Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: 578KScxm4+kohjHgTyy0kEW7lrwz4cm9R2pab3e5cqQ=
Subject key identifier: F3:7F:F3:E9:B2:B7:30:A6:62:F7:4B:48:40:A0:24:7E:AA:2F:B3:97
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019DCC06270A0F0EF7DF71E16918C8C97F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0FA4
Signing time: Sun 26 Apr 2026 23:00:48 +0000
Manifest this update: Sun 26 Apr 2026 23:00:48 +0000
Manifest next update: Mon 27 Apr 2026 23:00:48 +0000
Files and hashes: 1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: S1baD+5qTt4DoKG84xSPnYO8guC06JiUg8xOC+JRb2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:27:0a:0f:0e:f7:df:71:e1:69:18:c8:c9:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Apr 26 23:00:48 2026 GMT
Not After : Apr 27 23:00:48 2026 GMT
Subject: CN=f37ff3e9b2b730a662f74b4840a0247eaa2fb397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:2f:93:81:85:9b:cb:b9:3c:fd:4f:f2:27:
18:d4:97:e2:c9:7b:dd:ac:05:81:69:0a:a3:de:53:
13:06:70:e5:c3:b0:45:ff:0c:9f:ce:e6:63:8b:d6:
ce:34:d2:07:fa:d8:b2:d0:0a:c3:35:7b:8e:7e:e8:
12:93:98:72:48:57:54:d1:72:09:21:d1:e2:bc:6f:
e1:41:be:da:46:15:2c:e1:11:ea:7d:e7:00:82:70:
88:34:80:fc:a5:6b:a8:83:5b:02:1c:85:fd:38:10:
16:47:04:10:f2:4b:1f:26:57:f5:b2:bd:13:7e:1a:
ba:ab:da:8f:18:45:fb:ea:12:34:53:28:59:c9:6a:
e0:e2:4d:03:4e:73:45:84:2d:98:66:28:23:ed:bd:
5f:18:2c:03:49:95:ae:e9:30:5b:c0:24:76:c7:41:
29:4d:c2:5f:a6:a4:36:7b:b6:a8:09:f4:a3:6a:ed:
a3:ef:df:45:4e:c3:44:d1:63:79:50:a0:4d:d4:ad:
b5:79:9e:c9:98:d3:0e:1c:d4:82:ff:79:75:ac:94:
0d:4d:cd:84:ef:9c:da:6c:95:d2:4d:ae:1e:a8:5e:
20:ec:e3:bf:c8:45:f6:37:c2:90:82:12:5c:67:72:
9a:5b:46:31:6c:1d:13:10:0e:3c:1a:ac:ee:00:83:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:F3:E9:B2:B7:30:A6:62:F7:4B:48:40:A0:24:7E:AA:2F:B3:97
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c9:8c:df:85:2f:93:75:df:e8:af:1d:bd:bc:58:5e:3a:a8:
14:86:4e:79:78:59:8b:e3:74:9f:f6:e5:e2:7c:f6:24:68:92:
8b:da:20:36:0a:03:b9:03:34:dc:21:fd:9a:58:a7:25:32:42:
fa:5e:e6:ec:53:90:0d:99:d5:5c:6c:c3:da:74:17:ef:13:8d:
fa:0e:a7:16:47:fe:15:2f:12:2b:4d:46:d7:e3:4b:cc:f7:6c:
6e:1f:ff:e3:f8:ff:46:e5:69:e3:81:e3:24:97:cc:48:63:39:
02:07:3e:d6:7c:ff:bf:04:46:77:44:97:7b:db:17:c9:23:0a:
0c:09:71:5b:42:0b:3a:e7:b9:b9:d6:a0:89:51:93:b0:50:9b:
bf:44:48:cb:1f:a0:89:ae:1d:2e:10:65:d8:dc:99:bd:35:5a:
7e:b6:9a:fe:ad:01:5b:bf:82:d6:8a:4a:1e:7f:9a:94:2d:f0:
10:04:40:76:2c:f5:56:d8:b0:8d:73:24:c0:b6:9c:fc:0d:dd:
cf:3d:a7:26:34:2f:45:2f:d2:8b:2d:4f:97:50:b7:14:98:ba:
ce:b2:7e:d3:7e:95:09:a3:03:a6:94:60:7e:d5:de:44:a1:a5:
6f:b5:fc:a0:41:39:20:10:80:d7:b4:6d:89:d2:99:89:4d:67:
76:fe:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:34 2026 by rpki-client