Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
File: v27iTmpzNB7J5d_AQr71vFnah8c.mft (raw, json)
Hash identifier: 0dLKiGsTdFmXR5s6tJN9+ZsH07PZjlbuJ9JJAlUSfmI=
Subject key identifier: F8:BA:81:B5:41:3E:01:B4:BB:F9:34:9F:7E:91:29:2E:A0:EE:1A:79
Authority key identifier: BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7
Certificate issuer: /CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
Certificate serial: 019D25F217CDCDE9A8017AFB040180CA4D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
Manifest number: 04
Signing time: Wed 25 Mar 2026 17:01:55 +0000
Manifest this update: Wed 25 Mar 2026 17:01:55 +0000
Manifest next update: Thu 26 Mar 2026 17:01:55 +0000
Files and hashes: 1: aRyykpGyV8l037pwYFABQHmZBQo.roa (hash: Nh6oT8lybS2Q4BHuKgllOdaD6W0W7agU3wHBADfldjo=)
2: v27iTmpzNB7J5d_AQr71vFnah8c.crl (hash: FSLBscsenL/1Fk47WeelhajPW0HJ5SHYnIEECGKrsnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:17:cd:cd:e9:a8:01:7a:fb:04:01:80:ca:4d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
Validity
Not Before: Mar 25 17:01:55 2026 GMT
Not After : Mar 26 17:01:55 2026 GMT
Subject: CN=f8ba81b5413e01b4bbf9349f7e91292ea0ee1a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:31:aa:28:08:21:16:0e:72:51:02:e6:5b:
07:83:8e:ff:c8:4f:4b:66:3c:a7:e6:51:10:42:b8:
9c:0d:d8:03:c5:33:1c:5a:71:72:20:06:a5:90:a8:
30:27:dc:7a:5d:b2:ce:f9:8b:4c:e1:18:77:b5:9c:
4f:28:a6:53:fe:3a:c5:20:aa:e5:92:a0:86:6d:33:
47:1e:4b:e4:cc:b7:43:64:8e:c8:01:5c:52:f5:4a:
77:e2:65:31:be:b1:92:2e:19:58:21:3a:de:9f:f7:
0d:d2:35:06:6e:dc:00:37:b0:19:32:a1:46:12:d9:
81:df:3d:8d:79:47:33:4f:a5:4c:ff:a3:75:07:60:
74:aa:d2:07:36:2b:67:ad:31:b5:7e:a4:72:57:e8:
81:8f:33:7c:88:3d:31:45:3a:4a:cf:1d:89:ba:12:
95:1f:34:93:1d:c5:04:e5:18:36:12:14:b0:af:f0:
aa:60:c3:a3:87:27:dd:b7:45:e0:da:b6:52:b0:15:
60:61:ce:09:32:d5:c2:77:77:d9:0c:a3:3b:2d:88:
10:7c:bf:2d:7e:da:fb:1e:6f:d5:42:27:85:ef:12:
85:15:3a:d7:54:de:a6:d8:8b:e6:39:68:f5:90:cb:
4e:08:9e:33:86:f0:9a:48:02:96:02:fa:60:8f:ad:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:81:B5:41:3E:01:B4:BB:F9:34:9F:7E:91:29:2E:A0:EE:1A:79
X509v3 Authority Key Identifier:
keyid:BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:97:d8:ee:02:03:90:d3:e0:9a:2a:e9:33:fa:d6:f0:74:82:
be:a3:21:b3:29:7e:68:ef:f1:6e:ee:b3:b7:8a:db:7e:ed:16:
cd:30:2b:9f:44:13:ee:cf:a7:42:4f:47:ea:7c:8f:04:41:a1:
b9:b5:7b:52:b7:51:87:dd:0f:4d:3d:86:98:21:bd:1f:c4:87:
35:ef:73:ca:2c:39:3d:09:e8:95:ed:5b:58:9f:c0:0d:a1:77:
d7:2f:cc:bc:5a:37:a5:33:d0:72:92:e4:c3:2a:71:6b:b2:0e:
0a:00:15:bb:2a:af:fe:b2:31:a9:e4:37:07:4f:b4:10:3b:cb:
ed:a6:b3:d6:c2:fd:d3:98:7e:d1:2d:f3:06:bd:6d:61:72:ad:
14:c1:e9:7f:2d:e6:3f:24:b7:47:11:e4:d6:a8:92:7b:f4:97:
de:10:e2:58:e0:a9:a8:d9:5c:98:df:9f:f0:b6:df:97:9b:0f:
e6:4e:40:43:f4:e0:57:b4:39:e6:94:26:13:66:64:04:7e:b7:
3d:8f:23:0d:b8:18:6b:00:d6:c1:f7:cd:d0:96:ef:9d:8f:ab:
4b:f4:61:26:e5:ac:ca:00:5b:b0:ff:6e:23:61:fc:e8:3c:fc:
65:4e:90:02:6c:24:64:fd:de:54:d3:b2:7a:fc:df:05:d6:1a:
b2:d3:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:52 2026 by rpki-client