Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: SurMbwxPPf9NU0SrFtcqKqg20OQGuHgRnFeuOH1mco4=
Subject key identifier: BF:19:91:B7:3A:B3:F1:A5:DF:06:49:97:6F:23:4A:15:5E:01:FF:8D
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 019CA945883677BECE0E5B991F6B927162F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 0148
Signing time: Sun 01 Mar 2026 12:00:32 +0000
Manifest this update: Sun 01 Mar 2026 12:00:32 +0000
Manifest next update: Mon 02 Mar 2026 12:00:32 +0000
Files and hashes: 1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: ZMTAaXDD8mYxX4PUll4JusxH+6Sb5jG+V8kk2mpi5bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:88:36:77:be:ce:0e:5b:99:1f:6b:92:71:62:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Mar 1 12:00:32 2026 GMT
Not After : Mar 2 12:00:32 2026 GMT
Subject: CN=bf1991b73ab3f1a5df0649976f234a155e01ff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:16:06:f8:60:9e:c7:ee:8b:05:c5:8a:8d:
74:b0:c3:94:33:18:95:d6:ce:af:7e:fa:3c:d4:01:
cb:44:0c:1d:6e:93:cf:e2:f6:51:9e:78:50:97:75:
b6:cc:11:1a:b8:9a:e4:b8:9f:c6:9d:0a:80:28:5f:
c6:6b:82:cd:c5:56:31:a5:cc:38:43:40:81:02:75:
ef:92:e6:5f:e1:a8:95:e4:b1:5e:e9:8f:9b:68:23:
f5:22:6f:5c:43:c5:3d:b2:ae:20:45:c4:4e:98:7f:
08:57:a5:e9:94:32:e3:13:a6:c9:57:11:45:ba:ab:
1a:e2:94:50:3d:29:2a:1d:a1:09:10:f8:f4:d1:9f:
cd:43:18:1e:3b:49:0d:c2:46:b6:2e:4d:4b:98:8c:
71:1b:00:04:4e:3f:eb:87:a6:d1:ec:37:88:e7:1b:
91:0a:a1:26:00:d9:8b:7c:54:6b:08:25:10:b2:ff:
2a:54:fd:fe:94:9f:ff:06:fd:fa:f9:9b:5f:e0:f6:
ff:1e:e5:c3:a8:b2:1d:19:24:52:1f:1a:70:5c:dc:
f2:e5:3a:81:92:4b:e2:ac:bd:e2:cd:b8:e1:30:33:
32:15:37:ac:4e:f9:ce:36:ee:54:2f:6a:92:05:b5:
98:5c:c6:78:ac:2d:2f:37:83:e6:4a:6b:85:5e:b6:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:91:B7:3A:B3:F1:A5:DF:06:49:97:6F:23:4A:15:5E:01:FF:8D
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:92:71:c0:93:c7:2c:49:e1:6a:c5:85:d9:b6:22:e7:43:ac:
a5:44:ac:21:41:2b:91:66:4f:d8:b5:54:60:70:63:3c:b1:3c:
b4:96:78:7c:03:cb:0a:2f:a7:40:c2:73:a9:a8:db:2d:c5:18:
40:b5:b0:69:57:c6:7c:c4:5a:68:7b:b7:27:4c:62:f3:89:45:
93:a3:48:69:59:be:10:36:70:53:b1:44:cb:8b:ed:d4:56:45:
d8:7b:88:a0:68:3c:38:58:6d:e3:0e:6d:e4:29:fe:33:41:ba:
53:66:a4:0b:e8:e2:80:a9:0b:42:32:00:1e:e0:0c:fa:dd:ce:
b7:a7:a0:a4:5d:eb:f0:5e:95:41:ec:28:58:fb:bc:8e:e0:91:
5b:dd:58:2f:40:79:73:a0:65:cd:97:5e:c8:89:2d:f5:95:d9:
07:85:7e:c3:d1:fd:c7:69:32:59:1f:0c:0f:a1:81:19:4d:0c:
64:e0:1e:59:14:e4:5d:f6:70:19:bc:62:ee:84:be:08:56:e4:
78:d5:0e:15:e2:94:a3:f5:01:c7:5c:71:be:cb:e3:89:8c:38:
12:0d:f3:5f:ea:9e:c6:7a:3e:97:57:68:0d:98:6b:8a:5a:11:
02:d3:50:7c:1a:b2:14:af:58:ac:0a:1c:c5:9f:85:79:72:3d:
8e:a3:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:41:55 2026 by rpki-client