Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: CNRfoK8/hCsbtaU6wx5ZqSTRKb4nLQ3eJLUHB1Z4wkA=
Subject key identifier: 8B:61:C3:D6:C1:B2:C1:9C:71:F7:4F:2B:9A:BA:E4:30:B9:58:C2:B2
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 019DA2657C509D471A605B98B7987EB01B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 01C9
Signing time: Sat 18 Apr 2026 21:00:52 +0000
Manifest this update: Sat 18 Apr 2026 21:00:52 +0000
Manifest next update: Sun 19 Apr 2026 21:00:52 +0000
Files and hashes: 1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: 1FfFK86FdxT16GhTiXKDQ+/1HEoNzmq8JzXnRX8z1Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:65:7c:50:9d:47:1a:60:5b:98:b7:98:7e:b0:1b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Apr 18 21:00:52 2026 GMT
Not After : Apr 19 21:00:52 2026 GMT
Subject: CN=8b61c3d6c1b2c19c71f74f2b9abae430b958c2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:9c:c1:9f:e1:ff:0b:71:c1:13:8e:20:a5:
bf:b8:89:43:91:c5:e3:bb:6f:d6:5a:65:91:f4:a2:
16:95:a0:74:a7:86:96:de:12:0a:00:e2:24:07:cf:
1f:41:e1:1f:3b:8f:b4:ec:f4:d0:7e:88:b0:bd:27:
7b:52:3e:51:69:70:c2:f7:56:77:97:81:83:81:3f:
77:7f:29:02:e7:26:b8:e4:80:9c:67:1c:41:f3:32:
29:24:59:12:ee:91:0e:75:46:10:21:be:ed:d0:81:
6b:10:6b:94:61:5a:76:e8:d3:40:26:c3:68:82:4e:
13:39:02:69:38:cd:4e:bd:6f:ad:4c:65:c6:f1:cd:
bd:55:7b:e8:65:63:16:84:61:12:fb:ff:11:d8:5d:
ae:33:80:60:e4:32:1b:f2:c6:da:4e:c0:14:37:84:
c2:89:7b:dc:2b:d8:df:97:5c:82:35:25:5e:31:63:
16:bc:7d:05:c5:8b:78:74:92:34:e1:f9:cf:34:7d:
49:a2:c4:7e:df:50:39:8c:84:e9:25:b9:d7:59:35:
ee:c8:1d:dc:43:42:3c:8b:81:29:08:e6:15:27:32:
9c:d4:d4:64:d5:aa:60:ea:5a:5d:dc:c9:05:1e:bd:
1d:03:de:53:0f:73:d2:7a:d5:4d:97:e0:c6:07:46:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:61:C3:D6:C1:B2:C1:9C:71:F7:4F:2B:9A:BA:E4:30:B9:58:C2:B2
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:43:b2:f1:96:a9:ab:53:28:56:c3:8f:94:79:db:9c:65:76:
98:99:38:78:1d:cf:b5:be:01:41:2e:4a:21:5e:70:97:90:7b:
d0:32:1d:64:41:d8:20:33:b7:8b:16:b0:35:ba:bc:28:39:ec:
74:d9:ed:83:d2:f1:cd:c1:99:9c:43:5f:2f:95:8c:7e:72:20:
75:2c:06:3e:66:14:19:da:9e:9b:c0:3f:ca:4f:66:80:8c:da:
f3:ac:ef:c3:fc:87:c9:20:c2:f4:9b:8c:8f:60:16:7d:95:5a:
a6:69:1e:c2:9e:24:b2:61:18:c2:c7:4c:9a:a2:18:76:ac:ae:
ef:55:0e:6d:ac:a7:68:4f:88:85:b7:c3:11:93:0d:4b:c5:77:
87:61:2f:1c:7b:79:25:bd:a1:70:94:16:a3:cb:aa:9b:81:9e:
f9:a7:b7:94:42:95:ef:09:4f:ff:6a:da:c0:81:f8:52:9b:89:
c7:d4:ab:cf:ec:ee:52:a6:0c:da:6c:75:67:64:39:24:31:c6:
db:24:9f:34:62:99:bd:14:b2:50:3a:8d:c8:01:fc:a7:5a:0e:
5b:aa:a1:b0:0b:86:b3:3d:f8:dd:1b:c1:f2:e8:5c:12:e6:c8:
b6:6b:77:4e:ac:fc:96:f1:3c:b8:d8:7b:00:95:86:1e:74:c4:
d0:c3:47:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:34:34 2026 by rpki-client