Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: tf3bu9CJOG9HVLu6M5E/iV/1CQ9bRAZIVxzffoDfKHA=
Subject key identifier: 04:3B:16:2F:98:35:82:CF:2B:74:0D:6D:A2:46:B7:27:00:E7:00:B4
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019CE52370F02C70063DF84121A74CAEA1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0CB6
Signing time: Fri 13 Mar 2026 03:00:30 +0000
Manifest this update: Fri 13 Mar 2026 03:00:30 +0000
Manifest next update: Sat 14 Mar 2026 03:00:30 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: y1K88ZERF8KlApNYV9bYfD/EwssMJeAgYr1Qu4paYX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:70:f0:2c:70:06:3d:f8:41:21:a7:4c:ae:a1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Mar 13 03:00:30 2026 GMT
Not After : Mar 14 03:00:30 2026 GMT
Subject: CN=043b162f983582cf2b740d6da246b72700e700b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:b3:71:bd:4c:c7:b1:ce:d9:9e:1b:4f:8c:
12:43:a3:cd:04:aa:5d:d2:10:9e:f7:6f:2c:d8:ba:
e7:c9:6a:87:01:40:02:b3:21:ec:6f:c8:3d:51:7d:
34:81:ff:4f:18:af:1f:84:77:75:c0:d0:51:d4:7e:
b0:19:c9:e7:e0:97:45:b7:f5:58:7b:5c:cd:e1:6b:
7b:77:89:f3:fd:d8:75:48:67:34:6c:3a:03:d0:72:
ca:51:09:7c:61:7a:88:34:08:09:e0:f6:2d:65:de:
7d:53:8f:41:a6:dd:f3:32:6f:d9:8e:29:17:bf:b5:
c0:c6:dc:1f:53:e8:74:62:95:24:8f:47:9e:e0:89:
cc:44:98:e8:82:b5:f7:23:c7:98:8e:a9:8f:30:b9:
bb:92:e2:9f:fa:c9:f0:de:45:7d:cc:1a:22:91:98:
39:e1:3c:d9:c3:bd:1e:dd:fe:d9:db:a0:1e:24:a3:
82:b2:ce:14:c9:4f:43:5e:4e:2c:91:62:f2:6a:46:
bc:3c:32:51:4a:3f:c2:78:fb:67:35:89:67:b2:84:
8a:15:de:f4:27:83:9f:b9:51:7c:9c:2e:82:09:50:
32:2b:b1:4b:2d:d6:5e:1a:bc:39:c1:f7:15:2a:8f:
42:3c:7b:6b:66:fb:92:83:18:9c:f5:0d:39:de:f2:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:16:2F:98:35:82:CF:2B:74:0D:6D:A2:46:B7:27:00:E7:00:B4
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c3:5c:c2:34:df:dd:0d:14:ac:45:9a:e7:df:0f:60:4e:34:
3a:d1:de:63:5a:ba:73:42:f3:18:83:65:b3:45:35:5c:e2:67:
0f:e7:a0:88:fb:3e:a8:49:6b:6c:de:a2:ee:e8:b6:ce:a0:63:
5c:23:47:6f:72:0f:5c:d7:58:db:93:22:5c:27:6f:c2:a9:28:
35:54:06:b4:ec:86:1b:1c:97:96:30:28:01:75:d2:14:74:5a:
57:5e:59:99:67:63:8c:76:ba:2b:44:c9:04:0b:c0:6e:b5:f1:
f4:20:35:2e:71:f4:17:14:06:2e:f6:dc:c9:da:1f:b4:3a:21:
bb:af:e1:02:e7:d7:9d:1e:28:45:fd:73:fb:f2:b9:0c:a1:a8:
ac:04:50:97:3e:77:2a:37:ba:06:34:b2:84:7b:50:92:1d:89:
78:01:aa:2a:e6:6b:f3:c4:5d:2d:dd:ff:1b:d8:ed:f5:59:f0:
bd:52:38:fb:3d:07:07:a5:b4:ca:2f:a0:7f:43:e2:cc:44:f8:
ba:da:6e:c8:7c:a6:d7:43:1f:12:a7:b0:cf:4e:71:dd:da:ce:
d4:79:92:82:b4:41:0e:ff:d6:a1:9a:bd:31:e8:21:a6:24:bb:
f5:c6:e3:22:c3:96:2b:cb:e2:2d:c2:a0:3f:38:46:24:72:22:
58:bd:1b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI3DwLHAGPfhBIadMrqHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjYwMzEzMDMwMDMwWhcNMjYwMzE0MDMwMDMwWjAzMTEwLwYDVQQD
EygwNDNiMTYyZjk4MzU4MmNmMmI3NDBkNmRhMjQ2YjcyNzAwZTcwMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWuzcb1Mx7HO2Z4bT4wSQ6PNBKpd
0hCe928s2LrnyWqHAUACsyHsb8g9UX00gf9PGK8fhHd1wNBR1H6wGcnn4JdFt/VY
e1zN4Wt7d4nz/dh1SGc0bDoD0HLKUQl8YXqINAgJ4PYtZd59U49Bpt3zMm/ZjikX
v7XAxtwfU+h0YpUkj0ee4InMRJjogrX3I8eYjqmPMLm7kuKf+snw3kV9zBoikZg5
4TzZw70e3f7Z26AeJKOCss4UyU9DXk4skWLyaka8PDJRSj/CePtnNYlnsoSKFd70
J4OfuVF8nC6CCVAyK7FLLdZeGrw5wfcVKo9CPHtrZvuSgxic9Q053vLXpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ7Fi+YNYLPK3QNbaJGtycA5wC0MB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMNcwjTf
3Q0UrEWa598PYE40OtHeY1q6c0LzGINls0U1XOJnD+egiPs+qElrbN6i7ui2zqBj
XCNHb3IPXNdY25MiXCdvwqkoNVQGtOyGGxyXljAoAXXSFHRaV15ZmWdjjHa6K0TJ
BAvAbrXx9CA1LnH0FxQGLvbcydoftDohu6/hAufXnR4oRf1z+/K5DKGorARQlz53
Kje6BjSyhHtQkh2JeAGqKuZr88RdLd3/G9jt9VnwvVI4+z0HB6W0yi+gf0PizET4
utpuyHym10MfEqewz05x3drO1HmSgrRBDv/WoZq9MeghpiS79cbjIsOWK8viLcKg
PzhGJHIiWL0bwQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:14 2026 by rpki-client