Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: kMmF5uFrxcCMUdsFoTCt+xH69jfnS3dpt5rckWQ4cOg=
Subject key identifier: 3D:75:94:1B:68:97:47:E4:C7:6B:70:EC:EC:BC:F2:FF:6D:DF:0E:CE
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 019CAD5A4A79129D2D6F46F84C399F842E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 07CC
Signing time: Mon 02 Mar 2026 07:01:41 +0000
Manifest this update: Mon 02 Mar 2026 07:01:41 +0000
Manifest next update: Tue 03 Mar 2026 07:01:41 +0000
Files and hashes: 1: aENpbZFMMBWYCci1um8I0GEZSKc.roa (hash: bJqlLgnRm20xht7mBqwuocxi1HbSlACC3bpe5sLs4l4=)
2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: ayKk5BziSxzsdEODeE9sxMtAWVmdNPBA1grolZQMWuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:4a:79:12:9d:2d:6f:46:f8:4c:39:9f:84:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Mar 2 07:01:41 2026 GMT
Not After : Mar 3 07:01:41 2026 GMT
Subject: CN=3d75941b689747e4c76b70ececbcf2ff6ddf0ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:75:5b:c1:b9:8b:88:42:a0:98:4f:35:66:
ff:50:08:92:07:29:26:bc:30:09:87:f3:80:73:9a:
c9:19:14:df:37:b8:bf:30:6a:3f:70:2f:3d:bd:80:
48:25:01:56:88:f3:f3:40:d4:95:7d:0d:12:ab:a3:
47:f2:0d:cd:9b:4b:9a:5a:3b:56:13:99:26:16:3a:
17:b2:0b:87:00:fc:f4:7c:76:2c:ee:39:05:26:4d:
d5:c8:0c:be:51:33:fe:e2:b2:9f:9f:e8:43:da:38:
bf:1b:e3:5b:4b:8b:06:df:fb:c2:c6:6b:97:9d:e8:
7c:37:16:63:6f:35:91:f8:4d:9c:9b:1c:d0:22:c2:
5e:f6:c1:8b:84:88:e3:32:48:2b:2a:e7:b1:8a:38:
79:95:65:ad:f6:af:b3:a7:05:b8:cb:0f:7d:e3:1a:
23:9f:a8:7c:f0:1b:1e:2f:35:f3:55:64:a3:64:f9:
df:17:75:7e:e0:4a:30:e2:70:0c:97:45:0d:be:ab:
e7:7c:77:57:7c:00:6b:75:b7:6d:61:ba:31:51:50:
d5:e0:03:8b:98:a3:1e:9d:c7:7d:0c:1e:1a:8b:dc:
45:ff:8e:5a:15:ab:f8:24:72:1d:98:41:71:21:9b:
61:6e:a4:f4:33:f8:1e:e6:40:6d:78:f7:4b:80:58:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:94:1B:68:97:47:E4:C7:6B:70:EC:EC:BC:F2:FF:6D:DF:0E:CE
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:52:0a:17:9d:05:4b:69:19:0f:e3:2b:65:13:5f:f2:97:38:
51:dc:ec:29:36:76:a4:79:54:b8:3e:87:14:b3:bd:ed:41:a1:
ba:18:b4:d2:56:aa:68:4e:83:eb:51:d7:18:66:4e:19:5a:55:
d6:1d:94:bf:f4:2d:31:df:76:87:c9:52:43:21:73:6a:07:ab:
08:bc:ff:f1:10:15:6d:d3:78:bb:ce:38:ef:28:5c:b4:4e:ce:
85:af:ec:cb:e7:3e:32:00:d0:84:1d:a3:73:07:17:46:91:d1:
5b:0e:a3:d7:98:b4:c4:cb:78:76:31:98:d0:45:b8:aa:25:04:
46:b5:2a:e8:41:3c:f6:2e:6f:4b:8c:c9:d5:89:e3:17:77:29:
64:0d:0e:b8:11:ef:d6:32:4d:9b:b3:5e:cb:50:ca:49:54:9c:
03:ed:cb:e4:38:90:80:84:07:ac:cf:4a:3d:59:67:c5:63:6e:
20:e8:9e:00:62:f8:f2:60:08:7c:27:05:21:6b:74:bc:11:43:
aa:2c:42:39:d0:82:92:13:73:a1:43:08:26:2a:ce:5e:54:41:
20:38:3f:f4:dc:8f:f9:50:ff:07:05:5c:bd:6e:9b:fe:34:6c:
c5:0b:de:72:70:f8:7d:1b:2c:da:54:b9:d4:db:b1:ab:ea:7f:
22:09:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:12 2026 by rpki-client