Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: UA1qLFcCyJzrfzPPCkPWp/xDiBkgcaA1K3v2OhudIME=
Subject key identifier: 41:3F:D3:19:6C:0F:1E:77:48:5F:E9:22:2A:61:F3:C4:CE:EA:DE:85
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019D371B62D4013C8F5B522C70474CEB37A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 01:00:34 +0000
Manifest this update: Sun 29 Mar 2026 01:00:34 +0000
Manifest next update: Mon 30 Mar 2026 01:00:34 +0000
Files and hashes: 1: P2z60TT5kqB-d0NQ2XA4fLTFBz0.roa (hash: H2tzNdLvq80tMnAzPWbwLl8MIdAmcLNud7Ng3jnGJBE=)
2: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (hash: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: GBohC5wYTOfMG0eXOWw1r8fRFwYKOZDbl9FleeBc59w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:62:d4:01:3c:8f:5b:52:2c:70:47:4c:eb:37:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Mar 29 01:00:34 2026 GMT
Not After : Mar 30 01:00:34 2026 GMT
Subject: CN=413fd3196c0f1e77485fe9222a61f3c4ceeade85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:c2:14:be:47:50:6e:17:6a:1a:66:38:32:
85:a7:1a:bf:79:c0:36:8b:be:3e:6d:fd:ff:bb:4e:
65:f5:ba:ff:85:47:e6:d3:c9:54:ff:49:8d:ae:18:
17:89:0d:47:6d:e3:b0:ce:86:f6:74:49:e1:c7:a5:
00:3b:55:6f:eb:f6:a2:8e:9f:a1:8c:00:93:87:53:
e2:d6:ad:9a:ee:ef:fe:38:cc:e2:8a:8e:d5:97:33:
a4:e3:26:c5:16:d4:35:dd:66:c3:fb:21:ed:a1:d5:
e4:34:b4:6b:d2:10:73:36:00:20:3f:db:81:6e:27:
6b:90:ca:38:8b:9d:8d:11:82:e9:7f:94:fc:d9:63:
63:b2:ff:00:ae:08:48:7e:86:21:7f:52:39:4d:31:
5d:08:50:b0:d4:8f:3d:3a:46:27:bc:15:7f:7f:f0:
c0:3d:4a:78:0c:f9:07:60:5d:0c:22:26:c4:4e:97:
0c:ce:a8:77:8b:44:af:3e:3d:33:6e:37:c4:93:63:
0b:58:21:25:7b:a7:5e:6c:70:c3:4e:9e:ab:b4:72:
94:2a:bc:e4:ef:65:98:0c:67:e3:80:25:94:ab:2b:
2a:3e:c1:11:31:1e:b4:95:b5:0e:70:19:a1:e9:25:
f6:1f:db:0d:cc:21:94:a7:82:f7:95:c1:16:61:d9:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:D3:19:6C:0F:1E:77:48:5F:E9:22:2A:61:F3:C4:CE:EA:DE:85
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:90:41:b6:cc:7b:63:4b:58:c2:a5:c2:7b:cc:5a:6b:c9:
52:2e:e8:55:22:1a:26:5e:8e:bf:16:33:63:9e:72:a6:ec:27:
32:dc:a8:73:1c:57:f6:c4:ed:56:61:2f:c9:37:e6:54:2a:e2:
e9:ee:00:6f:bc:b5:0e:8d:18:6d:9a:28:20:29:97:38:8b:7a:
60:e7:fa:02:8f:8a:4b:01:60:dd:5c:0e:37:7d:cc:27:78:b6:
56:91:e0:cd:d1:c2:6b:78:5b:70:e7:0a:8a:f4:e7:39:4b:07:
3f:5f:76:66:bf:18:38:f0:c8:6f:eb:ab:6b:5c:74:c7:fa:40:
68:b9:ab:ce:86:e9:68:c4:b3:6a:84:fc:2c:92:9a:30:9f:4b:
94:06:8b:0e:d4:02:02:a7:1e:1d:ac:11:8f:d7:6a:1d:5c:5d:
02:a5:e3:2a:4c:d4:86:d2:8b:9f:73:0a:43:92:c2:8f:3b:f7:
ca:00:91:1b:d7:bf:31:4b:78:74:0e:eb:f6:13:57:b9:ad:71:
df:89:3f:1a:46:7a:be:d4:5b:c2:57:42:06:c6:46:92:9c:d5:
3f:c1:46:9d:f0:a4:19:92:c8:40:8d:ad:2f:12:fd:61:4d:11:
0e:05:a8:46:0e:3b:ce:78:d5:3a:f3:49:3c:8c:36:a4:09:d1:
1d:52:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client