Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier: BxNQkbUEQuKuRVBpQnfwwdsDPrb2m+h1i9tGT/UuWBU=
Subject key identifier: 48:61:FE:7C:3A:E0:E4:EC:38:3F:EF:15:07:49:65:CE:F0:53:26:85
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial: 019CE259911D6A3EF748C5BA0989AD2B65B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number: E4
Signing time: Thu 12 Mar 2026 14:00:46 +0000
Manifest this update: Thu 12 Mar 2026 14:00:46 +0000
Manifest next update: Fri 13 Mar 2026 14:00:46 +0000
Files and hashes: 1: rANm87WqORmafEWHghrrK-0l72M.asa (hash: Fgz6vPciEn1J0Q0dP4IkhgZ0dZebnzwKhwY9olb/BWo=)
2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: h01i8xUaGkv3rjXt6jVYVJaOW0opzgqZCe2hPsw86+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:91:1d:6a:3e:f7:48:c5:ba:09:89:ad:2b:65:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Validity
Not Before: Mar 12 14:00:46 2026 GMT
Not After : Mar 13 14:00:46 2026 GMT
Subject: CN=4861fe7c3ae0e4ec383fef15074965cef0532685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:c1:ab:7d:d1:be:67:ee:d3:99:87:73:8d:
64:1b:cb:3b:38:d8:4e:62:19:d9:62:ca:42:7f:c2:
1d:a0:3c:0c:95:99:2d:8b:4b:2f:6c:6f:d5:63:1d:
ae:c2:04:08:c4:05:ac:c6:d8:85:30:85:51:a0:51:
db:24:4d:99:60:e4:e5:56:ef:bb:73:11:49:0b:fe:
ac:05:0d:38:01:7b:6e:0f:37:33:4b:f3:da:98:b2:
34:18:bb:a6:5d:0a:d8:71:88:3e:87:45:79:2a:88:
ea:76:97:d7:f8:c7:9f:45:f0:ff:39:6f:cd:73:03:
13:c8:03:6a:82:1a:18:fa:16:68:0c:aa:30:15:1d:
8d:58:66:b6:cf:1d:aa:43:bf:82:e1:6b:7c:0d:05:
04:32:b3:99:0d:37:bc:db:8b:81:73:91:5b:d2:83:
2b:52:bf:6e:3c:2a:c7:b5:f8:11:f5:92:3b:ce:52:
71:c6:dc:cb:36:f5:08:96:b4:3e:9b:0b:89:ca:0d:
ac:db:4a:0a:96:e3:98:54:83:af:1b:22:b0:91:30:
46:83:bc:38:0c:c9:41:81:29:a6:29:97:09:db:19:
d0:0f:35:7b:98:19:ba:f6:96:7d:61:a9:09:b9:bf:
02:60:1c:e5:1a:51:2a:b0:67:85:17:e8:36:9d:8a:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:61:FE:7C:3A:E0:E4:EC:38:3F:EF:15:07:49:65:CE:F0:53:26:85
X509v3 Authority Key Identifier:
keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f8:97:54:2b:e9:fc:09:f7:a7:a0:b1:2f:70:0b:79:4b:18:
b1:bf:15:55:3b:4f:40:ae:a3:2e:89:d2:16:7f:e8:db:69:f0:
ab:87:7d:9d:60:1a:ce:d0:26:6e:41:da:53:b7:53:e4:76:af:
15:4d:c7:06:3d:f6:23:a5:e9:72:ec:c7:cf:e8:bf:22:72:dc:
ea:68:f1:70:ed:91:e2:80:a5:4b:71:2a:48:dc:ce:2f:6a:5c:
47:26:fe:cb:ad:ea:c0:12:dd:f8:b8:80:6e:ca:1a:ed:38:ec:
6b:0c:32:1d:98:79:dd:b1:2d:5f:53:7d:74:a9:64:cc:53:c9:
3f:43:ce:9b:4c:0a:41:77:47:3f:0a:f7:fd:b1:a6:5f:26:da:
72:4f:a9:d8:12:d1:1a:8c:71:d1:5e:28:ae:87:a1:b7:fc:76:
4a:3d:7d:0f:7a:55:22:8d:aa:39:42:17:59:7b:1b:a8:ee:b3:
12:74:1f:cd:80:d5:81:99:87:6a:a8:9d:29:28:14:20:be:b9:
1e:3c:47:a6:d9:a1:a3:87:82:f8:7e:93:b8:c3:46:80:ee:36:
71:39:dc:42:74:ac:55:2a:ef:58:77:e2:69:3b:78:74:ba:18:
33:30:82:e7:c9:18:a5:15:10:e2:51:dc:21:07:23:f0:27:d8:
70:f1:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:13:41 2026 by rpki-client