Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json)
Hash identifier: qIxnYmD1EhifgcFULUCLP5EcfaINmy9yzkMhqUT4PTo=
Subject key identifier: D3:EC:B7:E4:3B:1A:49:C1:67:00:B8:00:69:DD:90:D4:0C:E6:BB:13
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial: 019CACEBAA342BDCD77433707BFBBAF46246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: _qrU1bCSPRoOOveg6cKRbdBRuMk.roa (hash: EuanKU6jP53XoKKJyuThtthL9JW99aO6nJOSR8TpqPE=)
2: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: WZzJ1yWSuxO3q/fH55AsqZXjGS0q4+kQ7aSgIKTVVjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:aa:34:2b:dc:d7:74:33:70:7b:fb:ba:f4:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=d3ecb7e43b1a49c16700b80069dd90d40ce6bb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:81:d4:f6:b1:ed:fd:e3:2e:bf:2d:64:d0:
c2:af:0c:0d:4a:22:7c:88:42:1d:c7:8b:96:32:b8:
ef:2b:71:12:d3:b0:13:22:90:43:89:19:05:2e:71:
20:89:dd:64:1c:84:ad:f2:42:01:a5:3c:0a:40:0f:
22:a9:69:ca:26:62:9f:39:56:71:fa:76:08:90:90:
ec:45:d9:c2:af:8e:4d:9d:21:cc:36:e5:20:2e:b5:
c3:31:65:77:be:fb:07:6f:6a:9f:e8:45:11:43:4f:
23:18:af:32:cd:27:a0:80:e9:32:3e:09:fc:f6:c0:
4d:a6:e0:36:86:99:0c:84:84:b9:55:54:08:53:11:
bd:c8:c2:ae:70:c9:17:28:b6:63:ce:87:0f:7a:4a:
9f:90:98:2c:63:f6:ca:0a:d2:84:fc:0d:c8:87:16:
81:f7:54:64:f5:e6:5d:60:74:76:a4:cb:21:49:44:
a0:29:84:f3:92:e8:77:7e:68:73:86:f7:2e:35:25:
34:a8:ff:db:91:e4:fe:8f:b5:63:8f:9a:88:c8:34:
ca:18:ae:ba:c7:04:4b:83:85:50:1b:5b:79:1c:64:
ad:13:4e:01:4c:d9:9b:f0:00:d8:4c:91:65:cb:1d:
94:43:c3:59:4d:05:a4:74:ea:d9:36:00:34:0c:4f:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:B7:E4:3B:1A:49:C1:67:00:B8:00:69:DD:90:D4:0C:E6:BB:13
X509v3 Authority Key Identifier:
keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:65:3e:43:a9:a2:08:7d:6d:34:78:1e:21:ce:73:96:d7:26:
39:ef:ed:18:2a:c9:99:e2:12:34:31:72:72:68:c9:1c:f2:91:
b8:83:22:d1:8f:78:26:75:2c:46:5b:a6:d0:53:c6:33:96:0c:
ca:07:87:a0:ab:39:cf:ef:c0:8c:ad:16:33:a5:9c:4d:72:c1:
c6:20:bb:80:bb:1b:46:13:1b:d0:31:0e:e4:d4:cb:d0:b0:3a:
48:d5:fe:90:b8:c1:ea:ad:86:f9:88:9c:be:f5:a4:31:0e:6a:
a3:cf:46:88:c9:18:7a:ba:55:92:a8:a9:78:29:cd:6f:c5:80:
d5:c9:44:b7:b8:a9:d9:47:6c:3e:54:53:b5:46:30:4c:d5:88:
39:24:85:e5:f4:17:1c:54:92:71:39:29:56:7b:be:8b:8d:81:
9b:cf:ae:49:1f:e0:39:7a:41:26:2b:72:f3:71:16:e7:8c:ef:
fd:fb:61:1f:e3:f3:bf:5b:b2:e5:92:bf:36:61:0f:d7:d0:33:
a9:a5:5f:c6:5f:5a:0f:06:a0:b6:8a:44:bd:d8:6a:6b:7c:c2:
78:ae:77:74:3a:e6:8d:a0:ea:7b:d8:d1:74:7a:4d:e9:aa:4e:
4d:e8:78:8c:07:f3:41:b0:e3:08:c0:39:6e:aa:06:92:d9:57:
af:d4:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:27 2026 by rpki-client