Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: tWdY3hoHGqMzsG9kp2pStIgpU8tKou9qiOCNt6hLXc0=
Subject key identifier: 84:56:14:AB:2D:8D:99:F2:12:EE:CA:81:7F:9B:15:44:71:7C:CC:C7
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 019D389BE83B0678334A7DB28D7785F8C306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: zOouZDp+zB1DqYBu+YjX/Cq3se+yJXJ4PVRtlwl5TDg=)
2: owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa (hash: 9TpRwQpuHtfrhW+ZMSGdpj4DGSlbRkJ1Rg7NyhKguk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e8:3b:06:78:33:4a:7d:b2:8d:77:85:f8:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=845614ab2d8d99f212eeca817f9b1544717cccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:e7:e3:de:52:29:46:21:6e:20:ec:7f:75:
46:fb:e2:ec:c7:00:90:04:1a:27:b0:f4:ec:41:01:
9e:a5:64:8a:c4:c0:c1:47:7b:fe:ee:57:19:59:f3:
1f:79:f1:32:6d:18:da:a4:20:db:b1:52:aa:be:24:
41:3a:ff:8e:f9:fb:78:9c:97:4d:2d:19:16:6e:e1:
c6:73:cb:07:05:a2:47:89:69:ee:20:f3:83:24:78:
ad:e0:ce:f6:98:8b:1c:2c:a7:32:55:fc:c1:8a:3b:
ee:fd:18:e1:32:9a:5a:e0:ff:bb:db:eb:92:65:07:
3a:f3:ed:73:db:a5:58:f2:0a:57:86:c2:df:f8:01:
74:ea:a1:e8:63:85:7f:19:3b:b6:59:9c:c2:8a:21:
d3:e3:47:41:ef:ee:d4:9c:b0:a9:c9:b6:f1:0c:8f:
ea:70:85:5b:02:27:3f:7f:75:7d:da:59:3e:f3:d6:
ae:df:5c:74:3e:20:77:ba:15:7b:8a:2c:3a:76:96:
43:97:35:c9:be:ab:93:0f:3d:db:97:5a:b9:2e:e9:
04:3a:90:02:27:96:1e:90:a0:50:38:f5:d2:69:08:
aa:f8:ed:55:07:da:3e:4a:39:9c:e5:07:69:ce:da:
63:30:9b:6e:f5:78:91:33:56:77:db:69:20:42:52:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:56:14:AB:2D:8D:99:F2:12:EE:CA:81:7F:9B:15:44:71:7C:CC:C7
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2e:94:9e:8f:9e:d8:cc:35:04:ff:40:21:8c:f4:9c:c0:b2:
4c:99:bd:c0:d6:78:ea:5a:89:20:89:f9:75:91:b2:c6:90:63:
ab:12:62:17:4b:91:b1:3f:01:0a:c4:a8:fc:ba:b6:25:2a:9b:
6b:19:42:79:32:71:63:4d:45:ae:5f:46:f7:9b:d2:0f:3e:7c:
73:14:e2:38:14:23:8d:e4:7c:d2:a4:91:95:6f:77:8e:fa:8e:
87:a6:be:4c:53:97:0c:9a:ca:96:1a:1e:9e:de:f7:cb:d1:9a:
ac:0b:6a:6a:4e:f9:a5:d6:69:56:15:65:94:ee:63:d3:02:8a:
99:f9:21:a9:75:a7:1e:85:f6:de:cb:07:4e:01:74:a3:c7:25:
f0:35:2e:fd:7f:fe:00:39:40:e5:ee:a3:17:0b:be:33:47:a8:
5e:32:65:cd:7e:e1:e9:9c:93:ea:7c:52:ea:a3:b1:8e:ee:43:
ff:61:a7:43:16:d0:7f:07:30:23:cf:7c:ad:cd:a0:ce:7b:df:
97:94:71:9a:de:50:78:37:c6:e5:10:c5:d0:3b:43:4d:bb:27:
6c:77:3b:0d:68:1c:38:3b:05:28:a5:41:b9:b7:d6:8f:3a:de:
99:08:9d:cc:9e:52:50:f5:c6:e5:b7:0b:3c:81:cb:74:ad:be:
b0:59:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:42 2026 by rpki-client