Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: LwXWuyIHebENY06mplwQbYLnHO0Ii+YRF89KOTDnzNY=
Subject key identifier: 0C:8A:BE:F7:20:41:2E:46:78:07:AC:38:3D:61:36:E7:EA:61:0D:4E
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 01A172EF474790D46CDEABBBBB361A0FD1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0821
Signing time: Sun 25 Oct 2026 12:00:46 +0000
Manifest this update: Sun 25 Oct 2026 12:00:46 +0000
Manifest next update: Mon 26 Oct 2026 12:00:46 +0000
Files and hashes: 1: lCKnN3wUqbP-CPa03KTotKN0fLM.roa (hash: EhGufh2zzSKdj2oKiV1opxdo5FL6vfw4pZOXSr82bEg=)
2: nV1VVM1ywEoowWBVXFtkDsQx3KU.roa (hash: f9pOQmKZkcV0sZ4BCuIBSnyl7KtosULuBDlP1t0HctQ=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: f6KfMw5Q/Nivx47vlJXPxVqmcavB9RANPY4oLyp+S7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ef:47:47:90:d4:6c:de:ab:bb:bb:36:1a:0f:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Oct 25 12:00:46 2026 GMT
Not After : Oct 26 12:00:46 2026 GMT
Subject: CN=0c8abef720412e467807ac383d6136e7ea610d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:37:d5:c1:55:fb:d0:b2:22:3c:77:bb:4e:
5b:17:3e:2d:f6:4d:23:cc:9c:47:ce:0c:04:41:e6:
32:82:c2:c5:84:5a:26:36:e6:d6:cc:b8:29:54:9e:
f4:96:ec:11:ec:07:81:11:49:9d:f7:ac:a2:22:97:
06:55:a9:23:1f:ef:ee:09:ff:8b:00:b4:8c:ef:bb:
bb:2e:56:b8:63:d3:7d:f2:05:47:4b:af:c4:fd:e6:
aa:63:39:1f:ef:eb:e2:5b:ff:ba:89:2a:76:6f:12:
9c:90:9d:1c:a4:e9:eb:61:40:43:73:07:b9:66:90:
aa:9b:1a:9b:9f:13:f0:8f:08:d6:2b:b7:3a:2c:b2:
74:5b:ff:e7:3b:ce:71:29:30:8b:2c:93:11:4f:17:
af:a7:30:59:a3:6a:60:e9:2c:ea:c6:7e:aa:9f:16:
cf:3b:64:16:6d:88:e6:e6:30:31:15:7c:36:e5:88:
d3:cc:e0:de:02:38:6d:1e:61:93:0e:20:53:d5:ef:
21:0e:09:bc:cf:31:cd:0e:e1:e1:94:53:ab:f5:cb:
ba:07:d5:59:98:89:47:a0:f6:81:15:df:90:30:d9:
17:e6:6f:74:9c:77:cf:c7:7f:e0:7d:0d:28:b4:9a:
e8:c0:c6:fb:31:ae:7b:40:fb:2f:b2:dd:00:06:27:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:BE:F7:20:41:2E:46:78:07:AC:38:3D:61:36:E7:EA:61:0D:4E
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e5:73:dd:ef:cf:9f:7f:24:f3:95:0d:68:b8:22:39:e5:60:
08:e1:f0:51:72:56:0f:30:0f:c7:cb:ac:b5:1c:db:1f:b5:db:
8d:6b:f1:10:db:a3:63:f4:fc:d8:0a:6c:a2:75:c2:aa:b8:f3:
2d:2e:da:02:22:5c:ce:04:44:76:96:37:8c:68:7f:67:78:2c:
a1:4a:f1:29:b1:31:56:a9:65:a7:5a:a0:e9:7a:0e:d6:11:66:
1a:f3:3c:82:25:55:ff:69:e3:aa:f6:00:16:9f:a5:6b:79:37:
6d:e7:d1:5b:e2:fd:8b:b9:4f:94:e1:aa:db:a3:b2:44:ff:f6:
81:0f:15:ca:a8:19:ba:50:6e:02:1f:4d:33:9c:c9:cb:04:0f:
af:64:b6:fd:c9:2a:dd:ea:61:9b:23:ed:7e:45:52:cc:16:d2:
7e:97:0c:69:d7:6c:ec:4f:d2:27:2c:c9:2e:f2:68:5d:4f:98:
10:ae:88:f8:4a:1c:49:b6:4c:33:20:8f:97:a7:25:d5:b1:7e:
8f:80:1c:34:3a:db:2f:fb:6a:bb:e8:9c:24:d0:50:93:96:da:
94:cc:45:c6:be:f3:ec:66:41:90:62:27:5b:e1:7a:83:96:11:
e2:54:74:81:35:0a:26:1e:4d:de:35:f9:e4:ae:3f:30:d9:62:
91:75:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:27:35 2026 by rpki-client