Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: Ni3iZx29/82ypXUtJ/a40H2DxQg3j6N+H2K0K5QpxrM=
Subject key identifier: 87:90:2E:2F:EE:90:BD:B6:63:4B:E6:B1:69:7C:3B:6A:FB:39:E8:A6
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019CE636B54B10782D3359D7F451FDE57844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0B8D
Signing time: Fri 13 Mar 2026 08:01:10 +0000
Manifest this update: Fri 13 Mar 2026 08:01:10 +0000
Manifest next update: Sat 14 Mar 2026 08:01:10 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: V720LoXEtJMPCo8Adrvq71AoBnckgkEzHrn12P/dUyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:b5:4b:10:78:2d:33:59:d7:f4:51:fd:e5:78:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Mar 13 08:01:10 2026 GMT
Not After : Mar 14 08:01:10 2026 GMT
Subject: CN=87902e2fee90bdb6634be6b1697c3b6afb39e8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:3b:f2:22:2c:46:22:1f:e4:95:c4:e6:d5:
a4:b7:7e:b7:c6:d4:48:f1:22:26:01:ff:88:35:e0:
60:9e:b5:70:44:6c:2b:7a:a4:ad:96:0d:1b:b5:5f:
a1:ee:51:9c:13:62:d3:a3:0e:13:18:32:3b:51:64:
b9:3f:45:0f:3e:c7:9c:ea:de:6b:e2:b8:66:e5:dc:
f6:c6:c2:28:fe:ca:f3:b9:6b:4b:bb:75:0a:6e:f9:
f2:9b:32:19:3e:77:38:2c:56:71:c1:12:03:36:8c:
72:43:f4:cc:b9:5b:5f:51:f6:d5:e5:6e:f6:e3:6c:
c0:33:a0:21:8a:0f:46:ee:1e:c8:c9:ca:60:68:75:
3d:ff:f9:ed:c1:e7:5d:a5:d8:71:f0:fe:a3:67:93:
93:cb:bb:28:2a:40:e6:5e:64:89:72:16:56:4e:a9:
8f:17:c0:26:f2:1d:f5:3e:b0:38:42:0f:b7:50:00:
e2:cd:25:ac:a8:d5:87:dd:84:54:fb:f7:6d:20:ab:
0a:50:61:47:23:5a:08:e8:76:23:ab:7b:d6:5f:9a:
ba:b9:9a:e0:2f:6e:78:b3:92:fa:59:b6:21:d3:71:
78:d4:2f:e3:f2:cd:d5:f7:0f:46:56:7b:50:7c:f4:
67:7f:1c:bb:9c:55:9f:c0:e6:27:1c:ea:67:d1:29:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:2E:2F:EE:90:BD:B6:63:4B:E6:B1:69:7C:3B:6A:FB:39:E8:A6
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:61:bf:f9:b4:14:f4:3c:88:27:ed:66:e4:5d:bf:6f:e0:
5b:66:6a:12:5c:d2:3d:b7:99:ca:c2:53:ae:1a:b2:e1:e3:61:
ce:7a:60:5d:85:eb:02:bc:21:62:52:22:9b:70:56:b6:00:f9:
ee:93:9d:29:c7:c3:81:cb:4f:63:44:4d:da:0e:63:c2:2d:e4:
c5:87:b7:e9:47:be:7a:5b:e2:8c:a6:b7:56:47:09:a1:1d:1c:
fd:77:7d:4c:14:4a:39:63:59:78:a9:b8:08:99:2e:f0:31:3c:
47:b2:dc:78:ed:e2:13:bc:48:08:7d:2b:ee:86:47:73:49:b4:
62:55:45:3e:3a:62:80:34:47:b8:14:42:e6:f0:63:dc:26:c1:
d0:9c:e0:82:88:c0:69:b9:9e:ef:fb:54:6e:8f:98:0c:8a:10:
62:10:e2:aa:70:8b:1e:7c:d4:05:1a:68:ff:ec:c2:86:ee:a6:
d8:d4:97:b7:8b:61:75:ff:cc:a8:17:67:cd:c7:bf:04:6c:d3:
c7:78:f3:f3:40:54:0f:c3:a7:55:96:8c:a0:0e:64:d3:1e:eb:
c8:db:65:b6:e6:ee:98:bf:98:fd:2e:a5:0e:04:e3:15:dc:e8:
5c:05:4a:74:2e:55:bc:cb:24:d1:3c:1b:7d:8e:2a:b5:aa:7a:
a8:96:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:33 2026 by rpki-client