Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: CBre8iZ7VjXB3MR6fwHJq1i7u4VPOOyhrH+2szDYZD8=
Subject key identifier: 9C:96:33:6B:5A:30:95:C6:22:B9:DB:B8:BD:13:9B:C6:95:18:23:24
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019CAAC67DBE28F0D95B700A7D9DD9EF6375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: k3Ae1ukRKZyOVdR/l3kMNM3SE4NA+7YRau9Y7lqGJp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7d:be:28:f0:d9:5b:70:0a:7d:9d:d9:ef:63:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=9c96336b5a3095c622b9dbb8bd139bc695182324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:5d:dc:0d:b0:0e:de:7d:c8:d0:e1:bb:db:
cd:ea:e4:4d:5b:f2:09:bd:68:e6:d1:d0:32:ea:e9:
ed:fe:ba:98:ec:62:4c:af:22:24:0a:92:c4:bb:09:
c6:1e:3a:ab:76:06:59:2c:1f:9a:62:fb:00:9a:f1:
4b:1f:03:a0:e5:e9:6c:81:8a:2c:7c:0c:75:01:8c:
d2:50:7f:96:cd:05:80:19:89:2a:b3:0f:07:c0:50:
98:5f:c8:2c:f9:72:f2:ca:36:75:f3:4d:64:de:9d:
bd:d1:8d:aa:2e:c3:b2:0f:3d:c3:50:cc:d7:df:35:
2d:42:ad:99:32:84:7a:eb:9a:ff:10:37:e0:62:41:
1b:6f:c4:fb:cf:3c:66:35:d8:5e:b2:79:64:b5:d3:
3a:12:95:23:24:a3:82:26:17:03:90:14:09:47:3c:
1a:95:66:c0:24:2e:01:7d:61:a2:c4:f7:f8:00:18:
38:d5:8a:4b:0d:bc:75:10:2d:1a:f0:27:c6:b2:68:
2b:79:4c:bc:e4:12:45:1e:ab:86:c7:29:79:25:c1:
08:76:38:b2:68:a3:94:78:5f:d1:86:9f:c1:00:90:
bc:89:c0:4b:0c:b6:d3:fe:c8:85:e2:a0:d8:a8:60:
5a:bc:b3:47:75:b4:51:4d:cf:be:64:f0:d8:70:f2:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:33:6B:5A:30:95:C6:22:B9:DB:B8:BD:13:9B:C6:95:18:23:24
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3e:57:38:2e:d3:dc:38:3f:fc:f1:85:25:dc:07:d5:49:32:
31:27:df:7e:2a:ba:16:4d:57:08:0c:c6:42:22:71:c0:90:13:
ed:6f:84:b8:dd:47:19:1b:3d:13:a6:b7:4a:e3:c9:7b:2b:e8:
04:bc:fa:3c:db:03:16:13:b2:b7:0e:14:fe:2f:d9:f8:d3:c4:
4e:a3:bb:a2:6b:43:07:6e:1c:8e:67:9c:c9:41:2a:2c:88:2c:
5e:13:ab:47:6e:91:e2:41:90:96:46:51:d8:4c:3d:12:7b:71:
0c:f4:82:86:3b:74:f3:3d:35:fe:98:61:06:fb:a1:25:46:44:
17:63:04:95:9b:80:25:26:1f:34:ab:47:66:02:f0:03:24:af:
36:9e:d4:90:ac:29:05:96:10:31:e6:88:be:d8:40:a3:ea:8c:
07:de:94:fc:95:06:d8:3f:8c:c7:a5:6f:30:5b:6b:8d:39:30:
28:c7:2a:a7:f1:d0:0f:52:87:d1:91:58:00:df:3f:c5:33:7c:
c0:d2:d5:d6:10:60:4f:ca:c3:21:47:5a:d4:da:52:11:2b:0f:
7f:27:c4:59:ce:8e:e2:8a:16:27:7d:47:29:6b:53:02:91:d3:
71:af:4e:60:0c:66:97:93:86:b3:bc:c4:fb:f3:42:d0:5d:ab:
db:71:21:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:45 2026 by rpki-client