Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: 5rX+k5SpYXWngNnbuz3KSKplaCQAolJL3WO/QpOc4rA=
Subject key identifier: 1D:05:BB:DC:D7:D3:3E:FC:2B:F6:96:38:78:C8:48:65:A7:C6:66:48
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 019F829E5D3DD2817A0F1CD71584600A5163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 1543
Signing time: Tue 21 Jul 2026 03:00:44 +0000
Manifest this update: Tue 21 Jul 2026 03:00:44 +0000
Manifest next update: Wed 22 Jul 2026 03:00:44 +0000
Files and hashes: 1: 14VladBUxqaqZ-NNE8ER_uSwfHc.roa (hash: SrYCafFoP0SWSKgNsDYvBDk2UieF1/jSU5NqyuCubYM=)
2: otTbYOYedxsaU18vozv7H0qaULY.roa (hash: 0z94Z3PKNajsqszNsKqEJ/uzjuVZiI+UT7U7HnELbf8=)
3: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: oqe9uW7lthmSrL43GLFbXz17zfjP/pEGlhesRZ2VQU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:5d:3d:d2:81:7a:0f:1c:d7:15:84:60:0a:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jul 21 03:00:44 2026 GMT
Not After : Jul 22 03:00:44 2026 GMT
Subject: CN=1d05bbdcd7d33efc2bf6963878c84865a7c66648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:32:60:31:51:9f:c6:a0:0c:15:40:9d:e0:
cb:01:39:ae:78:ed:02:95:ab:d0:36:9a:f0:c3:08:
59:96:cc:64:7e:a9:96:e5:e2:a8:56:0a:44:df:b2:
12:ff:df:f9:a8:2f:03:71:fa:e9:76:1c:ce:e9:fb:
b0:83:68:62:6c:17:bf:ab:27:f0:2c:e5:ba:dc:13:
41:f2:4a:1f:5a:57:d9:66:be:45:b5:d7:a9:08:65:
74:6e:ff:b5:35:48:d0:13:21:24:db:1b:75:4e:34:
f8:f1:20:a6:08:e9:5a:65:ad:fe:d7:de:23:2a:09:
26:ab:af:11:b1:6a:df:05:4c:27:bb:e1:16:53:14:
bf:31:4e:8d:06:bd:41:12:f1:8e:2f:64:5e:85:4f:
2a:91:18:46:4b:58:0c:cf:2e:84:cf:aa:d7:c1:dd:
b8:e7:1e:5e:bb:6f:ad:23:11:41:12:c4:c6:26:da:
77:a9:45:0c:d6:3d:d7:31:67:e8:69:64:55:8e:4d:
49:ed:5e:de:b7:ae:7a:91:26:dd:9a:bf:c1:3e:c4:
3f:82:05:5c:ed:b9:41:60:88:3c:a7:ed:8a:99:a6:
1e:8c:d4:6a:c8:6e:f1:5e:2a:2b:47:49:37:de:e5:
b1:dc:00:16:3c:eb:06:a9:38:42:38:b3:31:c4:a4:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:05:BB:DC:D7:D3:3E:FC:2B:F6:96:38:78:C8:48:65:A7:C6:66:48
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:67:03:b7:63:de:8e:46:5f:5c:3a:5f:87:30:c7:4e:5b:a1:
16:81:d5:04:48:23:65:50:c3:25:dd:d2:ce:25:a6:4c:ad:0b:
13:02:71:8f:6c:2d:5e:25:c6:99:cd:e9:60:ac:90:e5:9d:45:
15:2c:47:60:65:41:38:d0:25:c5:5a:cc:21:35:60:76:ed:40:
a7:5e:fb:3f:5a:69:ec:5d:40:ce:b0:b9:2e:50:c5:88:1b:6f:
96:d8:10:76:ab:f8:3d:c4:28:a2:a4:e8:ce:f5:40:7e:fb:3d:
37:67:db:c4:ec:1f:51:58:a3:87:9e:00:f9:df:d4:c9:01:44:
55:27:11:2c:17:1a:38:83:d2:a6:a4:3e:e0:c5:f8:f6:7a:1d:
5a:60:26:3e:53:c7:23:91:23:6b:73:97:75:ef:54:00:08:be:
10:a1:2c:c9:0c:da:9f:37:d3:2b:d7:05:e2:2d:8a:c1:08:39:
c0:a5:39:3d:a7:c8:93:27:fc:c9:37:47:1c:26:2c:74:7b:83:
ba:28:db:7a:5d:d8:ca:7d:50:58:02:8d:f6:93:88:39:54:81:
ee:f0:1c:55:1b:c6:de:97:84:8c:c6:5b:01:54:7d:64:84:45:
78:99:81:57:ab:2b:fb:74:1b:eb:d7:c9:8d:32:ec:6e:f6:19:
71:64:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:23 2026 by rpki-client