Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier: Ppo/VL6rF5ASzXKx+uDQiIexKPZMi5ACl1v2/ur0nLA=
Subject key identifier: D7:4B:D5:18:80:08:C6:2D:9C:2F:7F:03:63:BF:1A:8A:92:E7:74:EE
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial: 019D37F7080F30F2F2D9B94C0300079B8A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number: 1186
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: S6cfSB1H_ps_kH_S0XDtasvicvA.roa (hash: xt44QNEN7hPpzFoxnaD4gxZK8ZilzAgXn7bld09Oo6g=)
2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: a2x+nKupltolzjON9WsJWmDinLKwajk5V2YywsE9S2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:08:0f:30:f2:f2:d9:b9:4c:03:00:07:9b:8a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=d74bd5188008c62d9c2f7f0363bf1a8a92e774ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:82:1a:b2:a2:77:31:a6:a3:36:3f:75:bf:
3a:b1:ce:cd:9f:b3:d3:1a:a5:a3:c4:04:11:b1:22:
91:a2:75:91:ce:00:c3:ca:c3:30:9d:d7:f5:3a:2a:
e7:c1:de:9a:3f:ac:55:3b:2b:e4:2a:0a:43:68:6b:
1b:1f:72:39:c0:34:d8:6b:a0:75:c1:1a:38:4e:c3:
7c:a4:6d:97:1e:46:0c:7b:30:c5:c3:7e:1e:30:fb:
10:f9:ba:7f:34:11:a7:24:ca:2d:9c:b2:a2:44:02:
52:32:1f:ed:07:02:61:66:5f:85:3a:96:59:bd:e3:
ac:d2:e2:ad:d7:e6:08:14:3f:29:f2:34:89:f5:b4:
60:f4:cf:94:fa:01:e1:33:51:a8:3d:c5:ff:ed:47:
04:50:02:d1:e9:36:33:e8:29:fe:f7:1b:3f:6e:89:
a2:76:aa:2b:99:f0:a7:0c:01:7a:ba:8e:42:36:da:
32:62:9d:ef:cd:aa:4c:02:a5:b6:84:95:8d:c4:9b:
00:ab:51:e8:a9:81:a3:5c:55:8b:05:27:5d:77:0f:
60:f1:70:1d:2c:d6:21:3e:bd:07:00:14:dd:9c:c9:
38:e7:2e:75:dd:72:1f:09:80:05:29:43:aa:1a:64:
45:fc:2d:38:82:c1:d1:0c:58:a5:5f:bd:fe:3a:1e:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:D5:18:80:08:C6:2D:9C:2F:7F:03:63:BF:1A:8A:92:E7:74:EE
X509v3 Authority Key Identifier:
keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:29:22:f4:0d:9e:66:59:11:02:5e:c1:d4:2f:a1:fc:0b:d2:
2e:42:23:88:2e:cc:4d:ee:09:74:6c:67:fb:d3:36:83:c5:99:
16:80:4d:bb:fe:f0:18:10:42:a5:28:d1:d5:13:4b:fe:be:91:
ae:33:3f:ec:aa:d6:6f:cc:12:19:05:7d:2d:4c:5e:5b:2a:bb:
ac:6a:1d:83:6d:f0:32:d5:6c:03:ae:32:60:0d:9b:b0:cb:5c:
19:4c:54:00:80:05:a9:e1:32:2b:ff:aa:99:56:c5:46:83:0e:
a9:eb:6a:c9:48:9f:cf:91:7a:ff:5e:b6:8a:af:bd:c3:0a:d6:
24:f6:67:3c:19:a6:ca:ab:e1:2e:33:07:88:da:38:b4:05:0f:
69:25:81:a0:47:8b:98:76:5e:31:67:dd:c6:88:a3:e6:01:6c:
94:6e:49:85:ca:5f:7d:69:8d:0e:cd:4b:7a:ea:90:4b:3c:63:
f9:8a:41:61:fb:c9:4e:e0:2f:0a:be:80:4b:07:c1:db:04:f1:
7e:de:33:8c:d1:4f:53:90:c1:f5:9e:dc:c8:eb:f6:0a:ad:5f:
3a:e7:c2:5d:62:a6:65:0d:ae:9d:11:78:2f:7b:3a:dc:ec:a2:
ca:50:00:86:ec:f5:92:10:03:71:11:b0:22:b4:47:a5:e9:12:
fc:58:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:38 2026 by rpki-client