Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File: vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier: hfdLFkj8oOBq/PYPZ7sYkSJkhxxaeVbb3vP2kG8bUlQ=
Subject key identifier: B4:DC:2D:A0:36:82:FB:EC:84:DA:0F:45:7C:65:4A:A4:D6:16:1D:8B
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 019CACB4AA23EF416A5F7B0267BB9E44B14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 04:00:46 +0000
Manifest this update: Mon 02 Mar 2026 04:00:46 +0000
Manifest next update: Tue 03 Mar 2026 04:00:46 +0000
Files and hashes: 1: mk9FoHtrLbDMqhyHTcDKHNuv37k.roa (hash: +ODYm11fXrZNctf9Tic/a7meV/r5t53Msv62thVJdV4=)
2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: l3/UbVZbgQ4QmbSIMcwCgeDuW1gbD7vxSO6i8v1l9Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:aa:23:ef:41:6a:5f:7b:02:67:bb:9e:44:b1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Mar 2 04:00:46 2026 GMT
Not After : Mar 3 04:00:46 2026 GMT
Subject: CN=b4dc2da03682fbec84da0f457c654aa4d6161d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:7a:aa:ac:4c:f8:df:10:d4:5d:c5:ea:9f:
36:5d:f5:e4:e6:ef:65:56:6f:3b:ae:51:2e:b6:85:
26:78:88:19:33:93:b0:80:3b:46:9f:13:85:2b:bf:
4d:20:ee:89:be:20:85:de:de:33:a0:68:80:01:29:
d6:ae:81:21:e5:9a:74:50:3c:76:8b:7f:2f:77:33:
b1:f4:34:b1:d9:87:af:f8:ce:bb:95:7f:03:58:82:
5f:1b:9c:b4:4e:9b:9c:a8:1f:cd:8e:0f:fd:82:ce:
d0:99:ea:f9:3c:f8:da:4c:f8:ab:e9:05:36:f7:12:
56:92:77:ac:0b:36:55:d9:13:16:24:30:fb:e6:c2:
17:34:9f:f6:6c:1e:0a:30:35:a9:38:65:4f:a9:41:
b0:74:49:8b:c8:b0:c4:e4:af:bc:4e:41:97:3a:fd:
23:b1:e8:3b:f7:16:ad:82:f7:1e:c0:95:87:e6:4c:
95:16:73:30:2e:e2:5b:d4:ce:8e:99:a8:62:ff:bf:
76:d8:af:a7:4e:29:cd:2b:4f:01:92:11:16:8c:9c:
c2:f6:c1:2d:67:12:88:2c:39:e2:dd:89:f6:92:1c:
f3:d0:13:12:0e:87:a1:bd:98:e2:8d:bb:88:e8:16:
95:c2:00:4b:b9:4f:37:c0:1a:4d:51:d5:f5:46:e4:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:2D:A0:36:82:FB:EC:84:DA:0F:45:7C:65:4A:A4:D6:16:1D:8B
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:13:7f:fe:51:3e:33:3f:4c:fd:ce:99:7c:6e:e8:91:fc:6b:
aa:07:87:61:e6:56:cb:d4:e7:02:80:73:a1:43:6e:d9:41:06:
47:cf:e7:8f:5e:ea:07:30:13:d0:b8:8d:f9:d3:9f:e8:80:76:
a4:ca:2b:35:19:e2:2b:c2:64:59:22:95:af:da:0e:86:8e:6f:
a4:ec:9c:5d:be:72:ba:86:40:43:f1:78:51:e1:d7:28:43:a5:
db:bb:29:65:28:de:90:11:38:1e:a3:92:52:13:3f:a6:12:64:
c7:3f:38:7c:d4:11:13:84:7b:84:ae:df:53:42:85:cf:1d:08:
e4:74:5e:05:76:53:89:a1:4f:59:b1:c9:1d:ba:03:ef:08:ca:
8b:ce:ae:91:9e:e5:9d:c1:87:de:d7:9f:96:ac:6c:a8:bc:8f:
68:4b:73:45:59:8f:37:4a:2e:b1:ce:d8:55:4c:dc:85:ef:c8:
95:87:56:b1:4a:17:b2:36:02:72:96:9b:d9:ec:2b:74:d6:ca:
1f:04:da:43:63:0a:40:0b:bb:90:d0:9a:10:16:79:9d:db:4c:
d3:86:3c:ca:e2:bd:41:45:77:ac:c8:f6:64:2e:8e:87:df:8f:
a4:14:6d:94:c5:2f:a4:7b:f5:5c:ee:e7:ad:21:98:f7:47:6c:
00:63:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:56 2026 by rpki-client