Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: E70nZoYvAWWamJIYIHUg3YvTUVAVszgIY4DiN48M1uo=
Subject key identifier: A6:32:86:32:0B:B9:E0:E6:94:13:84:F9:30:68:83:D8:1E:8C:08:23
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 019CAAC6B65EA2E7ED44823933C6828D128F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0C8B
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: 5POQaq2FIBregxvYNKnQ0LZ68eA.roa (hash: 3ZBwuPJNCoHXmfqEKRXgDso3hRBamUObQVJiGRHt5+M=)
2: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (hash: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c=)
3: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: RiBuaAn/yDCintB41TR9xVa9cKbmH+a7fhPz3cwVZpE=)
4: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (hash: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b6:5e:a2:e7:ed:44:82:39:33:c6:82:8d:12:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=a63286320bb9e0e6941384f9306883d81e8c0823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:d0:ef:20:87:c8:1b:8e:9e:53:ce:28:54:
22:fb:5d:41:2d:60:98:51:68:a4:f3:55:04:04:e1:
ed:c0:4e:72:d1:4a:5f:a8:90:e0:eb:8c:5c:fc:59:
a2:7f:ec:e5:01:de:a2:2d:6f:a0:66:28:a9:67:e9:
19:fd:52:23:b3:ad:e9:fa:fe:f6:4b:37:26:1d:95:
4c:b0:17:c8:08:3d:40:9a:a4:34:1d:74:bc:9a:eb:
46:3c:b2:f4:1f:1d:5a:67:60:7f:cc:3b:6e:8d:35:
db:48:ee:7c:f9:dd:cb:b6:6b:8e:0b:2a:3e:65:3f:
c5:e1:4d:38:35:16:eb:42:67:bb:22:a5:be:fd:dd:
8b:a8:c5:ae:4d:23:b8:f1:82:20:c7:1e:b5:fb:f9:
5f:41:fe:44:6d:d6:ab:a4:5f:f5:38:8b:89:68:42:
c4:a8:c5:fa:73:a7:f8:b9:cc:87:c7:43:46:6b:f1:
71:64:a4:d3:d1:50:b1:5f:56:4a:51:74:b1:38:e4:
45:49:bb:2d:64:1e:3b:44:cd:2f:7e:94:0c:da:c9:
0c:c9:db:af:e4:58:dc:61:af:92:66:b2:52:cc:5d:
26:0d:4a:ac:0c:2d:78:0f:d7:10:6d:49:88:17:6e:
68:eb:fe:cb:06:9c:a5:c6:98:72:dd:5f:f6:4b:a7:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:32:86:32:0B:B9:E0:E6:94:13:84:F9:30:68:83:D8:1E:8C:08:23
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:01:43:ba:3c:10:a5:64:21:ea:66:5f:36:b6:7f:ab:45:
66:58:c3:a3:5e:0a:e0:50:cc:67:82:cd:2c:f6:11:01:cd:2f:
40:b4:3c:53:af:b2:f1:4e:b6:be:1f:7e:e5:26:d4:08:c7:83:
a0:c5:76:61:25:e5:28:5e:ba:3e:54:79:b6:ce:09:fe:e3:e5:
51:f0:82:e8:69:0f:59:30:88:b9:f8:f1:16:18:0b:af:31:66:
23:7c:ab:fb:e6:91:c0:e5:09:08:ba:f9:be:1c:03:af:d3:c8:
ef:ce:2d:51:d3:39:10:5b:9f:85:8a:26:b7:8f:0a:05:b7:ec:
fc:09:e3:21:4d:e1:ed:6e:e8:24:1c:a4:2d:cb:1b:aa:7c:1b:
29:56:6f:b6:78:c1:6a:7b:a3:f4:2d:cf:95:b5:d0:f3:a6:5e:
9b:05:ce:3e:49:27:5d:bf:2d:74:f0:01:9a:b9:07:fc:fb:95:
da:17:64:d7:1c:19:f3:93:44:4d:cf:e0:c4:5a:b9:8e:27:44:
5a:74:7a:9e:93:b2:e1:5d:30:61:fd:d2:8c:c1:99:da:21:b8:
4c:c6:2a:78:27:78:f7:c7:94:e4:29:3b:c5:b9:e2:2b:8c:fc:
45:ef:24:77:02:f8:b5:2e:20:41:04:c4:c2:5c:d3:ec:05:cb:
55:eb:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:33 2026 by rpki-client