Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: pdq8f1FTIXobgNpXSy/BqkkNRu1E53fNwhbZ7yQ/ON0=
Subject key identifier: 86:87:A3:D4:AB:70:F3:E7:ED:11:74:87:F7:0B:A7:6D:6D:BE:46:CE
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 01A08BD5E7AB280B2BCCE3FC2EA6EECB8583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0E9A
Signing time: Thu 10 Sep 2026 15:00:46 +0000
Manifest this update: Thu 10 Sep 2026 15:00:46 +0000
Manifest next update: Fri 11 Sep 2026 15:00:46 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: xw5TTq4XeIibfmjoOEx8DCrxLQL5F82SeksjgloxjeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:e7:ab:28:0b:2b:cc:e3:fc:2e:a6:ee:cb:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Sep 10 15:00:46 2026 GMT
Not After : Sep 11 15:00:46 2026 GMT
Subject: CN=8687a3d4ab70f3e7ed117487f70ba76d6dbe46ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:5f:12:b6:f1:20:02:10:92:e0:e1:28:3b:
03:87:cf:28:80:62:f6:4c:f6:a1:40:fc:e7:a2:bf:
fb:8b:3e:e1:f5:18:12:55:4d:b5:a0:25:c7:43:cc:
ac:33:8c:21:8c:11:88:e7:a9:84:49:58:36:fa:ad:
16:63:e9:6c:b3:1e:22:86:a1:df:26:c4:4c:41:24:
e0:ec:de:d1:16:eb:3d:84:48:bf:de:4e:4d:a3:07:
bc:c3:ce:b6:d1:bf:37:27:a8:b2:69:74:37:02:52:
80:b2:3a:33:c4:ac:b5:93:35:c1:16:6a:16:eb:be:
06:6c:04:c3:a5:5b:00:ad:47:f2:2c:d8:42:bd:f8:
ae:f7:bb:7b:b5:dc:7e:a4:e2:03:97:8d:7c:9d:3b:
24:4f:2a:3e:6f:a8:74:95:cf:08:50:19:7c:b8:d3:
3b:d8:38:3a:0f:d7:08:9e:6c:c7:b1:61:00:88:09:
c9:b5:e3:0e:11:50:5d:4f:ae:37:3e:b5:e3:60:5f:
ff:74:35:68:f0:bb:99:c5:fb:ba:5f:df:65:7d:88:
15:62:cc:b0:15:64:bd:67:08:97:14:ea:33:72:ce:
ed:f7:ab:d2:e8:f5:29:89:f2:5f:06:8a:16:20:ba:
15:06:fa:32:6c:67:a9:7e:ed:b8:33:c8:0a:64:7c:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:A3:D4:AB:70:F3:E7:ED:11:74:87:F7:0B:A7:6D:6D:BE:46:CE
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:98:01:bd:34:9c:94:3a:fa:de:09:5e:68:2a:e1:33:d4:3d:
fa:13:fc:bb:8b:f7:2d:d0:66:a1:ff:cb:a3:f9:95:f9:09:2b:
5a:2c:cc:e5:31:0c:67:43:e1:31:69:b9:c7:10:62:54:11:be:
d9:51:24:7c:16:c0:cf:0b:8b:14:5b:a3:3a:9d:78:ef:04:47:
7c:ab:e6:23:61:ce:43:1d:8d:e1:a2:a6:93:21:ca:5a:aa:a2:
bf:c5:7d:e0:3b:76:04:9b:24:25:56:72:aa:88:f0:ce:00:b6:
34:ec:7f:5c:7c:da:66:3e:64:02:09:6d:eb:45:1a:f8:b9:c0:
61:e3:c8:6d:a9:eb:60:9d:8c:d3:f0:e3:f0:82:2a:53:67:0b:
bc:54:4d:53:fe:0c:28:63:22:8a:c5:43:c0:1c:d6:74:72:2a:
30:9d:f3:ac:07:9e:f8:01:c8:c0:8d:33:6a:d2:3e:e1:40:0b:
88:3e:88:81:07:5f:07:41:a7:81:6d:a8:75:09:a0:5a:e0:ad:
5a:b2:90:44:6e:d8:13:87:7b:6a:46:28:61:19:a3:c4:8e:5b:
13:e0:e9:48:0a:dd:27:9c:bc:c0:9a:83:5f:b6:29:c8:53:f4:
b8:1d:ed:9e:b0:c5:76:ba:9e:9b:d1:f5:b3:19:6c:2c:f8:09:
5a:68:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:34:46 2026 by rpki-client