b:e2:9b:a7:a9:52:76:
0e:e1:e9:52:80:fd:a6:ed:c0:8d:24:06:5b:1a:0f:
ec:0d:cb:8a:cb:61:04:4f:a0:15:ee:9d:60:41:4c:
ee:ec:cc:f1:b7:78:44:40:cf:93:0e:eb:74:34:3f:
05:4a:3e:19:0d:6e:7e:7d:99:58:50:f1:be:9e:0b:
82:e3:21:d2:e0:a8:1c:04:c4:c5:a6:c0:66:8e:d9:
26:91:c5:c7:b0:ad:47:14:c7:b0:36:fc:2f:36:8e:
49:a3:f5:42:45:a6:97:93:fd:3d:33:bf:7c:b4:af:
4f:78:ea:2d:e3:0d:62:22:e6:47:47:93:bf:77:84:
a9:a0:6a:ca:e7:6c:fe:53:c1:56:6f:d2:41:51:99:
93:b9:3c:85:4a:e0:1d:e9:17:69:89:77:48:41:ac:
db:9f:66:20:73:c0:ef:6c:15:17:15:c3:49:d6:7d:
aa:5f:2f:de:40:53:36:80:37:f7:b4:b9:4e:7f:32:
9c:f1:a4:2d:7f:94:e4:5c:7d:dc:fb:28:ed:5f:be:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:05:C0:21:73:53:05:6C:81:D4:26:61:FF:0C:80:33:CA:E0:29:57
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:47:ee:76:fe:04:54:30:32:22:93:7f:e7:e2:90:29:11:95:
07:e4:da:92:93:ab:05:c0:61:ac:96:ec:5b:e6:b2:89:9e:ef:
94:04:68:62:fd:85:d0:a5:55:a8:5c:5d:0e:e9:21:12:db:46:
d8:79:a6:c0:ea:ed:2f:67:80:3c:2e:e5:a1:46:2e:df:08:71:
e1:4b:07:47:bf:78:ba:0a:49:d4:95:b8:36:e1:93:66:01:b2:
58:67:0a:a5:05:c2:00:ef:b5:1f:c9:9a:7f:26:c5:be:d5:6c:
02:6e:eb:f6:b1:ee:a2:5d:92:58:bc:0c:b6:37:2e:42:22:64:
98:dd:8e:50:fb:64:6e:8e:f0:4d:7f:38:53:9f:f4:19:b2:b8:
57:c0:f8:d0:ed:30:78:52:31:13:39:ea:c7:3a:0f:23:a8:26:
24:85:75:0a:4d:c9:e5:49:86:3d:8d:4f:8b:f5:06:a1:64:f4:
70:a0:d0:99:5b:97:0b:9d:10:04:77:61:98:9f:95:89:ae:48:
fe:4a:f7:10:b4:80:5b:43:55:19:2a:42:64:b0:1b:c2:de:4c:
7f:25:d0:eb:14:a8:43:be:b9:21:f0:70:6e:b6:aa:f8:27:a4:
f0:65:ca:f5:e5:4f:ab:31:9f:91:28:d8:ae:cd:ac:46:f1:99:
f2:dd:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:16 2026 by rpki-client