Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: 3UPmDEP6I0vStatX5AKUwWMJ2y8eqdt7PElCkGx0uCU=
Subject key identifier: 6E:CE:AA:19:49:E3:C9:AE:56:E4:42:44:68:47:D7:E9:4A:A4:4E:13
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019CE4B5785B15D655B790BE59A4CA49B40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 01:00:23 +0000
Manifest this update: Fri 13 Mar 2026 01:00:23 +0000
Manifest next update: Sat 14 Mar 2026 01:00:23 +0000
Files and hashes: 1: 39SWcIru4OOLf3jMU1giDlE-804.roa (hash: VHGE9nOLuGsrrsrjhfRfN6xG0b3Ab1haHqJsSirwxJQ=)
2: q2Eizro8coJ0vQbXr19bHJH4bc0.roa (hash: tmAf20SndhrgKXo0idQ98M/X9oFaPmCTdoXsGpxVz5o=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: PZp/CBcvKVIFtpe9mnPfJeCm0J0/NOdQjRMJVMyFRms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:78:5b:15:d6:55:b7:90:be:59:a4:ca:49:b4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Mar 13 01:00:23 2026 GMT
Not After : Mar 14 01:00:23 2026 GMT
Subject: CN=6eceaa1949e3c9ae56e442446847d7e94aa44e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:ba:24:24:71:b2:5e:32:3e:9e:5a:9e:02:
25:af:6f:01:01:96:23:ce:4f:ed:60:f4:9d:46:13:
82:95:4f:11:7b:fe:3e:66:e9:0e:b3:53:49:0f:96:
33:fc:47:2f:ca:b2:73:62:3b:1d:27:40:13:16:fd:
0f:44:95:b8:15:1e:fb:26:04:9e:6b:d7:cc:ba:7a:
3c:1b:9e:70:da:f4:29:a3:17:5b:3a:39:cb:c1:b1:
4c:b8:53:44:4b:bf:2a:5b:6d:36:7e:2d:92:08:58:
18:31:c7:29:9c:fc:0c:c2:0b:0e:f8:06:1c:38:5b:
91:fe:fb:15:02:4d:b1:05:20:17:66:f8:2f:00:49:
35:c5:91:85:8e:5b:f7:03:9e:b6:47:44:03:6d:52:
f8:3d:d4:9e:8e:bb:9c:21:ee:f5:59:24:ca:f7:61:
a5:a1:81:b0:64:f5:ef:0a:f0:b3:66:91:e8:73:26:
11:4a:1b:e0:8e:ba:c3:f9:e4:ff:0f:62:9c:49:ca:
a8:52:2e:67:f1:b7:14:cc:57:6f:6e:2e:3a:84:58:
d6:7e:99:56:12:bf:b0:40:b8:c1:22:a4:a3:ba:a9:
df:6b:17:4d:2a:95:a8:54:2a:b6:b8:c8:80:fe:73:
23:f9:a2:ec:a4:32:a2:d2:ee:11:d4:d2:ac:ca:4f:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:AA:19:49:E3:C9:AE:56:E4:42:44:68:47:D7:E9:4A:A4:4E:13
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d9:78:df:66:82:f1:0f:76:24:c9:84:4f:5d:6d:c0:6d:e5:
bd:6c:a0:c6:fe:2b:16:15:44:c4:93:dd:29:a2:d8:3d:3e:2d:
24:df:58:97:cf:f5:a5:38:3a:17:84:18:16:27:df:f1:c4:34:
a4:d0:d2:7b:09:b0:ae:c9:1d:90:e4:b9:03:dc:fd:b5:ee:af:
b0:87:bd:22:35:f0:84:15:0a:4a:4b:a5:ea:d0:96:72:a6:22:
2f:ae:9b:8a:55:5e:53:d5:74:93:ee:20:3e:cf:54:fc:82:bc:
f9:9a:b5:fa:5a:31:02:cd:3f:d9:50:a4:54:96:e4:29:f0:1b:
53:64:28:a0:db:6a:6d:c7:1a:bc:50:37:6f:5d:ae:1c:15:49:
9d:6b:e9:54:11:43:65:8d:1c:9f:70:48:13:0b:be:a9:2b:e2:
06:49:10:7f:96:c1:c0:28:b6:0e:15:52:59:4b:76:aa:71:91:
8b:32:17:47:3f:39:42:97:83:e0:00:77:a5:de:d8:b2:c8:f6:
42:bb:04:81:65:9f:c9:5b:d3:3a:40:c8:89:0a:0b:1f:5d:9f:
d0:63:24:9e:69:3f:85:94:e9:4f:86:2f:64:2d:d2:16:46:e0:
48:ac:70:49:7b:90:22:f1:4e:9a:b6:f5:f3:53:fd:c3:bf:ec:
77:46:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:13:29 2026 by rpki-client