Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier: pfA5KDIxTKu7j3XRPNBvrXY20AVfeiHaLO7Y/O2JoxY=
Subject key identifier: 59:72:FD:AF:3B:13:96:8C:34:3B:95:81:14:8A:C6:55:72:BB:CD:9E
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial: 019FA74FFF7F80D351EEC5B7912194F12CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number: 0254
Signing time: Tue 28 Jul 2026 06:01:05 +0000
Manifest this update: Tue 28 Jul 2026 06:01:05 +0000
Manifest next update: Wed 29 Jul 2026 06:01:05 +0000
Files and hashes: 1: bKh-dpkoM8M1Du_IILRYX251fgo.asa (hash: oXXXPHkpG0X/cvCkTg371/ma/E5fJ7wCX5/lM1Q2pQk=)
2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: 8JZXMnV7PS5FWCvgzWCY6Ak18VXb81UqUm1ZSLOuKX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:ff:7f:80:d3:51:ee:c5:b7:91:21:94:f1:2c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Validity
Not Before: Jul 28 06:01:05 2026 GMT
Not After : Jul 29 06:01:05 2026 GMT
Subject: CN=5972fdaf3b13968c343b9581148ac65572bbcd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:94:f3:59:b7:63:53:63:64:68:a5:df:f3:
d9:ce:4e:74:88:b3:38:56:e5:df:a7:52:54:a4:66:
9f:8e:ee:f5:f4:9d:47:0b:29:25:ed:90:dd:86:da:
8f:b9:5c:13:bb:9e:11:15:11:e2:c8:2d:36:33:ca:
8d:a2:a2:d1:86:e1:21:6f:e8:0a:b7:aa:74:02:13:
01:4b:f6:e9:b5:1a:7a:fa:c4:39:43:15:89:1a:f3:
34:b4:66:12:5d:0d:84:69:40:fd:04:90:1f:cd:0f:
2f:a2:32:44:ff:19:f1:04:91:63:14:56:87:d5:d1:
4e:f6:1c:4c:80:c2:bc:2b:33:97:32:ce:7f:2f:61:
fe:b8:d5:7e:e5:a4:21:61:0c:07:25:8f:f3:87:54:
a8:c0:8a:91:09:20:0b:2f:d3:99:a4:2d:0d:17:a9:
54:d7:a8:b0:65:e2:88:60:b2:31:7c:8a:dd:ca:aa:
a4:21:96:3e:a2:5a:45:fa:26:1f:c5:ba:ff:3d:86:
2b:91:06:3c:39:f3:ca:86:2b:d4:8f:ef:ce:e1:2e:
d9:45:f1:89:38:0b:62:30:91:10:53:c5:77:a1:8c:
db:61:be:49:ef:fa:d4:9f:de:c8:ce:ba:8a:ff:c2:
9b:e1:34:9e:49:6d:2d:b0:4a:d0:f8:e9:9f:82:18:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:FD:AF:3B:13:96:8C:34:3B:95:81:14:8A:C6:55:72:BB:CD:9E
X509v3 Authority Key Identifier:
keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:8d:09:03:05:81:b6:c1:72:5c:21:c0:9d:5f:f1:ed:82:
c0:29:d9:b2:a2:d9:5f:8d:ec:1f:93:af:a6:14:01:c2:0e:12:
8c:d3:4c:a1:63:43:d4:8a:6a:3e:2d:18:70:78:29:ce:bf:1e:
54:c4:c3:15:07:d1:af:81:e7:0a:45:52:fe:98:cd:32:58:cd:
dc:34:36:a9:5c:4b:b4:da:7d:5b:14:c9:73:a5:ca:bd:22:c7:
30:25:99:9b:fc:aa:4c:b4:90:c5:96:f7:29:3f:29:85:3c:d9:
8c:16:1b:69:40:1e:0d:f4:24:33:ec:a5:72:af:ae:74:4c:0f:
39:70:31:a0:6d:37:98:1c:b1:6c:91:e6:29:70:21:58:38:2f:
03:ce:fb:61:f8:e0:ca:e3:04:6a:25:81:55:53:8f:bc:9d:1e:
2c:73:f9:60:06:37:47:c6:55:82:54:92:ca:28:66:4c:e3:31:
d0:5e:93:9d:13:c8:cd:07:bb:97:64:42:b5:b5:d6:e6:d6:a4:
a2:3b:11:1c:95:00:e7:89:75:ba:3a:17:5e:94:f4:64:f2:20:
8d:f2:52:c3:80:16:a2:98:81:27:75:84:76:27:61:be:e9:32:
8d:12:2a:0a:bd:66:cd:8b:94:2c:92:e6:a7:4f:98:ea:48:6b:
e6:b8:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:07 2026 by rpki-client