Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: TJuGtvYFo4XQFUp+aGfUXDn669b8qO96yY7Gz5Rtqt0=
Subject key identifier: EB:05:EE:61:2A:59:9D:0E:C9:F5:0F:07:D6:70:C3:59:8E:2F:2E:BA
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 019CAF10ADC848E3445EDC79F5AC7C7112CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 15:00:31 +0000
Manifest this update: Mon 02 Mar 2026 15:00:31 +0000
Manifest next update: Tue 03 Mar 2026 15:00:31 +0000
Files and hashes: 1: 6ly5xS7Crn95qS-sabxmTiXk0Gw.roa (hash: orel+0qepeeJDJ5TDLnEm1CeQiuPhxAXOKIcf81qcUQ=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: rTJX+5IMT9QL6tPU0lxqEwUgnf51K6xlzCpdclECGBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:ad:c8:48:e3:44:5e:dc:79:f5:ac:7c:71:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Mar 2 15:00:31 2026 GMT
Not After : Mar 3 15:00:31 2026 GMT
Subject: CN=eb05ee612a599d0ec9f50f07d670c3598e2f2eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:b8:d0:78:a0:be:75:8c:6e:52:20:fa:01:
e5:5b:93:b5:9f:a4:09:df:08:76:e7:bc:00:1c:b7:
8f:c6:0b:c9:55:f8:f6:e5:0c:c6:47:bd:3c:84:07:
10:72:8f:6d:6b:83:c4:88:35:de:f7:93:28:67:51:
15:a5:0c:d9:43:ac:23:58:a5:fe:a1:7a:a1:e4:42:
f4:e0:44:20:44:5a:c1:27:8b:18:3e:5d:6e:6d:6c:
f7:50:65:63:bd:8c:35:0d:25:ec:21:3f:8d:b3:e6:
4f:b8:de:ce:a4:db:e8:61:ed:f9:de:0f:e2:be:dc:
4d:8b:25:b8:5e:07:e1:4a:0f:5d:92:6d:18:68:bb:
73:da:72:87:7b:bd:ce:6e:e2:42:e9:81:e7:29:30:
bc:21:d1:72:ba:99:ae:b3:1f:df:0e:f0:74:a3:03:
28:8b:3c:c8:db:fd:d8:90:9f:e6:37:cd:c2:fa:a3:
1f:24:2f:b7:da:f9:07:04:7c:c9:64:fc:f7:7c:91:
e5:4f:62:0a:4d:b2:54:6b:24:ab:f8:82:07:71:01:
2a:38:97:6e:ee:03:06:06:be:00:e9:12:0b:04:5e:
15:79:30:e9:8c:b8:02:0a:63:3a:fd:c1:cb:e2:cf:
91:02:70:51:fb:87:21:2c:dd:3a:9a:f0:f6:05:ce:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:EE:61:2A:59:9D:0E:C9:F5:0F:07:D6:70:C3:59:8E:2F:2E:BA
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:65:2f:e3:7b:ef:af:39:55:f0:15:32:6b:3e:0f:c4:a9:
fc:d7:35:4e:2c:7c:58:22:51:1d:39:17:ef:73:db:82:67:72:
d4:3c:d2:51:0d:e7:63:d2:7e:08:84:ea:62:24:f5:ba:31:91:
27:c7:30:c7:94:86:15:68:4e:df:ab:e9:20:96:32:a5:0e:02:
8c:37:bb:64:cc:c2:e3:0a:00:39:9c:67:58:44:83:2c:cf:ac:
13:8b:12:4f:bb:39:c0:69:6e:f5:9f:53:7a:49:fb:b4:4c:96:
c0:46:d2:1f:31:0d:30:32:8a:91:48:2a:70:e6:51:3a:89:b1:
bd:62:a3:34:08:95:50:0e:03:ed:11:ae:ab:94:ac:a2:9d:d3:
b3:f9:9c:2f:da:19:c3:6d:f3:a0:60:a8:cd:71:79:ec:eb:29:
ba:46:12:01:16:61:79:6b:a5:38:12:37:df:97:d8:b9:fd:e2:
ce:b1:90:5f:28:c5:bd:30:12:97:5b:a6:4b:38:b2:3c:33:8b:
1e:ec:cd:06:ef:36:b1:bc:3e:0f:0c:d0:42:27:79:6f:2a:83:
4b:da:52:83:6e:a1:49:2c:56:8e:9d:2e:e1:38:af:a1:5c:e9:
2c:86:3a:fe:c4:d6:9e:83:92:9a:e3:35:9f:cd:fb:e0:6d:fd:
d6:d9:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:47 2026 by rpki-client