Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: e97tvjAkReSWZOgVHIlsjHI48n8ID7mtNQobK4oQSus=
Subject key identifier: 48:88:BB:E8:B5:1D:47:94:CA:B6:4B:F2:08:C4:39:5A:3B:BC:94:6A
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 01A128435112459798D617A8C4DEAD423811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 039C
Signing time: Sun 11 Oct 2026 00:01:02 +0000
Manifest this update: Sun 11 Oct 2026 00:01:02 +0000
Manifest next update: Mon 12 Oct 2026 00:01:02 +0000
Files and hashes: 1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: 8ioDu4lzdVpSEqEmOXj2QNb/tmqd5JR/q9PGtX3KC9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:51:12:45:97:98:d6:17:a8:c4:de:ad:42:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Oct 11 00:01:02 2026 GMT
Not After : Oct 12 00:01:02 2026 GMT
Subject: CN=4888bbe8b51d4794cab64bf208c4395a3bbc946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:0d:6b:c3:15:4b:46:26:8f:b0:b8:ab:f4:
7a:4d:d8:45:bf:17:08:8c:0f:54:80:15:23:98:91:
9a:82:77:34:31:8b:2d:a6:60:49:71:d9:68:c6:44:
c0:94:4a:8a:e6:72:69:34:f6:48:f1:30:a3:74:89:
5a:23:d2:e7:68:da:26:7a:cf:da:68:9d:5f:16:13:
1c:0a:7d:63:90:11:a3:80:1a:c1:c9:a0:a1:df:a0:
a7:ea:5c:99:a6:8f:fa:f4:c0:aa:30:3e:b6:e0:99:
92:74:75:74:e1:44:50:22:c6:94:c6:01:e7:ca:f7:
87:b8:ed:2a:bf:8f:a2:a1:f3:6c:cc:d6:1e:05:7f:
b3:e5:22:3c:91:df:37:ac:0a:d8:37:04:3f:f9:c1:
12:86:46:10:63:aa:93:f4:47:f7:15:21:80:ff:29:
71:ce:83:1f:26:bb:ab:74:99:82:fe:f9:5a:e2:36:
d5:8d:f3:11:88:aa:09:b6:cf:bc:2e:82:24:12:08:
c4:e0:f1:9b:00:6e:e4:3d:52:1d:8a:34:42:2f:7c:
51:0b:e1:f3:9f:91:bd:5c:b9:71:2a:3a:00:7e:5d:
11:c9:57:b7:08:3c:f8:6f:4c:27:83:d9:29:e7:4c:
bb:ea:e8:68:cf:40:89:b3:48:a4:2d:cb:4f:b5:b9:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:BB:E8:B5:1D:47:94:CA:B6:4B:F2:08:C4:39:5A:3B:BC:94:6A
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:14:b8:a6:a6:d9:af:16:3e:f8:b8:07:d8:f9:f9:c5:a4:47:
a8:53:56:b1:59:24:ea:4f:e2:f7:2a:aa:52:87:3e:18:cc:d7:
24:90:d1:68:89:81:c6:04:84:dc:d3:00:a3:58:86:0c:70:e2:
b3:77:b9:94:da:2d:78:e8:22:8b:66:15:06:57:ec:30:d5:f9:
5d:54:13:a4:98:d8:eb:3f:01:e3:13:fe:1e:17:32:27:06:17:
2a:86:3f:97:7d:a6:ff:77:b8:6e:ff:49:46:c9:13:21:3c:e8:
c6:d1:d3:9a:aa:1c:c3:eb:68:fd:e1:eb:86:a3:52:ef:6c:36:
b6:29:6a:d4:ca:7f:5d:2f:49:d9:c0:2f:e5:b3:d9:29:3d:52:
84:45:0f:c3:80:07:c5:f6:28:cf:e6:ab:51:04:b1:70:3d:5b:
a4:16:8b:4e:0a:75:ed:ed:3e:5f:00:ca:1f:ed:bd:0b:34:be:
76:fd:9d:97:fa:92:51:c3:f1:a3:2f:a7:d8:0d:57:3b:da:b0:
22:a3:4d:58:1c:72:8e:73:9c:05:25:73:da:64:fa:a4:dd:ee:
00:18:15:ca:a8:fa:c4:a5:ca:f3:62:d4:b1:0b:c9:d6:7a:f9:
4a:3e:d9:2b:22:e7:c5:04:c6:ee:fb:17:57:6b:ed:27:d7:2c:
3d:88:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:38:11 2026 by rpki-client