Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: xEARaKLpZTAYt9HZUiSIpbN7dm1T1VczajF0TOlSEFQ=
Subject key identifier: CD:C1:0B:0A:71:36:8F:EC:A0:73:EA:E9:FE:EC:4E:A5:22:3A:3C:83
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 019EEA45E9453D8EEB8491EDA987A02E18C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0DB5
Signing time: Sun 21 Jun 2026 13:01:50 +0000
Manifest this update: Sun 21 Jun 2026 13:01:50 +0000
Manifest next update: Mon 22 Jun 2026 13:01:50 +0000
Files and hashes: 1: 5POQaq2FIBregxvYNKnQ0LZ68eA.roa (hash: 3ZBwuPJNCoHXmfqEKRXgDso3hRBamUObQVJiGRHt5+M=)
2: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (hash: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c=)
3: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: D3Gqitz13avik9roNs7f6+RMy0+v5/j+meqn4JmzuE0=)
4: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (hash: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:45:e9:45:3d:8e:eb:84:91:ed:a9:87:a0:2e:18:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jun 21 13:01:50 2026 GMT
Not After : Jun 22 13:01:50 2026 GMT
Subject: CN=cdc10b0a71368feca073eae9feec4ea5223a3c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:2c:15:c7:6b:17:1d:aa:b0:4d:c6:70:d5:
c8:d6:34:5c:71:7b:af:ba:3f:5a:5c:97:e3:a4:01:
5d:99:8b:f3:dd:32:57:36:16:0f:97:a0:ad:6a:f6:
28:44:20:07:58:06:35:13:d5:73:e7:45:ca:8b:ce:
a3:1b:9a:66:f6:21:29:ac:88:39:0e:30:69:d1:08:
1d:52:b8:ea:80:2b:13:c8:dd:ea:ff:6e:07:e9:9c:
4d:42:85:6d:6b:19:19:2f:1c:ad:a9:71:50:3e:0b:
46:85:a3:b4:72:ca:4a:e1:ab:d4:2f:b0:47:e2:53:
ea:e6:41:42:25:dd:83:7a:5b:c5:99:4c:90:97:bb:
99:d0:92:b3:03:57:15:d1:26:50:5b:58:1a:c2:49:
e5:08:cb:3f:40:89:89:d5:35:24:2f:48:49:97:9c:
45:cf:f6:5a:87:83:e1:17:0f:1a:8d:c9:d1:6d:cc:
df:91:58:3a:8a:e6:99:c6:fa:f4:99:05:7d:77:f4:
20:05:3f:7d:41:3a:43:c8:0d:76:2b:fa:2f:ad:f1:
d8:c7:76:5a:72:a5:23:0a:e2:17:8d:3b:50:42:79:
91:77:a9:31:d6:a8:1f:53:e3:16:75:6e:0f:29:fe:
43:68:93:f1:de:9f:02:41:6d:20:9c:fe:c0:35:28:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:0B:0A:71:36:8F:EC:A0:73:EA:E9:FE:EC:4E:A5:22:3A:3C:83
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:03:40:d4:10:14:75:30:7d:81:e7:86:04:fd:0a:f3:9a:8a:
78:37:9a:92:92:d4:20:77:86:6e:b1:9a:7b:32:99:7c:df:3d:
4b:f5:f5:ff:fc:55:86:da:8b:35:32:cb:24:85:de:93:b7:de:
52:8d:1a:78:70:c1:b1:99:bf:9a:fc:f5:6d:65:83:b1:60:bd:
c3:e7:60:e0:c7:65:8b:79:e6:62:88:9b:e3:66:00:25:c3:7c:
8d:6b:44:fb:63:76:de:75:88:aa:11:3e:5b:8e:d9:2c:c9:57:
db:5b:41:72:4b:77:c0:ce:98:ad:39:b7:9e:0f:59:60:68:84:
4a:1c:20:0c:06:84:cd:b2:41:8a:32:23:4e:87:bc:02:2c:f8:
2d:a2:55:24:ea:28:78:47:f6:34:04:b6:88:c2:ac:0e:24:b3:
47:b5:ff:8d:88:f2:64:26:b0:0c:88:28:91:46:cb:c9:b5:0f:
98:5e:94:47:92:a6:28:d8:d3:1c:38:bd:bb:40:91:88:55:9a:
b3:3f:37:44:36:de:30:6e:5f:45:d2:96:0d:6d:62:3c:a2:5c:
20:11:20:09:33:d6:ec:7d:29:71:9e:a2:36:74:d5:b0:24:85:
ab:f3:2c:3a:21:16:ff:43:94:8b:71:7d:33:08:40:ac:27:ce:
bd:78:b9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 20:32:45 2026 by rpki-client