Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier: BKEGUK1rWM7qU7pH48+/mqGYhwko41LHCZwTLoIabvU=
Subject key identifier: 04:BF:59:49:AE:C8:1D:54:D8:47:3C:A2:5B:FE:08:3D:EE:54:15:F0
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial: 019EFD6022A79A45253A78BA67EA639EA5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number: 01FC
Signing time: Thu 25 Jun 2026 06:03:16 +0000
Manifest this update: Thu 25 Jun 2026 06:03:16 +0000
Manifest next update: Fri 26 Jun 2026 06:03:16 +0000
Files and hashes: 1: bKh-dpkoM8M1Du_IILRYX251fgo.asa (hash: oXXXPHkpG0X/cvCkTg371/ma/E5fJ7wCX5/lM1Q2pQk=)
2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: KveHSZXQheI3/PGWkq5V2MTLmWuqD+eDWN+i6hOlZ18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:60:22:a7:9a:45:25:3a:78:ba:67:ea:63:9e:a5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Validity
Not Before: Jun 25 06:03:16 2026 GMT
Not After : Jun 26 06:03:16 2026 GMT
Subject: CN=04bf5949aec81d54d8473ca25bfe083dee5415f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:5c:5d:e0:74:37:23:b8:0c:74:e8:9a:53:
e6:0b:cc:52:d4:c8:10:d2:84:96:c9:83:25:45:42:
85:41:ba:77:a9:3f:78:32:b1:2d:c9:7c:ab:70:38:
c2:93:86:9f:29:04:6a:d3:c9:4b:bb:1d:cd:1d:62:
4d:7e:ba:b9:84:af:74:79:42:79:06:72:89:20:52:
32:76:4e:e4:87:db:5f:ee:40:70:2b:5d:b2:f8:1f:
f4:f7:a1:74:06:7d:49:fa:62:ec:f0:00:e3:62:59:
91:61:32:8e:a1:af:b9:e8:d6:d5:ce:91:d3:84:a3:
85:39:f9:d0:fb:92:ee:71:a0:ba:79:2a:18:06:34:
ea:09:e9:9c:42:9d:73:b8:f2:9a:b3:36:24:d6:7e:
83:80:d4:18:3e:50:1b:ce:2d:06:72:4d:a9:54:1f:
0c:e5:55:a1:d6:b1:ac:c3:ab:c9:ef:b3:87:27:2a:
6f:23:34:4c:e7:9a:c2:92:fa:48:3d:95:80:03:16:
26:04:f2:8f:b9:ed:6a:da:07:9b:96:a9:4d:f8:70:
3f:c1:cd:4c:86:08:9d:db:82:c6:28:09:59:9f:62:
5b:c8:a7:e0:71:f3:5d:6b:b4:24:1f:d5:2d:4a:59:
0f:f8:a8:0b:e5:ee:e3:35:a0:a0:c6:63:4d:3a:f9:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:59:49:AE:C8:1D:54:D8:47:3C:A2:5B:FE:08:3D:EE:54:15:F0
X509v3 Authority Key Identifier:
keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bb:56:61:57:a0:bc:17:6b:30:26:fb:fc:11:9f:d5:a1:85:
02:0b:63:8f:89:e4:58:36:e9:c3:54:95:b3:4e:28:16:d5:3d:
91:b6:fa:02:3b:0d:c3:39:2c:24:46:b2:a5:a0:67:48:3e:28:
40:53:ff:cd:2b:0d:83:45:a6:ba:5a:f4:12:6c:88:a4:c3:f4:
30:9f:5c:53:f3:58:4a:ab:12:b6:25:e2:a7:ee:ff:a4:b4:80:
e1:f0:ab:53:0e:63:bc:d4:64:f8:7a:8d:63:f2:5a:3a:d9:aa:
e0:33:3a:41:f1:12:b0:de:bc:46:16:fa:21:88:0b:b9:99:a3:
9a:78:5b:54:8d:da:06:c8:d3:ba:a2:ab:d5:36:27:73:0d:e7:
75:53:05:c6:ec:87:6f:b2:00:52:74:c4:74:1a:18:5d:4f:80:
66:bb:d8:0e:ac:25:b1:3f:c4:83:08:25:d0:16:44:a0:c8:c3:
f7:c5:3b:63:46:19:1e:bb:fe:f4:7e:e7:bb:cd:9d:29:7a:0f:
c6:52:e7:1c:f9:e1:d0:3c:4f:66:72:6a:8d:df:4a:7e:e8:22:
c2:4b:9c:48:f9:94:cc:49:a2:1c:1a:d0:cc:11:10:5b:3d:95:
78:78:a4:29:3b:01:0e:3e:7d:4d:1e:9b:9b:15:62:c3:51:b2:
c4:2c:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:54 2026 by rpki-client