Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: ysbas6pbMSxwYR8JLRzQ7vcP5ioIqLnNU9/pyEtLwtE=
Subject key identifier: BD:55:35:64:AB:49:22:41:9C:15:C0:48:AB:9C:80:54:92:AF:2E:34
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019CAB33DBC43995DBA6081531856CB7D172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0C98
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: XzBjZsi0EXu/7YxggaG7tE83ramgl48ffQIsKMIuX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:db:c4:39:95:db:a6:08:15:31:85:6c:b7:d1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=bd553564ab4922419c15c048ab9c805492af2e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:9e:9c:62:9d:95:7e:11:65:8d:5e:ae:72:
cc:43:36:10:4e:4b:8d:b6:0f:d5:80:fd:ce:3e:70:
a3:89:23:4a:b8:6f:19:21:50:71:dc:cd:08:60:cb:
8d:ac:90:08:d7:ca:1f:29:be:a4:d6:ce:cf:42:5e:
bf:ec:d2:1f:76:14:49:4f:05:c4:6a:55:d6:bf:a9:
fe:f7:14:58:14:03:98:cf:c9:98:5a:a0:e0:2a:a0:
26:30:a3:4a:94:f0:0d:fc:c6:90:da:59:96:68:e6:
cf:ef:01:7b:ce:27:c0:34:68:f2:33:65:1f:73:2b:
39:6e:a8:99:93:a8:67:43:7f:45:e6:ca:7a:78:79:
b3:da:e7:0a:8f:4e:bf:ff:b5:92:69:da:f3:c4:d1:
b2:3e:56:7e:54:1b:4f:75:be:b0:35:a0:c2:cb:99:
d9:e7:36:e4:8d:20:94:c6:8e:6c:84:df:b5:25:30:
20:92:a3:8e:2b:3f:0a:1e:dc:6c:27:88:a3:f1:bd:
dd:3d:9f:71:c2:2a:01:af:fa:48:03:1f:63:f1:01:
cc:78:c4:c4:97:7f:f7:3e:75:9a:a7:b9:6c:e6:e4:
bc:5d:f6:09:73:a6:1e:5a:af:4d:a4:8a:a6:22:aa:
dc:f2:a8:e3:fc:ee:5c:69:ba:4a:80:26:41:7e:d2:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:35:64:AB:49:22:41:9C:15:C0:48:AB:9C:80:54:92:AF:2E:34
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:42:f4:3e:32:aa:ea:ee:c3:15:19:3e:29:3f:ad:4f:40:9a:
a4:50:53:00:2a:f9:e9:d5:04:8b:1d:24:33:cc:1d:8c:27:96:
3a:7d:24:eb:20:0b:f3:c8:8b:f7:f2:47:d8:c0:ac:dd:02:31:
76:01:37:fb:95:d0:b0:bb:84:ea:cc:cf:25:7b:bf:1e:aa:6a:
b1:5a:0a:a5:2d:83:a2:22:9b:39:ae:51:1b:d3:cc:85:e7:d2:
7c:a7:c3:e0:da:39:5f:2f:18:4e:75:55:37:08:00:ef:bf:cb:
5e:80:02:da:2b:e4:0b:00:39:85:be:39:6e:b4:e3:02:eb:4b:
e7:7b:87:c1:d0:a3:bc:65:22:52:86:b7:85:e4:c1:2b:79:81:
66:8b:ec:5e:04:87:98:c0:03:37:8f:f9:83:c0:1a:80:33:81:
91:d0:5b:38:5e:90:c9:5e:1a:c0:ff:7d:cf:c2:b5:41:7f:84:
af:ce:aa:3b:5c:20:45:75:92:75:83:1f:19:4b:e2:d4:5e:1e:
18:41:71:1c:3a:d9:e5:17:e6:08:07:63:93:d8:f1:df:01:94:
d3:23:3c:c7:20:70:1f:2c:20:47:bc:11:ca:55:c8:2b:41:d6:
e9:b2:66:35:1b:2d:c3:21:6c:bf:ad:bd:18:b4:f6:80:13:50:
51:31:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:40 2026 by rpki-client