Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: 29oFwufDzX65OTV/rdieY3r/OpJNjP0KdxXeNA4ELR4=
Subject key identifier: 44:36:E4:D5:4B:BF:3E:F2:9F:7E:99:DC:F6:E4:B4:A8:C9:E9:B5:0F
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 019CAC0FA7B85477E31C05321CB56F6074DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0D93
Signing time: Mon 02 Mar 2026 01:00:32 +0000
Manifest this update: Mon 02 Mar 2026 01:00:32 +0000
Manifest next update: Tue 03 Mar 2026 01:00:32 +0000
Files and hashes: 1: IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa (hash: ZkNSMusbdYjyY6Jst6K+Zs/Pf+gwZBfB+9r0tVdAYHs=)
2: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: SNApxUvLb8knPVBpH9J/J42tlNxyhcmgn8FyrCc1L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a7:b8:54:77:e3:1c:05:32:1c:b5:6f:60:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Mar 2 01:00:32 2026 GMT
Not After : Mar 3 01:00:32 2026 GMT
Subject: CN=4436e4d54bbf3ef29f7e99dcf6e4b4a8c9e9b50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:2d:b0:9f:b9:fc:02:2c:e3:f6:ce:5c:2f:
2e:22:eb:bf:1c:1a:e2:d0:bb:61:1e:40:05:27:43:
fe:9c:1c:e0:ea:49:75:ff:cf:bc:7e:2c:95:10:cc:
43:ee:18:76:10:c1:3b:de:80:63:97:f7:82:a9:5a:
bc:46:0c:5d:4a:0e:e0:9b:43:55:c4:45:ca:51:f9:
83:a5:c3:5f:5f:42:b1:1a:68:7f:47:e5:8e:d9:f5:
98:5f:72:f7:87:7c:94:0a:69:c0:92:5c:3c:d1:d2:
8a:f9:be:00:fc:38:2f:d7:3d:fe:c3:01:fc:dd:a5:
1b:cd:d3:48:91:8a:90:75:dc:de:2c:3a:9f:bc:93:
7b:86:02:94:74:73:8c:5a:29:ef:23:04:17:c9:25:
72:93:6e:20:f6:50:de:2b:72:8a:14:29:b6:df:d8:
3f:49:86:79:a8:b5:7f:be:d7:2c:12:f2:d1:da:ea:
b7:1a:83:6e:25:a0:91:d4:8e:80:c5:1b:3a:07:44:
84:a4:6f:b8:31:29:6c:b4:14:98:e9:83:71:df:1d:
1a:31:0f:83:be:0a:c3:52:ac:36:30:84:3e:8c:e8:
bc:5b:c8:2c:80:63:eb:aa:8c:42:4f:44:67:6b:71:
8d:19:7c:93:4a:1a:cc:11:af:21:2b:ad:84:06:79:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:E4:D5:4B:BF:3E:F2:9F:7E:99:DC:F6:E4:B4:A8:C9:E9:B5:0F
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9b:a3:15:ab:b6:04:19:c7:57:d0:0e:cb:3c:3a:02:9d:c4:
d8:48:dd:c8:d0:28:74:d1:30:ad:e0:89:15:a6:81:2c:2b:01:
bc:1d:d4:2b:b2:e2:4a:7e:d1:44:e3:0b:83:19:2b:3c:70:7e:
35:8c:b2:ee:c9:fb:85:d5:6d:64:e2:66:8a:e6:97:21:d7:14:
06:50:9e:cf:a4:ec:ca:e1:15:4f:a6:cf:f9:bf:b7:5e:4d:0a:
14:48:cd:17:83:80:e3:1d:71:98:de:36:e7:55:a2:c8:af:52:
a4:e1:22:aa:19:4a:02:7b:ed:e5:3f:ea:93:43:a5:e5:be:cd:
46:f2:51:c0:7a:fa:d2:1b:d9:6e:6f:ab:5b:d5:1b:d3:22:42:
ef:be:e3:ee:59:f0:c0:cf:1c:48:d1:67:c7:02:43:60:07:b8:
37:82:b2:e8:51:1c:98:2f:20:c1:18:61:7d:55:88:e1:4b:35:
6d:dd:ef:b4:dd:0b:f6:49:b1:6f:fb:d8:67:54:3c:88:48:bf:
4d:bc:0c:68:99:c1:cc:54:11:45:6f:91:c5:49:1e:4f:81:df:
c7:01:88:f5:d9:17:4c:c3:90:3d:6b:f6:b3:33:9c:00:e9:47:
78:92:93:6c:ca:60:0a:51:56:bf:67:36:ec:63:b0:81:b0:65:
5f:87:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:27 2026 by rpki-client