Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: 7mLHgr4roSWO+KMRX0iSvGpBwXrPmpSyTJGDS7q/8W8=
Subject key identifier: 45:BA:D9:6B:CD:52:EB:66:EC:25:1C:CF:B1:B8:F8:A7:DC:78:4E:64
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 01A0C7B3EE76E6D460AA5CBB08804CCCB840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0EB9
Signing time: Tue 22 Sep 2026 06:00:52 +0000
Manifest this update: Tue 22 Sep 2026 06:00:52 +0000
Manifest next update: Wed 23 Sep 2026 06:00:52 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: 3LTTcL15Y2tFLfycUtUd3Q7Ai4wDNv1hDNPpcVreve8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:ee:76:e6:d4:60:aa:5c:bb:08:80:4c:cc:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Sep 22 06:00:52 2026 GMT
Not After : Sep 23 06:00:52 2026 GMT
Subject: CN=45bad96bcd52eb66ec251ccfb1b8f8a7dc784e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:4b:a3:00:fa:63:a3:34:48:41:44:a3:f2:
0a:c3:00:46:28:7b:35:01:30:9a:21:21:ce:c5:a8:
c5:fa:58:b8:44:7d:c1:2d:b3:75:63:80:83:f9:aa:
00:6b:2c:6e:69:24:3f:68:83:5d:05:ba:15:12:b5:
58:56:70:4c:0b:53:82:c0:03:59:58:5f:bc:af:7c:
6d:f5:fc:2d:2c:d7:3d:4f:52:32:0d:73:8f:c0:d1:
a3:e6:4f:74:0e:1c:42:9e:fa:8d:f1:9e:e4:45:31:
5f:28:cb:8b:ec:3c:49:df:9a:18:8e:34:1a:e5:2e:
c5:1a:d7:ce:64:24:39:37:d9:9b:17:00:07:bf:94:
8d:0f:87:24:e9:54:88:62:03:c6:f3:da:d7:48:49:
05:a3:db:ff:1a:8f:3d:81:16:e3:5a:da:d7:a0:44:
13:f2:b6:62:d3:b0:4f:c7:a7:b7:82:fb:48:9d:29:
e3:d0:ec:33:76:d6:f0:2e:0a:e2:e7:d3:2c:bc:b3:
de:53:18:be:a8:82:9a:fc:8a:00:4d:fe:4e:39:a7:
67:67:7d:4a:24:1e:cc:ee:25:15:0c:d4:ba:81:e2:
d9:24:1c:c7:0e:be:a7:4e:3a:d5:92:43:5b:f8:a0:
71:cc:0d:cb:db:26:40:b3:e2:27:3d:1a:d9:1d:fa:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:D9:6B:CD:52:EB:66:EC:25:1C:CF:B1:B8:F8:A7:DC:78:4E:64
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:6a:f4:81:79:c1:1f:7f:fc:fd:9a:cb:9d:cb:e9:08:49:
c0:8c:ec:93:be:62:11:c8:52:fc:98:66:c2:df:7e:41:9b:45:
11:3e:51:0a:c7:6f:c1:d2:21:b2:55:d2:dd:8c:47:ba:c0:8c:
17:71:38:5c:b7:2b:e7:e5:7e:91:82:fd:8d:29:04:a9:d4:ea:
80:a9:e5:67:6e:8a:3b:1a:f3:15:f5:3a:68:7d:46:9e:bd:45:
65:9b:ba:43:83:1b:89:13:06:e3:d6:84:06:90:80:78:94:56:
cd:fb:16:6c:d9:9e:bf:ef:b8:8e:6c:73:29:89:7a:73:f3:b6:
72:67:10:99:26:12:a0:86:7d:09:d0:f0:be:a5:9a:98:ec:5b:
0d:18:c3:6b:38:b8:be:4f:f4:6b:f3:17:8f:01:43:ee:9e:c0:
4f:7f:79:2e:b1:00:b6:4b:fc:43:e1:c3:7f:a7:9b:09:9a:49:
d1:a0:36:75:06:34:81:ab:d4:1e:b2:c5:4d:a4:1c:d2:57:a8:
9d:6c:f1:b7:7a:9e:c4:66:1a:60:25:e6:f3:b9:94:54:5c:d5:
66:7c:1d:49:22:33:d9:1e:71:8c:2f:2b:1c:ce:4d:90:6b:ce:
56:77:e7:e9:aa:2d:e7:65:f2:ad:ee:f1:86:1c:33:fd:a7:fa:
94:cc:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:48 2026 by rpki-client