Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: E+egv6bLPqF2TtycCX4QpvIN80lwIs78tN7TBjXU7vM=
Subject key identifier: AA:1F:28:25:7F:14:AE:0E:F8:5B:15:61:A6:70:F8:7B:16:38:E4:C3
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 019CADFE971EB3E0F95D0A1441C41D9C2E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 0CC4
Signing time: Mon 02 Mar 2026 10:01:09 +0000
Manifest this update: Mon 02 Mar 2026 10:01:09 +0000
Manifest next update: Tue 03 Mar 2026 10:01:09 +0000
Files and hashes: 1: RL6QZS_NULlTuG3Ek-MVDyUcgDo.roa (hash: IplpMakeUolRKqMcAngwQ0jbRvEmY2a6dczG9twnMGc=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: cGCyKKEaygsy5593K2BTtG+u7OoH6kByYOPXr7NAEzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:97:1e:b3:e0:f9:5d:0a:14:41:c4:1d:9c:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Mar 2 10:01:09 2026 GMT
Not After : Mar 3 10:01:09 2026 GMT
Subject: CN=aa1f28257f14ae0ef85b1561a670f87b1638e4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:a0:e1:fb:ee:10:b5:45:e3:aa:7c:0d:55:
5d:bc:2d:90:9c:c2:5f:ee:ca:73:88:f3:ba:9e:66:
c7:df:6d:fb:49:32:60:ac:b4:1c:b7:42:c2:a8:a9:
b8:b4:10:1e:a8:3d:22:2b:f1:50:40:f1:22:f5:cd:
ca:02:07:b3:f6:5a:06:fc:75:60:80:1f:b8:50:2f:
24:ca:f5:30:c5:6d:83:0a:83:6e:b7:54:37:67:ca:
b5:6e:90:9d:c9:de:b7:33:8d:cd:de:b8:9b:b3:83:
0c:9b:44:70:70:16:86:fd:1d:c4:61:52:c3:b5:ba:
a8:e9:10:48:e4:31:b4:c2:85:9e:10:23:12:33:c0:
99:5c:46:5f:08:80:ce:05:2a:f6:e0:b8:24:1b:b8:
e7:34:ab:9b:35:a1:eb:32:fb:b0:5f:d7:3e:df:d7:
c4:78:e2:dc:34:72:5a:61:eb:db:08:1e:38:54:96:
7a:21:d7:60:4e:7f:52:f7:93:a8:95:17:78:0a:ea:
6f:ac:cf:e0:d0:d3:ee:6c:a3:d7:9b:09:02:4e:f2:
14:80:f6:d9:f0:78:dd:a5:87:00:09:7b:0a:0c:48:
57:10:47:78:08:a1:db:73:12:c5:a1:4a:59:1d:3c:
f5:82:6c:b3:29:18:23:c0:85:36:ce:70:e9:32:72:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:28:25:7F:14:AE:0E:F8:5B:15:61:A6:70:F8:7B:16:38:E4:C3
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ed:14:aa:57:47:0c:b0:53:13:88:78:80:6d:89:58:35:61:
80:15:4b:91:d1:1a:bf:1a:0d:fe:1b:c7:20:fe:98:96:e1:fa:
23:7b:36:ed:1a:e7:d9:58:b1:ab:de:8c:19:1e:be:ef:0f:52:
41:d2:0e:d5:ea:fc:9e:d9:0b:3c:46:aa:d9:aa:bc:46:1d:ee:
9b:b1:8b:3d:17:9d:3d:70:7b:bf:63:98:f2:26:7b:b1:f5:4d:
7e:2e:9f:68:5f:24:5b:53:a3:99:2c:f4:41:cd:e2:0e:de:9a:
79:cf:26:ef:94:d1:c6:e5:ae:ce:75:a6:61:ee:4f:3c:36:e3:
be:88:35:53:16:46:e7:f2:82:17:6b:c2:03:c9:31:f1:b1:d8:
c7:ec:84:8b:e3:b2:9c:b3:f7:1c:5f:0a:75:d6:a6:41:2b:86:
79:fc:5d:0e:98:93:5e:8c:fb:98:6d:c2:b4:d3:9b:5b:db:07:
e1:58:bb:57:44:6c:cc:fa:78:17:fe:bb:76:de:9c:27:22:e1:
fe:a2:a3:36:97:2f:78:14:dd:aa:bc:ba:4a:fe:5c:2d:4a:5c:
9f:ea:95:a6:8b:7e:a4:3f:03:52:84:79:26:72:4b:91:6b:9a:
e3:b8:12:2a:f6:8d:4b:57:66:28:4f:51:38:7b:bd:9f:3d:5b:
4d:fe:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:30 2026 by rpki-client