Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: jl9dcXKo4TPmL7esBqRKaBzQ9NkrBVLMpdqA6vw4kYc=
Subject key identifier: D8:D5:EE:BF:8A:7F:D7:9F:FC:0B:8F:DD:ED:21:F5:87:92:4E:85:35
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019D3789504A8D7DFA8356D27963626AEAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 05EF
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: 8CMGD6iwUrs2OZnm3i9mo+sc442myDMRw++MErhXDnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:50:4a:8d:7d:fa:83:56:d2:79:63:62:6a:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=d8d5eebf8a7fd79ffc0b8fdded21f587924e8535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:cb:68:11:53:e9:f8:e3:29:16:82:d2:29:
3b:a7:c4:48:5d:87:db:ac:cd:02:e0:a9:08:e2:8a:
2b:65:5b:c3:4e:b0:ee:86:70:31:fd:b0:99:40:87:
7e:2c:82:34:6f:84:a3:70:1e:59:e8:b7:50:d2:92:
be:40:98:65:b0:73:d0:e1:17:a2:c7:3c:e4:d9:8d:
5c:b7:9d:74:b9:9e:fb:da:69:13:60:bf:fd:d5:74:
4c:72:6a:ea:8a:b6:d8:af:93:59:35:30:35:7d:14:
d3:1d:5f:6b:30:ab:9e:1a:bf:d5:64:fb:eb:12:d3:
7e:48:db:d9:d1:89:4a:08:c9:c0:80:00:e7:71:ba:
05:c2:7a:15:1b:b4:cf:25:23:43:00:75:f5:9b:f6:
75:da:b7:fb:8f:61:ed:e8:4b:70:3c:11:c5:0d:ab:
0d:62:90:f5:88:ec:8c:c8:1d:38:83:1e:60:17:46:
1c:a4:e4:25:67:da:49:90:0e:d8:d7:db:ae:e3:5c:
68:16:39:12:02:cc:a6:c9:c2:be:80:ad:15:f2:74:
09:2e:f5:fe:28:c0:67:1c:96:0c:4c:c9:0a:72:72:
13:f0:3d:86:de:e7:36:67:49:63:5c:2f:65:6e:0a:
09:79:42:23:d6:19:8f:6b:93:9d:de:5a:05:57:9c:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:EE:BF:8A:7F:D7:9F:FC:0B:8F:DD:ED:21:F5:87:92:4E:85:35
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:88:04:de:32:27:39:e3:47:db:70:02:ff:d9:52:02:80:
d6:21:79:fe:02:f0:9e:9f:1e:16:06:b6:63:ad:54:8c:ae:c9:
e1:45:78:04:bd:f8:49:6c:7e:11:43:5c:f7:73:f5:c6:7c:db:
39:d1:0b:35:56:7d:06:4f:42:4e:5e:13:c3:94:7d:51:5c:23:
40:9b:18:a0:61:06:52:3d:b1:0d:ec:18:03:fd:5d:06:fa:1e:
1a:c9:34:0f:af:b5:e3:05:44:b3:87:bc:e4:77:c4:72:99:58:
21:af:80:89:57:f9:e0:eb:f1:d0:db:5b:bd:e2:1d:4b:bb:e1:
9a:82:41:f0:6a:18:4c:bd:2c:7a:06:c9:25:ce:3c:c4:63:29:
d6:fc:3d:b5:3c:db:3e:55:bc:48:0c:31:76:8b:63:81:ef:66:
c9:b6:a2:2c:97:42:32:f1:a7:a9:46:f4:a6:0c:e6:68:4d:ba:
91:3f:b0:93:ad:ce:9c:a0:1d:06:6d:1f:7c:a4:61:aa:98:ae:
44:97:e9:61:74:28:f6:40:63:df:fd:68:b3:ef:cf:15:da:6e:
c2:4b:ea:3a:60:9a:0b:a7:17:8d:85:1b:70:8a:5f:49:94:21:
4c:fc:cc:a5:76:0f:3a:90:3d:d9:2e:a9:df:15:ec:90:97:36:
16:ee:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:32 2026 by rpki-client