Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: ULB562pFl0koWiHx2F1bwILc/9+8VP6PkhEJT4jCFWU=
Subject key identifier: 74:C5:6F:D0:C4:35:F0:27:F8:0F:37:C4:3F:41:75:A9:B5:92:AD:59
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 01A18307C83A16DF5549BB5C4A852CEC818E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0F1A
Signing time: Wed 28 Oct 2026 15:01:27 +0000
Manifest this update: Wed 28 Oct 2026 15:01:27 +0000
Manifest next update: Thu 29 Oct 2026 15:01:27 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: VwWdUmfJ+ZY/Hsyj7rdVeUWXl2aAL/esmfR55MihEdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:c8:3a:16:df:55:49:bb:5c:4a:85:2c:ec:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Oct 28 15:01:27 2026 GMT
Not After : Oct 29 15:01:27 2026 GMT
Subject: CN=74c56fd0c435f027f80f37c43f4175a9b592ad59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:da:f9:4b:6b:a5:88:a3:29:c5:e4:81:48:
83:6a:33:2f:fa:50:68:8a:cd:db:87:0f:c8:c6:f1:
17:65:6e:4d:f6:93:c3:5b:c5:11:8d:16:c3:26:a1:
06:b3:5f:61:ce:3b:e6:41:7c:c2:46:b7:99:5a:75:
f6:c2:79:9a:80:6f:eb:ac:fb:c7:e6:28:e0:65:60:
fd:5d:c3:a9:87:b5:89:70:e1:10:d2:a2:60:27:0c:
5f:86:90:54:35:2c:a8:fb:22:e0:ef:75:8c:63:06:
6f:ae:1a:e8:e3:8d:57:12:9d:bb:85:cb:69:e0:56:
1d:a7:a3:25:ce:6d:56:12:56:6d:ae:0e:9d:96:76:
ed:2d:59:3f:34:54:7d:21:a8:2b:35:23:fd:a9:52:
f4:c2:f0:43:77:55:97:b4:58:9c:41:9b:ab:e4:1b:
17:40:a4:ef:bf:55:f4:62:8a:41:b0:49:07:6d:13:
71:de:34:29:11:ed:3f:89:52:98:7b:09:b4:59:df:
f5:70:66:c8:a5:d0:f3:32:54:37:73:a7:ae:08:00:
b8:b7:f1:50:aa:a8:03:a9:03:a2:f4:91:a7:c6:72:
4b:18:e8:87:53:a5:0c:32:6a:f7:3a:75:27:5b:00:
51:50:f9:77:cb:43:15:4b:c1:b9:37:ae:89:24:82:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:6F:D0:C4:35:F0:27:F8:0F:37:C4:3F:41:75:A9:B5:92:AD:59
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:18:28:92:9e:d2:60:94:9f:94:3a:23:a0:10:63:c2:a2:88:
47:a3:ce:4a:3e:a4:69:1f:c1:37:b8:eb:4b:c5:d1:a9:f8:6d:
bf:09:77:04:c4:63:3f:82:e7:da:f8:cc:d2:32:0d:6d:42:2c:
a1:c7:ce:2a:6c:e7:87:5e:1c:6b:36:35:a5:e2:72:4f:5f:a2:
03:5a:e9:4b:48:01:0e:3a:be:01:2b:b2:94:8b:1d:aa:c3:7f:
03:88:b0:bb:99:d5:7d:1b:c8:cf:d0:2d:65:d9:d2:7f:7f:57:
51:83:d9:12:be:93:07:b0:d4:4d:e0:65:f7:c0:e0:3b:d8:66:
05:ab:5b:21:d9:72:34:2b:80:a3:e9:2b:10:88:20:4f:db:55:
19:81:f6:20:4b:78:60:9c:8f:86:18:c2:61:5e:b3:7e:f6:b4:
80:2f:32:4e:cf:79:84:3d:6c:87:b0:70:85:b4:4c:2e:b4:f6:
5e:99:6d:73:71:18:5b:4c:16:ee:34:83:b6:a1:d7:60:81:f8:
ed:c8:95:5d:b6:ea:01:47:c0:2b:98:61:e5:84:a2:a9:12:1d:
cb:c5:5a:45:e7:21:2a:87:21:d6:57:34:17:d5:af:b0:68:37:
ba:e6:5c:03:80:b9:30:71:65:97:38:9e:fc:f6:70:ee:03:15:
3f:72:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:47 2026 by rpki-client