Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: 8yNkXXLsU8e44WQC1md1OqKpDlSTKnt/Bh9rtCfSNUA=
Subject key identifier: 58:69:3F:52:9F:3E:FA:D0:29:29:88:CE:90:DB:2B:02:71:BA:D0:0A
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 019D9B87D6B9CF8975337DFFA9DC463AFD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 0D3F
Signing time: Fri 17 Apr 2026 13:01:03 +0000
Manifest this update: Fri 17 Apr 2026 13:01:03 +0000
Manifest next update: Sat 18 Apr 2026 13:01:03 +0000
Files and hashes: 1: RL6QZS_NULlTuG3Ek-MVDyUcgDo.roa (hash: IplpMakeUolRKqMcAngwQ0jbRvEmY2a6dczG9twnMGc=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: iDNya4FwXFgnFeqA5g3AP5kDKq8uKVFnVSFbIIj0Zks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d6:b9:cf:89:75:33:7d:ff:a9:dc:46:3a:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Apr 17 13:01:03 2026 GMT
Not After : Apr 18 13:01:03 2026 GMT
Subject: CN=58693f529f3efad0292988ce90db2b0271bad00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:66:01:89:b1:e1:67:51:c4:70:ef:eb:92:
49:0d:97:7c:98:d9:dd:5b:ce:a7:cc:5c:a8:d7:db:
98:56:31:c0:ec:57:b2:1e:b9:f5:c4:28:12:5f:28:
d1:51:37:e8:ca:c3:34:2c:57:09:72:21:b8:4e:03:
c5:81:76:20:65:43:09:3f:a8:5c:30:69:19:b1:57:
05:f3:99:f5:64:a7:6a:25:b5:1f:4f:cb:b1:40:5f:
87:d4:90:4e:30:db:63:5f:75:4c:22:ea:77:b8:9a:
4c:a4:3a:a0:c9:b1:a9:a6:d9:05:80:83:67:34:32:
1e:d0:c9:f5:69:4e:b3:84:32:d0:1a:65:4c:21:70:
12:a4:d3:8a:94:87:f9:f6:97:60:43:92:55:a2:9b:
65:f0:27:60:8d:49:5c:a2:cd:3f:22:73:cd:91:5c:
a9:80:d4:6c:b5:00:d2:e8:37:af:ba:a8:d7:83:1a:
02:63:29:80:f3:d2:6d:6f:42:83:f5:d9:ca:46:ad:
a6:4a:26:65:46:71:c9:a3:a9:0c:1c:27:2f:a7:be:
55:74:c6:46:a4:7c:88:c5:da:b2:6c:6f:5c:91:8e:
9e:9a:ff:cb:ad:09:3c:9c:f3:c0:c7:74:0f:f1:97:
90:be:37:3f:c7:ff:03:7b:ac:39:4f:5e:38:79:d3:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:3F:52:9F:3E:FA:D0:29:29:88:CE:90:DB:2B:02:71:BA:D0:0A
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:76:c4:69:55:d4:f7:d4:5e:81:85:31:ff:a2:b2:c9:c0:9a:
27:3a:1a:7e:c0:4a:00:6f:f4:de:25:7b:23:39:fc:fc:98:40:
18:6e:34:fa:2e:e5:e5:13:86:a3:c3:23:59:94:96:78:7c:28:
48:42:27:ca:c9:c2:e9:1b:bb:30:5e:32:83:c1:f4:a2:78:23:
79:4c:46:6d:3b:80:a9:83:5f:15:64:17:53:d1:55:29:75:ca:
a3:2b:16:15:fd:cb:c2:9c:43:d5:4d:a4:26:c5:cc:63:54:27:
6c:32:31:d7:b9:62:55:00:4d:91:55:82:73:83:44:33:23:78:
4a:6b:c0:66:e0:ad:c7:2f:d1:6e:97:d6:4b:d9:cf:ee:20:dc:
87:23:e9:f3:d8:59:21:02:f6:43:64:9c:a5:ba:5c:0f:d2:9f:
dc:e1:5d:5a:aa:17:85:e4:eb:9b:a5:30:18:ff:f9:56:7e:46:
6a:ee:e9:31:8e:e4:e1:5f:58:a9:e4:d5:2b:3c:29:a4:83:a6:
77:1a:f9:db:65:a7:52:bd:53:42:01:73:fb:68:dc:fd:98:f2:
15:44:40:9c:fb:83:05:b6:ae:9f:c6:aa:3f:25:2f:4d:4e:d2:
48:89:d3:95:8e:09:9a:c5:6b:2b:b4:87:e7:f0:a9:ee:6f:4d:
39:64:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:41 2026 by rpki-client