Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: SgnYZMuqfmJ4SwsBWlK40VJXXUCohvsyZsXtsj3gH/U=
Subject key identifier: A0:A9:8F:98:1A:1A:11:4D:B6:A3:85:FA:59:46:D7:6A:92:B4:F1:53
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019F122EA08C66419635E45D91801F7AB08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 198A
Signing time: Mon 29 Jun 2026 07:01:13 +0000
Manifest this update: Mon 29 Jun 2026 07:01:13 +0000
Manifest next update: Tue 30 Jun 2026 07:01:13 +0000
Files and hashes: 1: P2z60TT5kqB-d0NQ2XA4fLTFBz0.roa (hash: H2tzNdLvq80tMnAzPWbwLl8MIdAmcLNud7Ng3jnGJBE=)
2: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (hash: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: S9GrMyljMun3ZNMTWJmhGkbNDITU4S/j28uycq4VPYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:a0:8c:66:41:96:35:e4:5d:91:80:1f:7a:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Jun 29 07:01:13 2026 GMT
Not After : Jun 30 07:01:13 2026 GMT
Subject: CN=a0a98f981a1a114db6a385fa5946d76a92b4f153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:e0:74:2c:a6:34:ef:6b:8f:9e:da:5e:27:
b1:50:d1:c2:d4:f3:fa:8b:70:a9:c9:e7:a5:72:b0:
4e:a3:df:7c:a3:4a:8b:94:c0:8e:2e:61:af:34:ca:
56:b0:81:e4:55:f8:1c:a3:96:30:25:43:39:60:1b:
50:4a:85:5c:f6:9d:d1:c5:06:35:a1:21:0d:d6:f6:
eb:38:c4:34:ed:4b:61:75:45:28:44:01:62:9d:a6:
1c:55:56:ca:46:e1:b1:3a:70:cf:99:67:02:36:3b:
60:c9:df:c8:13:e3:9a:6d:b4:20:5b:06:24:1b:68:
ce:25:38:41:20:f3:d9:00:54:b4:a8:45:dc:b5:71:
8e:d0:3c:15:3b:eb:b1:fc:c5:df:09:20:f3:6f:9d:
12:5e:30:84:c3:44:7b:8c:00:07:b4:56:73:b1:05:
ce:2e:21:06:0d:51:fd:e4:bc:54:45:30:52:c9:29:
2d:45:a6:4a:1c:94:ff:2e:f9:e2:c4:4d:e3:a3:67:
d6:e7:3c:d4:d5:a9:ab:1e:59:d2:a9:4b:35:88:0f:
1c:9c:91:b9:be:37:73:d9:c3:d2:d4:8c:58:54:56:
f9:be:7c:94:cd:5f:1a:51:5f:81:8e:bb:6a:ba:29:
f8:fb:f2:98:a1:83:4b:56:e2:de:5c:e3:1b:19:68:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:8F:98:1A:1A:11:4D:B6:A3:85:FA:59:46:D7:6A:92:B4:F1:53
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:3a:c9:e7:7e:28:41:ec:0a:a3:0d:e8:0e:70:3a:c3:36:
ae:03:b0:a6:af:cf:a8:3c:ce:5a:08:d5:7b:c0:bb:31:56:d8:
7a:74:ce:d8:e7:fd:8c:2f:8a:14:d4:dc:9b:cc:5b:77:ec:6a:
5d:4a:47:6f:6b:e6:c7:4d:3b:8d:41:67:75:74:5c:8b:8f:1c:
96:c8:1e:15:3d:dc:ac:67:16:ca:50:35:e0:e9:59:33:09:64:
74:e8:11:0b:13:d1:25:f4:ad:ab:71:1f:76:6a:d4:48:d8:8c:
a8:a0:37:db:f7:62:b2:1d:ac:f6:66:f5:74:32:c2:67:c0:41:
9a:6c:db:08:76:9e:36:7c:c6:ac:fc:11:e0:ed:4b:92:18:c9:
29:aa:f3:45:03:31:ef:16:48:77:48:fd:cd:5e:d3:75:d2:c0:
7c:ca:be:dc:b4:30:20:1f:35:93:21:3f:1c:da:bc:15:6d:11:
7e:2b:67:89:79:51:2e:43:db:ac:d3:4a:f4:d8:8b:fb:7f:8b:
e9:a2:bb:48:fd:cb:e3:da:95:98:cb:ed:59:dd:4d:b3:64:48:
c1:bb:50:77:37:58:48:03:f8:41:f5:46:b9:4a:5f:05:74:7e:
51:61:82:01:84:87:25:28:c9:dd:f0:40:cc:5e:b0:9d:9e:14:
71:82:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:31 2026 by rpki-client