Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
File: v02QFSU9d7e4q3m7vrs-_LdCwvE.mft (raw, json)
Hash identifier: 3UBjUScvq+XJIKI1CByskbjWMuOfSotKHpnDDQJ4fHI=
Subject key identifier: E8:B9:55:3E:94:FD:B3:8F:2D:40:03:7B:71:6B:34:56:E3:D8:6B:12
Authority key identifier: BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
Certificate issuer: /CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Certificate serial: 01A08A8CD76AA23AD2BFD80BEAEE8F6722F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:21 +0000
Manifest this update: Thu 10 Sep 2026 09:01:21 +0000
Manifest next update: Fri 11 Sep 2026 09:01:21 +0000
Files and hashes: 1: LLW6KMEjDdWJNHccooMhS8WkJBo.roa (hash: 4wPZvW7aabauk/AVllnR9557p3pfAAJeEY/OlA5nxV8=)
2: azhaK6p4TY581nFNN0YSc0NYZII.roa (hash: D1i0KlyPZu/BLyg50mMb9PNPD0ML3cRf92lF5p6N+zc=)
3: v02QFSU9d7e4q3m7vrs-_LdCwvE.crl (hash: qhSqtm/LyOhDHb6I/N64KIS0d91M1THSj6OiHkEkkFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:d7:6a:a2:3a:d2:bf:d8:0b:ea:ee:8f:67:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Validity
Not Before: Sep 10 09:01:21 2026 GMT
Not After : Sep 11 09:01:21 2026 GMT
Subject: CN=e8b9553e94fdb38f2d40037b716b3456e3d86b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:76:1e:20:8a:19:71:26:72:4a:ac:fa:77:
1d:dd:9f:36:82:27:b2:db:11:ed:b1:eb:7a:69:a1:
f3:5a:67:0f:e4:1e:4c:67:8d:e8:96:e6:da:84:fc:
fa:98:75:4e:3c:5b:8f:10:e7:d1:6f:47:a9:ea:99:
c9:e3:56:19:95:ea:0c:9b:69:40:79:e6:2f:7b:80:
35:21:60:ba:4a:6e:43:d7:80:55:d9:fd:24:f1:cd:
5c:0f:ed:ba:da:71:69:62:2b:32:83:0d:c9:f3:09:
cf:ad:92:bb:2c:83:9b:61:cb:62:a0:3b:6c:b6:12:
e4:27:9d:2b:41:1d:c3:cc:d5:6d:9d:40:08:19:98:
a1:b7:48:d1:cb:6d:db:7a:bc:c9:90:be:eb:3e:c4:
b1:cf:58:9b:06:91:c0:ba:97:81:f3:e3:ad:37:6f:
f2:bb:c3:97:83:ef:e8:78:19:b2:16:fc:75:ba:ba:
15:9b:d7:f3:ab:f8:9d:63:78:3a:86:8a:d9:d0:12:
fd:94:a4:39:2e:4c:6a:8b:df:e2:0c:7d:38:57:db:
0f:a4:34:b9:2d:e7:c0:7e:0f:a7:53:77:2f:b5:c6:
b6:98:80:f9:25:87:a3:12:c4:17:7a:99:4d:fe:f8:
4e:c5:58:db:c5:48:01:54:c0:61:87:3e:35:92:fd:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:55:3E:94:FD:B3:8F:2D:40:03:7B:71:6B:34:56:E3:D8:6B:12
X509v3 Authority Key Identifier:
keyid:BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:db:b7:54:44:77:a1:66:cd:bf:34:e4:d3:1b:02:4c:ac:
fe:d8:14:16:8d:1e:87:08:5e:86:7a:8b:e7:f3:22:cd:dc:9e:
8c:6a:e6:a7:e3:d2:c8:3f:25:96:9d:e8:23:83:c5:b8:33:76:
c1:8d:62:ee:2c:fe:b6:79:d4:65:98:1c:a2:d9:98:48:dc:87:
eb:34:da:93:d0:15:24:d4:d9:4d:06:8c:f4:de:c0:9c:f5:83:
82:a6:bb:53:b4:9b:01:9d:ef:7b:f3:02:6b:87:8d:06:a9:ed:
67:ad:73:26:3f:26:f2:ce:79:3a:13:2e:b9:53:3d:f5:75:28:
f7:23:24:01:e3:8b:18:1a:32:7b:de:96:82:bd:21:a1:6a:17:
59:80:c8:3b:12:68:f9:e5:4b:9b:67:67:4a:85:a6:73:6d:c0:
77:bb:ae:31:d0:bf:2a:52:32:26:0d:9e:c6:3e:de:29:bf:c2:
35:68:59:7a:93:69:41:84:93:7d:7f:ee:aa:2b:39:f1:19:e3:
a1:51:f0:a5:54:d0:fe:ed:d1:72:d6:20:20:a9:33:af:69:f9:
bf:8d:28:28:d7:3a:eb:c5:3d:94:09:c4:1a:dc:a0:76:4f:f2:
03:26:03:86:08:67:ff:fb:14:13:b1:cd:15:b7:d7:66:5e:2a:
1f:a7:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:30 2026 by rpki-client