Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: gj8EmiaH+eMnUoVy6cQLfmwG6ShsYB8MDYYMFICgbxc=
Subject key identifier: E8:15:8D:B8:F5:0E:DF:71:36:B8:18:33:2D:C4:E4:68:4F:C8:DF:25
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 019E9BF2C6E1D0AC1EF48DDCD93AC108FC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1947
Signing time: Sat 06 Jun 2026 08:00:39 +0000
Manifest this update: Sat 06 Jun 2026 08:00:39 +0000
Manifest next update: Sun 07 Jun 2026 08:00:39 +0000
Files and hashes: 1: 1-DKuT0Y95446hJar0aywH5NXXto.roa (hash: 4mgppEdu742P8IDESBHDFQTYQI/R8xwD+SJ+IXCYWM8=)
2: 6M-8u5qByP1ggl6JEnWWtX94ybY.roa (hash: l+WD+P0RUvIhdtRWjkkKIzP6RPO3rfOXr22R2FZ6eyo=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: 8ffkadfF1OEFSWI2doIDfg1R3R/H9csKtmt+eMCR5Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:c6:e1:d0:ac:1e:f4:8d:dc:d9:3a:c1:08:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jun 6 08:00:39 2026 GMT
Not After : Jun 7 08:00:39 2026 GMT
Subject: CN=e8158db8f50edf7136b818332dc4e4684fc8df25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:0a:a2:21:18:18:f4:96:d9:ac:08:fb:2a:
69:9a:13:25:7a:4f:49:61:1c:a8:5d:3b:57:72:2e:
78:2f:b3:79:6e:d2:31:ca:98:3d:22:0d:d7:80:92:
76:de:55:6c:3e:a6:a0:81:0a:db:58:4d:7c:bd:ac:
ad:ea:05:24:3a:2b:61:fe:3b:05:6b:28:81:2c:2d:
8a:54:88:16:88:43:d0:a5:98:cb:6e:d3:12:fc:51:
2a:b3:7d:c2:74:46:29:c4:35:e5:92:64:c6:9f:97:
82:e8:ea:77:af:78:de:09:0a:9f:82:78:0c:ed:a1:
0b:58:de:a3:9d:06:85:c5:01:42:ab:56:7c:47:6b:
87:37:05:81:45:33:57:21:17:34:87:b2:91:21:01:
89:52:84:f8:73:60:1b:7a:b4:ef:15:36:d1:0e:76:
a8:3f:92:6c:ee:69:56:69:9e:25:93:67:50:6e:87:
de:9e:6c:9c:c0:b4:ac:4c:9e:7a:5b:06:ae:71:ba:
9b:89:47:61:b3:1a:f9:ce:87:ef:ba:df:fb:53:5d:
78:2b:96:96:d3:3c:47:52:d4:e8:71:08:d6:e2:73:
41:77:f7:67:68:19:76:a0:b4:df:0b:40:65:a9:cd:
24:28:b6:bc:7a:ec:e2:3c:d0:af:a8:54:99:05:27:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:15:8D:B8:F5:0E:DF:71:36:B8:18:33:2D:C4:E4:68:4F:C8:DF:25
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:92:14:8e:85:38:51:f6:1c:a5:8f:2c:c8:2a:a7:b8:99:6b:
05:8d:3d:e4:e0:15:9f:12:76:6c:16:d1:58:07:af:57:a6:42:
b7:d4:0f:a6:da:3d:72:c2:c6:97:00:08:05:d8:2e:3f:c9:a2:
d2:ea:97:3c:58:50:86:39:88:6b:b5:53:e5:33:7a:21:01:a7:
5d:31:8f:00:71:e6:c3:2b:c4:c0:a3:4f:81:5c:c1:ee:e7:00:
d5:53:ac:a5:53:cf:f0:99:86:89:7c:56:87:1c:ee:c4:49:f0:
91:50:dd:27:b8:1e:f0:83:ea:fb:81:b5:4e:15:f4:de:9a:c9:
94:cf:c1:fd:47:d9:00:af:7f:44:04:0f:44:c8:4b:68:41:1d:
4a:e2:59:3d:79:6c:eb:7d:ee:c3:79:9b:01:ce:11:df:35:ba:
7e:12:37:9e:dd:2b:34:07:fc:40:ea:a0:7d:c0:ff:2e:2c:24:
cb:b4:23:ec:ae:52:7d:5a:0c:75:48:d3:bf:81:c9:8a:a0:39:
ac:f6:9d:e9:6b:42:dc:76:2b:21:6d:2f:5c:23:5b:81:e2:5b:
70:6c:8d:21:d1:99:bd:8d:4f:64:50:2e:88:2e:bc:18:1c:da:
32:d7:43:4e:1f:42:a3:ac:7a:73:a3:bf:5d:87:1e:42:b2:76:
50:19:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:00:06 2026 by rpki-client