Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: FBfmiV1y2wqNOzdbP1Uhev9UNfSWy+0s8SgCwoWLJpY=
Subject key identifier: 86:34:0D:64:9F:20:B8:5A:8B:E9:99:F3:D3:35:28:F1:92:EC:5A:06
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 01A0599F70E5D6A1A9BBCF8CA32C841D63F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 0331
Signing time: Mon 31 Aug 2026 21:00:16 +0000
Manifest this update: Mon 31 Aug 2026 21:00:16 +0000
Manifest next update: Tue 01 Sep 2026 21:00:16 +0000
Files and hashes: 1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: yH8HGI5vZZV92/HR5vcelyqV0dAZr5wAJS61Q4Umt4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:9f:70:e5:d6:a1:a9:bb:cf:8c:a3:2c:84:1d:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Aug 31 21:00:16 2026 GMT
Not After : Sep 1 21:00:16 2026 GMT
Subject: CN=86340d649f20b85a8be999f3d33528f192ec5a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:df:fa:2a:bf:fd:4d:8f:7b:0e:ee:57:8e:
4a:cd:6c:47:10:bd:e3:88:5f:ae:2e:ec:62:04:74:
9f:0f:48:c6:18:6f:83:10:9f:a7:2f:e6:7f:b4:be:
17:08:c4:d7:9c:f7:9a:0c:b5:74:32:6e:b1:69:1e:
5f:59:bc:7b:70:cc:11:1f:1e:ed:f7:93:3c:37:8d:
9d:fd:ea:1f:fe:b3:c0:75:2b:36:f0:97:20:ef:85:
e1:55:8c:94:98:49:37:4f:e3:45:d4:19:ce:9e:35:
2e:1f:96:94:36:06:c7:ba:9b:45:e6:57:25:5e:00:
46:f2:d0:b7:94:fa:46:f2:df:5b:18:98:ee:8a:75:
4a:18:b6:e5:da:3e:08:05:42:e6:26:00:0c:38:00:
fc:c9:56:82:8e:f3:27:ae:c3:3a:ec:5e:07:c4:a9:
c7:ae:4a:83:16:f3:e8:bb:4d:fe:31:e7:0d:99:ff:
a2:72:10:fa:bc:92:93:38:d4:32:fa:4f:93:a5:51:
83:04:97:eb:a4:5e:ea:22:e7:43:74:a9:a8:d1:45:
9e:88:3c:ae:6d:45:44:44:51:8f:bb:3c:2c:ee:b6:
2a:67:40:64:9d:cc:f6:f7:46:0d:67:1e:68:34:db:
1a:d3:28:79:15:83:8d:17:e7:c4:37:c3:2b:26:4b:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:0D:64:9F:20:B8:5A:8B:E9:99:F3:D3:35:28:F1:92:EC:5A:06
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f6:6f:36:8c:69:16:29:24:1a:af:3b:bb:97:45:18:bf:40:
52:c1:cf:09:57:37:3b:40:fb:02:18:42:4a:68:67:d2:ef:bb:
c8:9b:c4:c2:89:9b:53:29:53:97:96:d1:b8:94:7f:cf:c2:21:
29:d8:15:9a:92:e0:95:64:7d:0b:4a:79:35:59:5d:49:ce:54:
03:6b:ec:14:2e:d2:50:34:89:8d:17:32:33:ee:c5:ec:7e:9b:
7e:69:02:5d:da:ea:35:40:86:eb:6c:43:5e:12:ce:a9:ff:47:
31:64:28:67:36:90:be:a1:59:8a:6e:71:fc:b6:b3:20:77:41:
ab:7b:53:13:10:28:c9:01:fa:42:ca:87:28:bf:4b:3c:1d:1d:
4b:27:3d:9c:e9:26:f5:8d:d7:6e:8c:98:61:04:dd:be:6b:f6:
21:7f:92:9b:4c:3e:47:6f:57:b0:4b:7b:15:24:dc:f8:da:bb:
65:ad:5a:fd:09:91:f6:07:6c:66:57:dd:28:16:2e:c8:71:f7:
23:19:2a:29:ad:07:3a:88:f5:35:0e:6c:05:c8:9c:a7:80:76:
7d:af:7a:e2:35:75:33:6c:67:1f:c3:8d:9c:4d:ed:8d:1c:51:
cf:38:9b:b6:09:b9:b2:95:4d:15:0d:34:61:03:a8:7d:fb:69:
e8:e2:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:43:09 2026 by rpki-client