
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier: /0qqXOed+ulYoDH6C2ZXqkc8vrFj2ri2Tbno7tTfMZo=
Subject key identifier: 72:30:6C:BF:D7:27:1F:06:4D:9E:4D:24:4D:57:47:D1:25:FC:34:FC
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial: 01A0E8C0C600509D061624D075051520E46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number: 02FB
Signing time: Mon 28 Sep 2026 16:02:22 +0000
Manifest this update: Mon 28 Sep 2026 16:02:22 +0000
Manifest next update: Tue 29 Sep 2026 16:02:22 +0000
Files and hashes: 1: E4tododa1DMBDb2nJfBgbtqjzqw.asa (hash: wAdknpXHrfPEM6Cgm0cbnBJzkpf8rVj80G6Sq8iBZgI=)
2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: s4q7MJBctciXGgyPtILLsVAWr7YmsRUVdQkN8trF/mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:c6:00:50:9d:06:16:24:d0:75:05:15:20:e4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Validity
Not Before: Sep 28 16:02:22 2026 GMT
Not After : Sep 29 16:02:22 2026 GMT
Subject: CN=72306cbfd7271f064d9e4d244d5747d125fc34fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:98:b0:a2:e2:69:b0:c6:f1:9e:43:01:63:
c1:31:bd:ff:4c:86:01:ff:e8:e8:d6:aa:8c:2c:d4:
7b:97:16:d5:bd:d1:b3:40:fb:16:ac:01:d3:bd:6a:
c4:f5:2e:5a:45:40:85:45:62:3c:19:33:3f:75:a3:
53:cc:1d:4b:1a:49:08:3e:d6:99:06:40:ba:60:94:
b8:3b:10:ab:3e:5c:94:c7:d4:67:cf:b7:32:a1:c4:
f4:bf:40:85:86:58:bd:96:6c:e3:a4:2d:50:63:bc:
65:db:6f:12:dc:1f:c9:e9:3a:a0:b0:86:f0:b0:d7:
54:c1:0d:d9:83:7d:3d:4c:03:f9:b8:59:0c:c1:86:
68:17:ef:a3:3d:1b:e4:a9:5b:95:94:2b:23:90:0c:
83:92:2a:43:cd:8f:6f:d1:db:d2:db:c0:57:ee:48:
a9:b7:e8:88:cf:ba:1b:ea:87:cd:ac:e3:35:ce:33:
48:a4:f6:20:56:87:8b:a9:4e:54:1e:3c:85:4b:49:
6b:8c:60:ad:2f:b6:23:3d:2c:15:b5:da:3e:a4:66:
4c:7d:69:88:e4:be:28:1e:33:1b:25:b5:ad:e2:1f:
8f:33:0c:95:cc:80:b7:dd:1b:44:62:33:5f:ec:af:
7c:ba:cc:2c:51:3d:eb:a3:64:16:cf:f4:30:03:9e:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:6C:BF:D7:27:1F:06:4D:9E:4D:24:4D:57:47:D1:25:FC:34:FC
X509v3 Authority Key Identifier:
keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ea:a8:f6:3a:a8:44:e0:3b:8b:41:b3:5b:fe:29:c0:84:1d:
6a:99:93:45:7f:b3:04:71:e0:35:93:af:be:d9:f4:6c:5a:94:
ac:57:4d:c1:11:1f:ed:d1:73:2f:97:71:50:10:5b:9f:ef:e7:
89:55:9f:49:17:9e:07:9c:29:0e:30:9f:08:04:f1:9f:f2:71:
53:24:2a:b3:cb:e1:a6:7e:46:19:1b:c4:68:56:9e:b8:6c:4e:
a3:1e:a0:b7:78:9b:bd:df:2c:18:c1:af:23:8c:da:0a:c7:e1:
1f:d2:97:cf:a7:6b:5c:24:23:6d:4c:0b:35:6e:06:8d:ec:72:
f1:7b:a6:34:d3:4e:12:29:4f:ff:84:75:64:2c:8f:4d:90:9a:
da:da:39:11:12:0d:df:0d:e4:c5:1a:6d:f5:f2:fc:37:00:b8:
d9:63:c0:a1:2e:46:41:9a:5b:5b:ce:c1:2e:3e:07:21:00:10:
fe:cf:d8:aa:85:3e:3b:47:5f:75:48:b6:71:49:18:c0:29:9d:
b6:5c:77:cf:92:00:9c:ad:d6:74:b7:95:83:db:1e:b0:e9:26:
24:70:4e:cc:90:0e:53:08:d5:c0:b0:2d:9d:2f:7d:e0:fb:5d:
b9:6d:15:eb:33:1d:3f:57:44:63:e7:80:a5:69:07:20:5c:8c:
64:b0:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:06 2026 by rpki-client