Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: vyHaiK4JIq7OzuPo+AjYpUlz0BZYmF2QXP8+US+5Cqk=
Subject key identifier: 1A:39:57:53:17:FD:41:D1:0A:03:BE:52:9F:BC:CA:6E:C3:F4:39:0C
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019FAABEF6A8C0D7233FCA9C0EF8F1B2C1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0734
Signing time: Tue 28 Jul 2026 22:01:09 +0000
Manifest this update: Tue 28 Jul 2026 22:01:09 +0000
Manifest next update: Wed 29 Jul 2026 22:01:09 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: MzhlnEkPFfLYk1_xoS-eW2rxNzo.roa (hash: xES0NKYjiPe+r5Rk7WIVkRnpa0zN2uHpDR7T+kBqWs4=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: ObRX5mRckUtXSP6uH4e0K2LtsCqrE72Ili7BBt9iDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:f6:a8:c0:d7:23:3f:ca:9c:0e:f8:f1:b2:c1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jul 28 22:01:09 2026 GMT
Not After : Jul 29 22:01:09 2026 GMT
Subject: CN=1a39575317fd41d10a03be529fbcca6ec3f4390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:27:56:62:db:b7:49:08:f6:d2:4c:61:9a:
36:3b:97:4b:ba:00:68:09:77:8c:31:8f:b8:11:e3:
29:93:96:c8:3d:7e:9e:00:17:bb:f8:6b:58:dc:94:
e5:4c:75:ee:4e:54:d8:68:20:1d:61:5f:c2:06:c4:
1b:37:27:b1:8a:21:ef:a0:2b:59:d3:3d:99:a4:e8:
a6:97:ed:6d:05:b6:3c:15:5f:5f:46:c2:de:5a:a2:
46:da:fa:2e:c9:b6:56:e4:ec:da:89:42:99:98:34:
bc:29:37:22:ee:a5:29:a4:39:aa:d9:75:49:2e:7c:
d1:b2:12:91:b0:d7:96:f3:27:9b:7b:a0:34:0c:63:
89:79:04:43:96:53:65:6d:e2:ec:a9:70:dc:e0:18:
97:a8:2d:36:30:2e:e4:f4:3f:ad:90:4f:fa:cc:0a:
ad:ac:0d:76:b4:0d:33:aa:87:19:db:a7:31:78:60:
8c:26:b3:af:35:5f:80:68:39:8d:00:1a:c8:2e:0f:
ed:4d:8e:f9:15:5d:86:a9:18:ab:dd:ab:ac:49:a4:
35:7d:60:95:03:9f:63:a2:5e:4f:fd:b2:40:e5:9b:
1d:e2:8a:9c:05:9c:0b:08:75:3d:85:00:1f:e8:f3:
b6:3d:b8:1e:95:fa:79:f1:e1:a3:98:e0:4c:af:5b:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:57:53:17:FD:41:D1:0A:03:BE:52:9F:BC:CA:6E:C3:F4:39:0C
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ab:fd:ef:3e:95:4f:3c:cb:8e:98:63:52:52:93:0a:78:88:
02:57:3c:e4:bc:af:24:72:71:5e:a7:4f:75:94:fa:cd:a3:73:
e6:6e:32:66:8e:ef:53:f9:a9:15:5b:66:3d:c0:4a:23:95:7d:
14:bd:7c:e0:65:74:62:50:52:bb:bd:c5:af:82:84:c8:e1:a3:
a3:b9:92:93:40:59:fe:ce:9d:e9:cd:45:9f:5c:fa:c0:bd:dd:
6b:19:2f:aa:2e:85:52:86:a6:44:8e:19:d2:a9:dc:0f:88:46:
cc:51:60:a7:64:21:ed:1e:f6:25:d8:23:80:00:75:85:ce:98:
ff:88:8a:32:18:61:d2:6d:ba:3b:ed:39:be:4d:a8:b4:31:7e:
81:7e:0e:65:74:43:95:72:1d:b8:ae:4a:df:f7:0c:17:51:d2:
3f:7d:a7:05:db:c3:bd:e0:bd:78:97:eb:d3:58:1a:93:ee:9d:
22:d9:a5:59:71:af:9a:8d:d4:35:8f:d5:2c:36:0a:d9:c8:5f:
e6:fe:1b:e0:7e:80:62:b5:d9:07:47:6b:75:74:be:f9:af:45:
01:db:13:e2:d6:de:f2:d7:ff:c8:5f:c3:b1:90:0b:f9:a3:10:
72:76:f6:44:5c:fc:ef:80:43:db:8d:17:34:f0:cd:e8:82:44:
7c:92:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:20 2026 by rpki-client