Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: 2ZPKu1ntkbhuzfbZkVu7vN9BikpSS3rjTautsOV7fyU=
Subject key identifier: 0C:72:2F:85:74:DE:7C:06:15:9A:8E:8F:58:B1:A5:96:B6:DB:C9:3B
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01A0F5A09CB05A845E1FD824CC07F28F58DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0EC4
Signing time: Thu 01 Oct 2026 04:02:18 +0000
Manifest this update: Thu 01 Oct 2026 04:02:18 +0000
Manifest next update: Fri 02 Oct 2026 04:02:18 +0000
Files and hashes: 1: 5POQaq2FIBregxvYNKnQ0LZ68eA.roa (hash: 3ZBwuPJNCoHXmfqEKRXgDso3hRBamUObQVJiGRHt5+M=)
2: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (hash: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c=)
3: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: 4kYPsBkSYKD1Y80XgQ8TjOAzUdXnOFqipc6T9fY1Ync=)
4: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (hash: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:a0:9c:b0:5a:84:5e:1f:d8:24:cc:07:f2:8f:58:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Oct 1 04:02:18 2026 GMT
Not After : Oct 2 04:02:18 2026 GMT
Subject: CN=0c722f8574de7c06159a8e8f58b1a596b6dbc93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:51:aa:c4:8c:20:3f:fe:13:6e:c9:c7:f5:
ad:a1:c7:ad:fc:31:72:c5:d1:60:2f:7c:d9:ba:4d:
08:23:c8:69:d3:8e:d6:98:b8:45:e2:a4:75:d9:93:
23:b6:3e:bd:9a:fb:99:6a:5d:f7:f9:df:9f:cc:c6:
f9:d9:fe:48:85:dd:dd:0e:fd:43:4f:10:03:b6:4b:
f0:01:da:00:ef:65:04:b2:56:ed:4d:aa:39:1c:c6:
e4:63:7d:03:0b:63:59:bf:34:40:46:8c:3d:78:9a:
27:fd:dd:72:51:28:8c:d2:c3:e4:fb:c9:2f:d2:5c:
f8:cf:2f:f3:10:ed:45:90:c5:28:14:08:19:fe:bc:
20:52:ff:ca:d3:b2:4b:40:b0:f4:1c:a6:3e:21:3b:
9d:56:39:10:c6:c6:98:f0:8f:b4:7e:8d:c4:50:a1:
07:eb:bd:c9:b9:f5:c6:f6:6b:de:f0:50:75:79:79:
61:3a:98:3b:bf:78:9c:6a:41:6b:ce:d0:20:a3:d4:
d5:6b:96:3a:6e:14:f7:fd:77:54:0b:d4:52:ed:4e:
5b:69:a9:3f:3b:94:46:a9:53:07:ea:00:10:a9:c1:
5f:f6:69:54:a0:82:6a:2c:ed:ef:42:a2:7f:ef:30:
26:01:e3:f5:3c:ce:5a:61:97:a2:91:9d:cc:44:31:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:2F:85:74:DE:7C:06:15:9A:8E:8F:58:B1:A5:96:B6:DB:C9:3B
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cb:06:b5:ef:d7:6a:43:0c:8b:59:33:5e:20:ed:35:4f:cf:
9e:37:cc:e9:c7:df:16:78:07:af:6b:fb:23:6e:06:d8:e4:a2:
54:05:c6:b9:39:4b:27:9b:ab:5e:d7:30:56:28:15:19:65:72:
13:2b:57:08:72:91:25:1f:6e:2f:01:2f:60:4b:4f:c6:66:3f:
f9:08:0d:70:7d:c8:50:df:62:ba:d9:ad:91:7f:eb:7f:6f:34:
9c:48:e8:72:76:ad:59:97:3c:e0:4a:a5:1f:71:62:5a:58:d7:
34:bb:46:01:82:47:92:45:de:10:68:08:5e:21:26:03:81:70:
5b:65:ae:c9:ff:2e:29:c8:e9:a8:40:f7:8e:1d:47:e5:13:73:
63:1f:ec:f5:53:02:17:b9:0d:1b:1e:5f:31:e1:46:e6:a1:f1:
cc:43:b1:e0:91:21:09:e5:7b:07:c7:50:69:8c:7f:5e:92:28:
b2:b1:e8:e7:c7:6b:c6:83:47:7e:17:be:24:c2:72:30:9d:24:
ae:56:2b:09:08:36:e5:21:f3:95:e1:46:57:05:43:c1:ed:34:
0e:f9:15:60:cb:2a:57:84:0d:26:f0:ba:84:ce:18:72:e8:11:
fc:0a:c7:9a:62:39:9e:71:07:6a:91:b5:bd:0d:ee:58:b6:9f:
0c:6d:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:13:42 2026 by rpki-client