Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: K6e49M1g7urhI6FLfSx8aCNuM+55isjbV0wBAni1qjI=
Subject key identifier: EB:06:37:2C:5E:AE:D6:80:28:28:FF:00:C1:8F:2D:FC:7A:84:1F:4F
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 019CAC0FFA4CE6822CB29E741A8C993FFD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0FBC
Signing time: Mon 02 Mar 2026 01:00:54 +0000
Manifest this update: Mon 02 Mar 2026 01:00:54 +0000
Manifest next update: Tue 03 Mar 2026 01:00:54 +0000
Files and hashes: 1: 6oQKDDyMUj37dGHDAWG9hyXJ4CQ.roa (hash: 5WxnbXRk5D7eZXvGdqfcd1aSnBHhRIk6MtDcfyfGK/w=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: czUOjOhCmAX0B+2VI9aK26No3jBtEU32X1X3OcZKpLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fa:4c:e6:82:2c:b2:9e:74:1a:8c:99:3f:fd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Mar 2 01:00:54 2026 GMT
Not After : Mar 3 01:00:54 2026 GMT
Subject: CN=eb06372c5eaed6802828ff00c18f2dfc7a841f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:2f:b2:fb:20:4a:05:eb:16:f1:99:cd:f8:
87:01:35:9e:cb:80:8b:ab:21:46:5b:7d:b5:e7:36:
89:ad:8b:68:3f:b9:ca:7a:11:a6:bc:e8:44:dd:83:
ad:ae:a8:8d:90:3f:9f:74:60:50:cd:84:dc:24:50:
ad:30:26:76:04:d1:68:28:5a:e8:9f:6b:ed:f0:63:
88:6c:1c:c0:fa:30:d3:2f:6f:1b:9e:b6:2e:fa:1f:
1b:40:92:0c:ef:e0:2d:6e:08:58:eb:a9:e1:fb:2f:
2f:56:6f:ac:7d:69:39:13:42:ee:69:e2:86:1c:27:
ef:07:e4:52:c4:ac:bd:4e:d5:48:50:ed:fa:24:60:
85:ce:0d:c6:c8:80:33:40:66:7d:71:20:41:c6:91:
3d:d9:ea:05:48:b5:4a:52:b0:3d:e6:20:49:de:f7:
4e:51:d0:b8:10:b7:7a:8c:a9:69:eb:e5:66:2d:c4:
8d:90:d1:12:fa:08:b7:79:0d:0d:bd:35:f4:c4:d7:
8d:67:eb:01:07:3c:96:ab:44:25:6f:3b:f4:9d:89:
3d:c4:e0:dd:fd:86:89:9f:5c:7e:d8:b1:69:b6:d5:
26:96:26:cb:5f:a7:6e:ca:69:a2:24:98:d0:b4:ee:
ad:99:03:fe:ef:29:c9:7e:d4:fb:ac:9f:64:fb:d4:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:37:2C:5E:AE:D6:80:28:28:FF:00:C1:8F:2D:FC:7A:84:1F:4F
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:43:84:93:0e:30:4c:2b:6d:86:ca:e4:c3:6a:fa:64:36:
b4:78:c6:89:3e:e5:1e:79:c0:9a:32:e0:ac:79:c5:ac:e1:63:
01:c9:64:f6:f3:0e:a1:79:29:5e:72:ce:ec:1d:13:a9:10:9b:
29:bd:aa:26:9d:30:8d:34:72:e4:06:28:2d:03:51:65:56:f8:
a9:54:df:3b:23:3f:28:d2:f5:62:66:f0:21:c7:44:e9:fe:41:
30:45:e0:eb:4d:1a:87:d3:e0:02:bc:83:b3:39:56:00:39:63:
b1:31:84:d5:f7:d7:af:d9:c6:c3:96:9e:71:5d:8b:55:04:c0:
4a:f1:0d:9d:7e:af:2e:91:9d:33:7a:4a:ce:d0:ff:ca:fd:59:
b0:25:df:9d:ee:37:97:ce:75:b0:01:af:ed:0e:97:cd:90:c7:
e3:4f:d6:ac:08:78:f1:7d:49:66:98:cc:0c:2e:a1:18:85:a5:
48:e1:de:ba:ca:79:6b:f4:ec:8d:44:1c:95:dc:0a:07:e8:0f:
96:e8:f3:a4:c0:4a:5b:a2:8e:9b:f2:06:35:b9:84:01:48:2c:
bb:bd:ac:93:15:7e:52:60:2b:eb:a0:60:c6:f3:5f:99:7b:7a:
08:20:70:e6:16:12:62:85:e6:c7:49:46:38:e5:95:0e:17:27:
0f:0d:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:27 2026 by rpki-client