Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File: v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier: zjpg7nObNATyhXbSknQQlqbdGTHhaSVS979zh6It+9U=
Subject key identifier: 22:FD:CA:A2:6E:61:3F:E2:CD:5E:0C:58:03:9B:5D:D9:63:22:20:2D
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer: /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial: 019D382E0DEA7D4A7716A9C825EC69B2D9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: hB5AbDSqiH4rz8B8k5IdA1nRfA0.roa (hash: tVKpwayqN7JLwz8QolMBhYOxzzJLIK1oL+xvKaEZs9o=)
2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: 7cZWjdI/YvG8Afn01kyBBNVpXlPBMESEiLBhNpPB/ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0d:ea:7d:4a:77:16:a9:c8:25:ec:69:b2:d9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=22fdcaa26e613fe2cd5e0c58039b5dd96322202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:85:91:43:e9:5e:b9:53:70:73:20:dd:24:
99:32:2d:ff:ca:aa:91:7f:51:ff:35:5f:e8:7b:5b:
f2:aa:b6:ce:ed:4b:cd:f0:6c:9e:ca:39:5e:32:bc:
d6:6e:0d:09:3e:53:2b:49:d9:cc:77:73:92:e0:23:
44:4e:5b:f2:b8:07:e3:31:1f:81:d1:20:22:18:fe:
d0:72:24:ec:4e:6f:83:37:e3:8b:c4:bf:40:bd:ae:
90:3d:39:d8:c8:77:cf:90:6a:89:ec:0e:df:94:1d:
4e:15:47:60:5f:4c:e4:48:03:1d:05:91:2f:fe:dc:
cb:2a:7b:2b:85:21:30:c7:8d:8f:fd:26:a0:e3:e8:
ca:5a:47:67:9d:f0:42:9b:99:a6:d3:0e:03:8e:83:
79:ec:12:fc:2e:23:bb:05:78:31:ab:99:c5:5e:34:
87:52:c2:84:d1:cf:26:51:b9:4f:44:43:13:87:9b:
71:e9:56:51:79:33:c6:9c:6f:93:b5:15:d3:59:6d:
fb:b5:1e:a0:07:5e:45:e5:4b:f6:64:4e:fa:11:4f:
f1:0f:76:2f:09:33:bb:72:55:a1:d8:6f:be:05:9e:
ef:3f:07:fc:e6:96:2f:33:5b:b5:8d:97:be:d7:7b:
81:14:9c:d5:f4:43:55:a2:e8:c3:ef:d5:b5:0f:a0:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:CA:A2:6E:61:3F:E2:CD:5E:0C:58:03:9B:5D:D9:63:22:20:2D
X509v3 Authority Key Identifier:
keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:15:6d:f8:73:1b:ee:b9:32:fe:c5:54:6c:bf:83:d8:08:5a:
31:9b:43:84:ea:91:80:62:4c:86:1e:c5:8a:bf:a7:79:f0:64:
7c:41:25:8a:c5:22:fc:83:de:cb:9d:b2:74:ab:06:2b:05:97:
1d:4d:d8:6b:92:2a:a7:03:a5:7d:5b:96:5e:87:11:24:53:e9:
92:1c:67:40:7a:0c:b4:a0:fa:19:f5:5a:15:12:83:16:82:bf:
81:dd:eb:a4:19:59:6c:77:90:84:61:e9:ee:4c:2e:ba:d1:78:
4d:7d:81:dd:1d:e4:18:a8:3d:c4:5e:0e:ef:bc:2e:a0:5d:a5:
56:88:81:20:5b:e2:be:0d:88:cd:ca:7b:c2:9d:f7:f6:7a:a0:
60:11:71:0e:60:84:91:a6:c3:0e:9f:ab:46:8f:e9:9f:5c:12:
dc:9e:c3:5d:0b:a1:12:f3:be:97:c2:9b:e5:a5:1c:94:44:8b:
68:d4:a6:7a:7b:0c:ea:ec:d5:1a:86:5d:33:15:aa:31:83:85:
02:08:a9:2a:2c:d0:1c:fb:80:f1:0e:ee:89:b8:17:90:eb:0a:
1c:20:57:62:b3:05:ce:dc:6f:57:8a:e5:82:b4:2d:0b:c9:42:
c1:97:e2:60:39:27:1c:d4:1d:9c:3f:19:d4:ed:d5:27:5b:dd:
32:2d:d7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:09 2026 by rpki-client