
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: gpOeKGpt3nBzVwA3CSS/HocldBX1d1KLg52e15TrWQs=
Subject key identifier: 73:5D:BC:40:A2:F7:B0:FD:D5:99:38:C2:03:18:61:B6:3E:71:85:34
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019F9F9600C6AAE6D6508D2B4172604A1DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 072E
Signing time: Sun 26 Jul 2026 18:00:35 +0000
Manifest this update: Sun 26 Jul 2026 18:00:35 +0000
Manifest next update: Mon 27 Jul 2026 18:00:35 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: AXN6b7nqsIcqdFPj5dW8GzG08QpO2WCn76TfSsDdLlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:00:c6:aa:e6:d6:50:8d:2b:41:72:60:4a:1d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jul 26 18:00:35 2026 GMT
Not After : Jul 27 18:00:35 2026 GMT
Subject: CN=735dbc40a2f7b0fdd59938c2031861b63e718534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:d3:b3:c3:50:d8:c3:de:9d:54:46:99:1b:
60:a6:89:5d:39:8f:a0:f6:c1:c3:8e:7b:f3:5d:b7:
6b:d8:a3:02:77:54:7d:5d:d4:6c:1b:f0:4d:1a:d2:
a9:bc:1b:15:da:8f:0b:1e:22:e6:57:51:70:d4:5a:
21:7d:34:91:5c:30:83:e2:74:45:f7:ab:10:e2:d5:
1f:3f:89:56:07:ab:b5:ce:e7:ed:2f:fd:98:ad:20:
52:5b:36:18:0f:bc:4f:f8:c7:c2:eb:7b:d4:77:7d:
15:63:66:71:a3:d5:1c:f2:f9:1e:b7:ca:da:a3:97:
e7:1c:fc:ad:c4:f9:18:ea:56:aa:f8:84:f0:bf:a6:
4f:c6:a3:6e:e6:de:2d:08:d5:6a:74:9e:23:80:73:
17:d3:1e:51:90:87:c0:a4:b5:32:50:2e:ff:17:51:
07:24:cf:09:70:0f:60:ff:28:d4:d5:16:57:9a:e9:
03:0a:23:5b:d4:d3:f8:b6:3c:3b:3d:62:13:be:e5:
ef:df:73:7f:d2:8d:41:ed:86:83:e7:73:e1:78:83:
0d:89:5c:31:f0:54:03:df:d8:57:b6:e1:58:d6:0d:
11:15:53:d8:af:3f:95:22:f6:70:06:5e:8e:03:9f:
f3:1b:61:5c:a7:c2:76:4b:5a:44:53:09:75:22:98:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:BC:40:A2:F7:B0:FD:D5:99:38:C2:03:18:61:B6:3E:71:85:34
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:58:51:bb:10:7f:4d:7a:6f:4d:96:2d:67:93:cb:c0:a6:c2:
a7:b6:45:45:b3:e6:c2:f7:95:24:01:cc:81:76:a7:88:23:2d:
d3:cf:ed:b4:8f:d0:7d:22:0b:71:90:8e:39:34:0f:62:87:68:
29:6f:84:ce:09:e9:de:0f:2d:7c:5a:cf:8c:27:d8:be:31:a3:
74:78:3c:cd:1d:46:ad:4d:fc:1e:d2:f8:50:4c:70:62:6f:8a:
e1:14:74:4b:d4:3a:39:4d:67:f6:9a:67:67:38:fa:12:2c:35:
db:da:d2:69:f4:04:02:10:e1:8a:d1:ea:c4:73:43:9e:b7:0d:
1d:3b:ed:5a:8e:f1:3e:5e:5e:ec:4f:04:6d:9e:4e:3e:61:34:
b8:49:fe:16:87:d8:05:4f:a8:8a:f7:a0:32:09:12:4f:41:cb:
75:8c:28:19:b6:da:fb:a9:7a:8e:6e:cb:1e:7e:6b:b3:dd:8b:
8d:c0:17:8f:a9:82:2f:0b:1e:aa:e9:5b:87:78:72:65:aa:6a:
db:51:11:19:ff:35:74:9b:02:48:d7:99:26:17:56:fa:5c:15:
ce:45:fb:da:59:d3:79:b7:68:62:f0:e3:b8:3f:e4:58:f7:9f:
ca:4e:3a:95:4f:7c:59:b5:b0:59:e3:8d:75:e2:a4:11:9e:b0:
6a:1d:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:16:49 2026 by rpki-client