Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: N4vo6Lug89Ed3ZcqwDWEyBQMVGgE8kHhV8btnZi2xos=
Subject key identifier: 0D:25:6A:96:E1:37:2A:3F:17:45:B8:1B:BE:33:F1:7F:BC:D0:81:F6
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 019D37C0C0AD584C70989A8072B63816A0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0CD4
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: 5POQaq2FIBregxvYNKnQ0LZ68eA.roa (hash: 3ZBwuPJNCoHXmfqEKRXgDso3hRBamUObQVJiGRHt5+M=)
2: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (hash: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c=)
3: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: Z5Bcdx5GB3rmq5YGTPQKA98FVtPxJqvKMnaCfon8ibY=)
4: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (hash: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c0:ad:58:4c:70:98:9a:80:72:b6:38:16:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=0d256a96e1372a3f1745b81bbe33f17fbcd081f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:53:89:da:0e:b8:de:89:b8:cc:16:ae:76:
5e:24:8c:80:75:7e:8b:62:08:17:a8:b2:95:26:4e:
b0:93:b0:8e:52:b8:c2:54:b9:3e:28:1a:3d:e6:a8:
1a:97:37:ff:5e:4e:74:aa:da:b8:38:9d:b2:17:77:
81:d3:99:e9:17:28:50:a3:e2:80:4c:a9:ab:b5:59:
7b:9f:83:a0:78:b3:85:10:bb:99:c3:08:b4:10:f8:
75:e4:86:86:49:7b:91:1e:3e:60:ff:0b:36:46:1f:
5c:e1:6f:73:12:78:22:83:ba:c9:2b:13:d6:60:c0:
cc:5e:07:05:9c:21:84:ff:0b:49:b3:4f:18:d6:23:
96:98:11:52:ae:56:45:2e:2f:f7:f1:98:e2:7f:fd:
32:6c:af:37:06:5f:b6:8e:7b:38:19:f0:e8:e1:1b:
e6:5c:f9:3f:91:f8:c8:69:66:22:c5:9f:84:e4:0e:
4d:8a:60:9b:0e:43:a7:0a:61:e0:64:04:1f:62:c0:
ca:a0:76:af:71:ad:94:34:5b:07:12:29:40:11:35:
75:f3:52:63:a7:01:76:8a:70:bd:31:5b:a5:e3:9c:
8e:fc:61:1f:f6:52:55:b5:f4:ed:4b:4e:52:b9:b1:
91:1a:65:59:fa:6f:fa:40:6a:65:e4:23:28:79:18:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:6A:96:E1:37:2A:3F:17:45:B8:1B:BE:33:F1:7F:BC:D0:81:F6
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:73:5b:b4:0a:79:e3:e2:3f:a0:16:52:9d:02:15:eb:f1:7b:
02:15:77:d7:1b:e8:e7:d7:20:c1:0f:6b:66:8e:88:44:fd:35:
72:02:f9:4f:98:f7:7e:95:d2:47:31:bb:89:7f:47:f7:f2:c1:
75:80:38:e0:8c:40:e5:57:d1:cb:ed:89:fc:c9:f3:ef:65:38:
a7:46:dd:e8:8d:42:25:af:3c:3d:45:ea:5f:f4:f1:41:19:62:
20:58:92:7b:fc:47:e2:19:f3:ed:29:25:1c:57:ea:41:f4:2e:
02:07:ee:1c:13:f2:3f:d9:55:db:05:9d:ce:42:2b:21:de:d6:
24:27:81:be:d2:00:0e:82:e3:da:91:3e:1e:ff:2b:4f:0a:2a:
7b:e2:b6:da:41:65:53:35:51:72:18:80:59:57:5b:5c:c0:32:
e4:62:7d:a7:3a:68:9f:53:75:d2:86:a2:ed:e7:da:bd:e5:39:
e1:7d:10:7b:6d:24:e8:05:57:99:2e:72:ee:2f:04:48:27:a1:
c9:c4:7d:85:d1:35:eb:2c:3a:14:74:ce:e2:df:e8:12:05:9c:
9c:cd:29:18:bf:2c:28:0b:cf:90:cf:77:a3:04:31:2b:7e:d7:
2a:f1:ca:6a:95:97:aa:6d:b8:31:c5:a3:7a:ef:54:ae:e8:c7:
f7:5e:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:30 2026 by rpki-client