Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: CfVza/QpW02hjLSuaYYsGbcEU6p6q57v/BUkJGYTymQ=
Subject key identifier: BC:04:D2:49:D6:74:C5:42:21:01:E1:27:6E:10:34:A6:64:FB:EE:64
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019D98BD9718A45A185A330E337BA4769696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0D13
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: Xjd3d0Xa47PhlP4lORsi632pngYG2P+A8/j8GLUKMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:97:18:a4:5a:18:5a:33:0e:33:7b:a4:76:96:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=bc04d249d674c5422101e1276e1034a664fbee64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8e:90:e4:9a:5e:d8:46:d8:59:75:45:83:af:
f1:ce:5f:55:e1:bc:cb:4c:c6:bf:76:67:bc:22:11:
e6:c8:6c:5f:13:fc:c8:03:05:75:c9:d0:e9:3f:a5:
12:85:1a:df:ba:5a:78:d3:21:da:8b:37:06:af:d8:
69:c6:69:43:f8:8a:36:81:08:bb:c2:5f:6a:73:bd:
1c:82:dd:6d:6d:54:f0:8d:35:0c:26:18:c0:a9:cd:
e7:e7:f6:88:ae:cc:a9:c9:9a:dd:5a:7e:a4:3a:5d:
ba:d9:8a:8b:d2:6d:7a:6c:60:11:87:e7:b3:e4:52:
6d:3b:f5:66:a3:89:b9:d0:f3:d8:56:d1:a9:86:0b:
b8:ae:42:f2:e6:ff:c2:41:b2:a0:d4:47:1c:b7:0b:
cb:74:ab:e3:b6:49:91:74:24:ee:92:54:cf:95:cb:
d1:96:3b:78:d7:a5:73:35:14:48:4f:14:49:a2:68:
2a:29:ca:84:1d:82:3b:6f:eb:8d:4c:bf:18:44:42:
da:39:8f:56:60:da:e0:be:01:71:d1:26:9d:50:94:
25:e1:13:a0:53:c6:87:c1:fe:6b:9d:77:46:14:58:
0e:29:75:df:77:b3:c1:98:4c:01:6f:57:b6:66:2a:
84:ee:b0:ba:f9:d4:c2:a1:f7:fc:e7:83:f6:c1:77:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:04:D2:49:D6:74:C5:42:21:01:E1:27:6E:10:34:A6:64:FB:EE:64
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:74:42:7b:4f:f8:7e:3c:a6:25:5f:3e:fc:63:25:8d:f8:
79:17:81:4f:5b:7d:7f:d6:f8:26:5e:d3:ab:6f:43:25:c9:ea:
48:aa:89:1a:76:7c:3f:fa:bd:2d:8f:ee:57:28:2f:3a:ff:d4:
b7:6e:05:86:78:b8:00:35:91:cd:47:46:d3:c7:60:0c:fd:9d:
a0:66:78:8d:0b:89:8e:92:c9:fc:50:b1:87:85:8f:aa:d2:a2:
7f:f7:00:90:84:49:7e:b9:f8:97:3c:fc:c1:94:d7:0a:21:d3:
7d:8b:ab:32:f5:06:db:ef:e8:05:cd:ac:80:0a:ae:f2:0a:a6:
cb:29:80:f3:3e:74:74:57:2c:c6:71:20:27:c6:32:81:7a:be:
25:d8:7a:05:29:b5:7c:54:27:e5:20:da:30:f1:c0:ec:cd:a4:
aa:2f:bf:2b:7d:d6:e2:0c:d1:f7:ca:a7:fd:a4:25:8f:7d:04:
9c:b0:4b:d3:3e:36:a2:af:f1:15:f4:9e:b3:b8:79:a5:b2:1a:
20:7b:55:5e:6b:37:99:27:2d:7f:fd:0e:3a:73:cb:5a:d4:28:
59:fb:e8:11:17:d7:53:69:06:54:7b:35:53:26:3c:d1:cd:2d:
d9:af:f5:f9:2b:44:75:e6:88:18:ec:69:9a:cf:4a:fa:a6:86:
a0:85:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:45 2026 by rpki-client