Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: SqCvQLFtcnuXFOo7bTyXaAp/YkDKONRXREylf6TH1N0=
Subject key identifier: BB:04:E6:25:52:4C:D1:BC:51:87:71:73:D8:FC:BC:A1:1E:09:28:68
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 019CABA2212758980DF063A180891C43D624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:55 +0000
Manifest this update: Sun 01 Mar 2026 23:00:55 +0000
Manifest next update: Mon 02 Mar 2026 23:00:55 +0000
Files and hashes: 1: Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa (hash: eD8cUm6eR2m4jrtu7qYzfbk2kaBxMh/aGCqnzhmpaDY=)
2: g5jXkTpT8rS4RDrTaaqiauLNaBc.roa (hash: isrTkqL/KrQh1HHr0NL5DuWGUHsje/NyVaTqgUAy9vE=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: jOLl2SLtgt6oFX6it0QIhZq0eTbXTsIGm6EgRBV+RQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:21:27:58:98:0d:f0:63:a1:80:89:1c:43:d6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Mar 1 23:00:55 2026 GMT
Not After : Mar 2 23:00:55 2026 GMT
Subject: CN=bb04e625524cd1bc51877173d8fcbca11e092868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:20:f7:34:4c:56:28:c3:1d:16:6f:73:2c:
47:33:ec:13:80:9a:f5:2d:08:49:b0:7c:82:e6:86:
0a:c3:dd:88:cf:02:56:47:34:20:a3:03:e1:0d:03:
75:93:d7:5b:1a:49:c1:bd:31:2e:5b:f3:a5:d8:c5:
83:a9:e9:18:bf:0f:6c:50:d4:bc:17:2e:51:be:b4:
9e:11:e0:5b:1f:29:23:38:d6:f1:72:4b:f1:f6:fd:
a8:a6:83:bc:e2:48:48:78:ee:81:4a:83:08:d2:d2:
93:48:c5:c3:d0:75:ba:83:fb:43:a4:65:4c:fd:f8:
d2:9b:4f:8f:a9:55:11:4a:e6:97:a1:cc:59:4d:a3:
ce:13:d9:5c:76:54:bd:a3:cd:cc:ab:ee:e7:32:5b:
24:2f:ce:51:aa:e2:52:10:d0:96:c0:db:26:54:6c:
64:e0:b3:6d:a0:a6:77:f9:28:76:ba:43:43:51:b1:
63:45:6b:49:e0:56:52:ba:84:7c:cd:d5:46:d8:5a:
6f:59:84:f4:2d:46:d2:02:b3:40:67:68:f8:df:f2:
4a:85:cc:33:75:8f:d1:fe:35:97:4b:8f:1f:44:6a:
f2:99:e8:65:ee:37:30:ee:0a:7c:d1:a1:25:32:fe:
35:bd:68:f3:4a:da:d9:37:28:1a:41:fc:58:8f:71:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:04:E6:25:52:4C:D1:BC:51:87:71:73:D8:FC:BC:A1:1E:09:28:68
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:20:ce:20:3f:aa:b3:2b:ec:ab:6f:42:a9:e8:b8:68:64:14:
e4:1c:3b:47:bc:cc:fa:40:10:d6:54:b5:7c:47:75:3b:72:d4:
7b:a2:85:3b:66:72:91:de:d6:c0:c5:ed:f6:83:7f:a0:91:b3:
69:6b:b9:b6:5f:12:70:a5:78:6a:38:70:f5:08:ae:4e:b1:20:
f5:9d:2d:53:ed:35:ea:ee:e0:ea:92:42:a7:f3:0c:87:d8:05:
b0:1f:d0:8b:cf:d9:e4:05:a0:70:0b:71:18:39:6a:48:61:53:
d7:85:1f:04:c7:26:79:10:2f:59:35:80:d1:00:2f:93:bc:d0:
d2:e5:fb:f6:b3:5d:2f:01:fb:a0:2b:f2:04:16:90:04:f4:18:
8b:38:3b:9c:16:ac:b5:f4:01:1e:37:44:98:39:b0:29:4a:6a:
7f:b9:13:b5:99:a0:6f:f6:3a:72:7d:4d:03:31:a6:5b:d8:03:
39:7c:91:e3:de:b4:0b:ac:5e:96:65:34:b4:46:40:24:82:c9:
1d:2f:36:d5:9a:dd:9c:ca:b9:2d:f6:22:21:70:aa:16:f6:e1:
81:5a:c0:ab:95:e2:cc:35:4b:9f:65:d5:73:e4:11:f2:f7:3a:
21:ec:1b:1f:48:bc:bb:fa:7b:74:1b:5a:91:5d:6e:94:15:46:
90:a2:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:49 2026 by rpki-client