Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: ExLlkNjTiuVXHuarXkfHGoJAnYLdC014BIMV7np0AZU=
Subject key identifier: FE:B9:D6:F8:6C:24:B7:7B:81:ED:E9:37:48:DF:EA:9D:A2:26:65:76
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019EB5E9BB51D0B92A1ABA6F5D56991A00B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 06B5
Signing time: Thu 11 Jun 2026 09:00:54 +0000
Manifest this update: Thu 11 Jun 2026 09:00:54 +0000
Manifest next update: Fri 12 Jun 2026 09:00:54 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: 1z2s7x+EL8MCHIJVQWgdyNQi5brN75EliB9hUbdEFhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:bb:51:d0:b9:2a:1a:ba:6f:5d:56:99:1a:00:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jun 11 09:00:54 2026 GMT
Not After : Jun 12 09:00:54 2026 GMT
Subject: CN=feb9d6f86c24b77b81ede93748dfea9da2266576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:a8:b6:67:33:84:ae:89:83:10:a2:b9:6a:
5e:1f:b3:ed:5a:86:a9:09:ee:62:56:5a:40:a6:cb:
0a:85:7b:4a:0f:45:ac:ad:9b:59:a2:11:16:af:b0:
06:b6:ba:55:7f:b6:e3:86:0f:fd:51:18:8e:c6:fd:
f4:d5:45:9b:27:c4:f3:ad:50:7b:f6:74:c3:0e:b2:
00:91:49:4e:9d:ce:50:39:6b:fd:36:a1:29:80:02:
c5:a3:e6:0d:0b:6e:4f:cb:22:e7:a4:79:ef:9d:75:
c1:7e:e2:03:16:f2:3d:69:5c:95:3f:05:e8:07:4c:
40:9b:55:35:40:6f:5a:61:12:9c:8d:cd:76:ce:cb:
c1:b1:aa:fa:02:df:51:be:ee:d1:aa:91:49:4e:ba:
05:10:fb:e3:7b:83:c7:95:0c:b6:b7:f0:a7:49:a3:
28:0a:36:bf:a3:05:ea:47:54:1d:b5:d9:48:ab:00:
c2:50:20:cb:9d:a6:75:62:56:da:5a:97:d5:a7:6b:
04:3b:bd:10:18:5f:c8:03:02:95:4b:17:c1:02:3b:
e9:ff:58:50:81:d6:5f:17:f6:24:a9:fa:35:cd:32:
2e:0b:8e:92:e7:22:41:16:9d:57:80:a9:88:95:f9:
66:2c:ee:c2:b7:d6:77:63:9c:49:5d:24:da:c6:e5:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:D6:F8:6C:24:B7:7B:81:ED:E9:37:48:DF:EA:9D:A2:26:65:76
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:53:aa:e5:ad:f4:3e:8f:2b:96:82:c7:7f:d7:ed:a5:61:
01:65:cc:e4:44:d2:df:93:cb:23:8f:08:d4:2e:21:79:e3:74:
e5:e7:83:7a:c2:25:9b:e2:c2:ad:d8:7b:97:68:7a:f4:1e:8b:
80:6c:35:93:c7:25:6d:c0:8c:ce:3e:2e:80:00:5e:9e:00:d8:
a3:20:7f:8d:f4:c0:40:63:e3:1d:8f:6e:26:09:bc:13:98:6e:
bb:31:e8:12:26:32:45:6b:5b:6a:90:de:a5:24:8e:82:dd:bd:
09:7c:66:ef:bd:25:8e:53:e6:ab:bd:e8:56:3b:88:9e:ea:0b:
c9:dd:6b:63:9d:7a:52:f8:a5:c5:24:54:a2:72:0b:4a:7c:52:
eb:71:eb:b8:c6:f5:ba:aa:f3:58:62:b6:77:42:05:43:55:0e:
29:b6:5f:23:3d:44:5b:2a:46:ac:3a:bf:7a:b7:38:d9:d5:62:
45:1c:f5:15:1c:6e:87:f6:a7:3b:2a:35:99:6c:ba:a2:dd:1c:
39:06:82:68:96:5c:15:d3:e7:e0:26:2e:48:68:0b:a1:02:fc:
c4:7c:e7:7e:89:be:c2:6a:a3:28:e7:88:b8:15:fc:28:fd:0b:
89:42:98:b0:c0:b8:f1:13:73:45:4a:ab:17:36:52:63:f9:a2:
31:da:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:52:45 2026 by rpki-client