Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
File: dA31rF75UxiFm7Y-wU5HNCohboU.mft (raw, json)
Hash identifier: vs3fCV8ORv+CwcWw4SzuThVwqJA1xL2rWA2Cswb8bZk=
Subject key identifier: B0:95:77:02:E5:81:5A:C6:8B:34:3C:C8:07:20:AD:6C:6F:BE:AA:94
Authority key identifier: 74:0D:F5:AC:5E:F9:53:18:85:9B:B6:3E:C1:4E:47:34:2A:21:6E:85
Certificate issuer: /CN=740df5ac5ef95318859bb63ec14e47342a216e85
Certificate serial: 019D382E624F06A7FE789F0785C9CFEFD65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
Manifest number: 9F
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: NbaTUfMsk7ejX5MZafYZHxonFQQ.roa (hash: D+/uSGFAXyKao2IQp+J+3qbr0DJSF7//qXrhMJ0x1yA=)
2: dA31rF75UxiFm7Y-wU5HNCohboU.crl (hash: OzNtRp1xbjdhPFG5Mu4YZekfixVOlawzW3329iLebMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:62:4f:06:a7:fe:78:9f:07:85:c9:cf:ef:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740df5ac5ef95318859bb63ec14e47342a216e85
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=b0957702e5815ac68b343cc80720ad6c6fbeaa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:de:df:bb:9a:7e:9c:91:fe:c1:bf:e5:0a:
30:f7:93:4a:45:c7:21:2d:0b:94:21:05:9a:cb:d3:
d0:56:18:99:76:0a:d3:cf:e5:39:0b:b3:9b:86:16:
5a:d8:de:ff:31:30:b2:55:cc:e9:65:4f:77:a4:64:
63:2d:64:df:79:18:96:9b:eb:bb:9e:b7:7f:74:29:
e7:db:5c:fe:c8:fa:57:08:f0:4d:17:fb:80:93:52:
fe:2d:f5:fe:26:d9:b7:51:08:2c:e1:50:32:3f:c5:
10:2b:a5:aa:9e:5c:72:c0:d3:64:b9:9f:7c:50:1c:
cd:72:da:62:6e:37:27:81:8b:9f:b0:71:a3:f5:7c:
82:65:02:6a:be:09:a5:dc:b8:9c:b4:9f:f4:2e:60:
d7:07:f7:15:eb:be:c2:e4:34:c0:e7:61:13:97:29:
c1:e6:25:74:3e:71:9b:7c:bb:b2:6d:3c:6d:34:7f:
d5:fd:48:ef:8b:a8:19:0c:ab:e3:25:f1:15:8a:b5:
c1:81:17:18:98:f1:9f:a9:63:bc:49:40:e6:ab:23:
6b:a8:d1:5b:f5:86:5f:86:44:4a:fc:ed:bd:a0:38:
8a:5c:6c:24:3b:7b:8a:f7:91:f2:82:f3:e5:3f:bc:
9a:e6:b0:56:57:bc:8d:13:a6:63:ed:79:f7:e6:85:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:77:02:E5:81:5A:C6:8B:34:3C:C8:07:20:AD:6C:6F:BE:AA:94
X509v3 Authority Key Identifier:
keyid:74:0D:F5:AC:5E:F9:53:18:85:9B:B6:3E:C1:4E:47:34:2A:21:6E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:bb:72:33:2b:a7:e9:36:83:41:70:67:03:64:8d:41:48:07:
e1:db:1c:80:50:0c:90:9e:57:88:61:70:03:12:36:e6:80:cd:
8c:70:0e:ac:0e:ce:ce:a8:2e:27:9c:e7:e4:41:cc:ad:91:06:
0d:16:53:d7:2e:20:92:44:bc:fc:58:4c:a7:cd:8a:e5:2f:84:
b1:42:ba:22:71:17:ba:be:4c:d3:b9:89:8f:2a:e4:37:17:38:
64:44:84:ea:1c:3a:b2:1e:91:52:ec:81:b0:b7:b5:12:fa:6d:
18:82:6e:ef:7b:87:73:46:ab:43:35:e5:c0:d1:6c:de:af:99:
8d:85:fc:65:d2:3a:58:05:bb:62:23:4f:cc:56:5b:26:31:6c:
bb:db:dc:11:2b:23:e0:8c:39:94:92:d8:52:3e:39:14:cf:35:
74:06:a8:d4:da:90:28:79:d0:ad:8a:79:c2:ad:10:7a:ce:6a:
5b:e3:42:30:db:69:e4:40:27:6d:da:4b:ff:6c:36:d0:bb:74:
40:b4:93:d2:84:9e:a8:e8:6f:7d:74:9e:2a:63:d0:9f:53:bf:
bc:a6:76:77:fb:89:b5:17:c9:2b:e1:24:1a:de:45:66:34:8c:
67:a4:32:39:39:8d:60:46:d2:a2:f5:c7:f5:87:a9:99:7a:21:
fb:c0:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:22 2026 by rpki-client