Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: 8KaWHj4IWG8zGcKzt6yfXCz6K0zumRD98DaZR8Ot1Dw=
Subject key identifier: 96:92:C1:2D:1D:10:A5:F9:86:0E:E9:C4:1A:CB:13:88:3C:9F:4F:AF
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 01A0BEE7D260B22CC2B7B712DDC858AE4096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 07C3
Signing time: Sun 20 Sep 2026 13:00:58 +0000
Manifest this update: Sun 20 Sep 2026 13:00:58 +0000
Manifest next update: Mon 21 Sep 2026 13:00:58 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: MzhlnEkPFfLYk1_xoS-eW2rxNzo.roa (hash: xES0NKYjiPe+r5Rk7WIVkRnpa0zN2uHpDR7T+kBqWs4=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: L7VHBHuqpsIk7uVE/vvriSypklP4VDCajmFKxaof18Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:d2:60:b2:2c:c2:b7:b7:12:dd:c8:58:ae:40:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Sep 20 13:00:58 2026 GMT
Not After : Sep 21 13:00:58 2026 GMT
Subject: CN=9692c12d1d10a5f9860ee9c41acb13883c9f4faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ff:ee:db:c3:e7:a2:7e:c3:a6:bc:a8:d3:fb:
a4:b6:d6:6d:18:c0:89:5e:95:8a:c4:ea:1e:cf:63:
f0:7a:5e:75:ca:18:55:5e:d4:7b:8c:a7:a8:52:f9:
0c:fb:3a:f6:2b:ca:14:6d:39:43:5a:fe:a7:63:41:
e3:68:af:17:0b:0c:ab:ca:0e:00:64:1c:31:ec:c9:
2d:b1:d0:e6:1a:49:25:9e:13:7c:6a:62:7d:89:cb:
cc:88:3b:73:a3:fe:83:8a:77:88:06:c7:64:37:67:
79:e0:c6:fb:d0:4d:75:27:7b:24:d4:0e:26:6f:ff:
3a:17:0a:df:4a:f8:ad:b3:4e:9e:30:62:ab:8f:da:
d9:78:e6:0f:6f:8d:cb:ae:28:64:20:40:45:e3:82:
4c:e7:98:93:78:64:17:32:10:f4:8d:01:c7:b1:d0:
66:1f:bf:5c:93:6a:fd:34:38:6e:8c:07:ab:31:cc:
b3:8c:04:89:92:09:7b:35:d4:45:bc:3a:55:25:78:
83:95:6e:f5:d7:9b:a8:4c:0a:14:84:84:b6:e8:60:
6e:28:d0:d9:64:fe:01:71:0c:8e:ab:49:96:39:3f:
55:48:16:4b:11:24:78:05:de:73:b1:ae:d8:b4:75:
26:91:46:c6:06:17:85:7f:d2:c1:89:15:c7:9c:1a:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:92:C1:2D:1D:10:A5:F9:86:0E:E9:C4:1A:CB:13:88:3C:9F:4F:AF
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:21:76:3c:2d:18:8c:05:84:3d:99:d6:4b:14:4e:51:89:47:
8d:43:a3:54:3c:76:ff:c3:55:6a:c6:ce:c9:25:43:30:0a:70:
ca:27:07:7a:02:a2:b0:6b:c3:50:02:c2:1e:50:62:ff:8f:32:
ed:99:7c:f9:fb:9f:f1:d4:30:02:95:fc:bd:60:23:04:58:35:
25:9d:04:62:8b:9c:b2:d3:54:a8:20:86:57:92:97:47:0c:30:
24:d9:1b:7b:a8:a9:aa:9d:92:96:fb:29:fb:fc:ee:fc:30:4a:
f6:e3:03:6c:cb:c1:88:e3:a3:31:24:0f:60:31:b2:53:43:c9:
74:17:12:1f:7b:1b:4a:89:01:87:df:74:d2:a7:85:40:b1:5a:
95:36:62:da:66:24:d9:8e:5f:52:44:81:7a:fa:47:01:8a:80:
45:5c:93:e1:e6:d3:86:8a:44:5a:b2:d8:38:df:df:dc:52:29:
ad:e5:c6:ce:4f:01:27:a9:d3:6a:62:8a:f0:ab:9e:8e:e7:8c:
7a:15:1d:1f:9e:a8:0f:d0:08:5e:df:9a:fb:4e:69:5f:9b:10:
6d:33:62:27:ba:ea:83:ad:06:62:c6:e4:4d:e5:d8:c6:f0:66:
c1:9a:8a:7a:56:ae:62:78:64:c9:32:78:bc:7b:02:c4:f7:21:
90:9c:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:35:11 2026 by rpki-client