Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: hT6N86TETABVcEywe903O8s98HShNV+pKEcjYLC3hH4=
Subject key identifier: 9E:0A:C7:82:23:E8:CC:C4:BD:F3:C2:96:FB:69:42:58:99:87:88:5B
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 019D25BA0E1103A211A0B250C7338DC55D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0FFB
Signing time: Wed 25 Mar 2026 16:00:43 +0000
Manifest this update: Wed 25 Mar 2026 16:00:43 +0000
Manifest next update: Thu 26 Mar 2026 16:00:43 +0000
Files and hashes: 1: 6oQKDDyMUj37dGHDAWG9hyXJ4CQ.roa (hash: 5WxnbXRk5D7eZXvGdqfcd1aSnBHhRIk6MtDcfyfGK/w=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: xlLztJDgmbeM5yXkFNE8MQhU5wrKMPh9EBKDUl61kjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:0e:11:03:a2:11:a0:b2:50:c7:33:8d:c5:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Mar 25 16:00:43 2026 GMT
Not After : Mar 26 16:00:43 2026 GMT
Subject: CN=9e0ac78223e8ccc4bdf3c296fb6942589987885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:1a:8f:05:e1:9d:04:dd:2d:d7:aa:9f:ea:
93:11:a4:31:3d:c8:8d:b8:10:96:9e:6e:b3:c0:73:
7b:55:5a:fc:c3:f8:59:5e:cd:20:e1:05:05:5b:03:
19:65:ec:76:df:1f:ae:0a:5d:4d:3a:93:ee:66:47:
70:7d:0a:93:5d:2c:d5:b4:18:d1:56:7e:75:49:46:
49:9c:a7:4c:e8:e6:83:27:29:2e:5c:23:fa:96:16:
ab:8f:e0:26:b1:fb:34:15:b5:31:07:d5:50:8a:48:
74:60:32:76:2c:ef:ce:7f:5a:0e:9a:b5:ab:e0:7c:
83:ad:8a:b0:aa:ae:c4:8c:cd:f4:7c:91:61:f1:de:
5b:ff:bc:d0:20:ea:74:a3:54:af:a3:18:42:1f:40:
8c:c1:af:5f:74:62:58:e3:92:1e:df:4a:2e:7e:66:
cb:73:71:a5:6c:04:91:87:70:ae:d8:61:1b:51:a9:
83:c1:a2:d1:67:a6:97:e3:3f:10:2e:0c:0f:f0:cd:
30:06:a1:16:98:e1:99:17:d7:f6:05:d7:c0:4e:8c:
21:83:2a:5c:c0:e3:ef:7c:0e:32:bd:dc:f4:e2:4f:
dc:d5:f1:e3:96:80:19:3f:b1:04:83:86:57:9d:0b:
66:19:58:0d:86:65:9b:7d:58:74:93:4f:5f:dc:fe:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:C7:82:23:E8:CC:C4:BD:F3:C2:96:FB:69:42:58:99:87:88:5B
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8c:61:34:3e:cb:3c:59:36:5a:eb:1a:ae:8e:99:43:24:b9:
36:b7:d3:ae:8a:0f:b4:44:8c:35:b8:f1:0c:5b:30:0a:8d:60:
01:7b:c1:a5:9e:8f:1b:88:78:bd:46:65:e5:64:98:43:f9:1f:
d8:61:d4:fb:97:bd:bd:27:73:44:45:82:9b:05:3a:8d:3d:c1:
82:a0:29:a5:1b:b4:11:85:25:d3:77:c2:ca:30:df:d9:04:fe:
e7:4c:cd:4a:02:65:9a:8e:fe:b5:8c:3c:3e:95:df:07:2c:4a:
75:50:e7:1e:fd:3b:c9:4d:d5:cd:bb:f3:b7:4a:c2:45:a1:33:
01:b8:60:c0:78:04:fe:db:69:8a:3a:95:9d:25:a7:81:1d:7e:
d0:4e:c2:f1:c6:7a:8f:b9:b3:f7:77:ad:82:ba:31:9f:5a:84:
69:a4:b9:1f:f3:12:68:d6:00:41:8f:57:59:e8:7f:c4:4f:ed:
c6:f1:0c:17:e9:16:c3:d7:42:4c:26:97:0a:11:06:46:7b:c4:
4a:9a:17:53:41:f7:b2:f3:3a:23:c7:26:78:c8:a0:81:eb:36:
4c:23:12:c8:ae:02:64:b2:75:79:df:27:10:18:d5:57:47:9c:
ba:1e:bf:22:f1:f3:9d:ef:6e:c5:19:83:c6:fe:87:eb:1c:38:
3c:7a:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:14 2026 by rpki-client