Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: IOkohKCXrZPc5oOu25b9jrJ4X5ZCXMPbA6VH/ivCZ/k=
Subject key identifier: 0A:D0:3F:56:6F:7A:53:A8:54:CD:30:A4:0A:0B:3A:36:6C:CA:65:DA
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 01A0E519A2937569E34981A7B8984395D9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0FAB
Signing time: Sun 27 Sep 2026 23:00:57 +0000
Manifest this update: Sun 27 Sep 2026 23:00:57 +0000
Manifest next update: Mon 28 Sep 2026 23:00:57 +0000
Files and hashes: 1: 8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa (hash: B0eqzhP1emUlL5EQFCd5dAc0ZKS7qm56hxy/fQh8cL4=)
2: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: 7YuryHByXL87TM7TJ/+JqKF5EStVrUMBdJsi4+0qC10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:19:a2:93:75:69:e3:49:81:a7:b8:98:43:95:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Sep 27 23:00:57 2026 GMT
Not After : Sep 28 23:00:57 2026 GMT
Subject: CN=0ad03f566f7a53a854cd30a40a0b3a366cca65da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:46:79:7a:4f:88:b2:bc:27:17:29:3d:1a:
7f:01:35:25:b4:7c:66:19:c1:c8:24:ee:a6:d1:8d:
c7:21:b0:37:73:21:92:ce:d1:b8:d4:62:0c:da:35:
aa:8f:7d:5a:0a:79:7e:be:a7:72:e4:ec:52:2a:30:
4e:a7:2b:6a:0c:a4:7a:a7:2a:d5:1e:ee:29:07:4d:
7d:14:0d:f3:2b:7b:7a:73:80:52:f0:0c:91:a1:ac:
4d:8d:ac:04:ae:54:fa:bb:10:8e:9c:b3:e9:4f:74:
87:83:28:28:92:7e:51:71:1f:5e:8e:6e:e9:45:da:
61:ec:88:95:33:1d:64:6c:61:92:c4:ed:d7:a6:c3:
c3:61:43:fd:53:52:64:9b:ea:8d:57:22:96:89:ef:
a2:87:17:33:54:52:22:a1:d0:84:1c:89:82:e3:b6:
dc:33:06:63:ee:3d:37:8c:22:3c:1b:92:0e:c0:c5:
85:cf:49:10:6f:e8:6e:be:e5:5c:51:4d:de:fc:ab:
ad:1d:42:df:0f:36:b4:c5:32:09:17:bc:2e:77:f2:
4c:82:9c:0b:b7:04:19:a6:46:e2:c0:a9:26:cc:e1:
b6:95:55:3f:09:d1:ee:b0:e9:4a:5b:53:66:19:db:
4b:a2:5c:8b:e5:19:53:51:a8:08:0c:e1:6a:a2:6e:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:3F:56:6F:7A:53:A8:54:CD:30:A4:0A:0B:3A:36:6C:CA:65:DA
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0b:c2:d4:3f:aa:f4:36:a7:55:15:32:8e:7c:23:05:7b:e2:
95:a3:2d:70:92:5d:32:f7:d4:93:ef:6c:42:f7:15:ab:60:0c:
8e:a4:fe:94:f8:38:e8:cb:73:e3:a6:b2:e5:3e:ce:ec:00:d4:
68:55:5e:2e:8e:b8:ab:82:53:96:86:f8:1d:80:1a:d4:f6:15:
a1:d6:bb:ad:c4:f0:f7:20:54:db:81:05:6d:e2:7c:31:fa:bc:
f2:79:6c:c4:92:0d:52:13:b0:91:0d:24:c9:a2:01:5b:62:cb:
0f:50:2d:3e:2e:46:1b:0b:89:18:d5:0a:8b:14:aa:2d:13:9d:
e2:02:1a:dc:ea:37:62:fd:04:ca:69:de:4a:a4:c6:75:0c:49:
d2:83:d0:5d:ef:b3:fe:db:65:4c:37:cf:2f:1f:b6:9c:72:c2:
58:b4:7f:3a:00:ab:14:8a:8d:ee:9b:90:99:64:a5:99:54:d6:
3d:a1:39:d7:15:3f:72:48:c1:17:eb:1a:e4:23:3b:f7:dd:b2:
64:06:67:3c:9d:f1:ab:68:4e:44:83:4e:c2:48:8a:4a:07:1f:
2e:cc:10:1a:7f:93:fa:a6:fa:4b:69:8d:af:9f:af:14:81:9b:
e6:9e:90:d0:b7:3d:2d:f6:6c:33:23:40:c8:17:c3:a1:b6:6a:
7d:a8:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 09:52:37 2026 by rpki-client