Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: yw3pqBiSyXxxbm1JwzYHJ9UgPBXANOdGBu44mygavxw=
Subject key identifier: AF:8C:78:B8:27:79:CD:9D:A7:00:D9:B7:11:FF:EE:93:3F:63:61:4C
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019CAC46CE8BC0C05EE0A8B58AF0C421E186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0F0F
Signing time: Mon 02 Mar 2026 02:00:47 +0000
Manifest this update: Mon 02 Mar 2026 02:00:47 +0000
Manifest next update: Tue 03 Mar 2026 02:00:47 +0000
Files and hashes: 1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: QmsfQSTC/DAneZP2RSrRKOjmyiu6axM8iMVs+a/QrII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ce:8b:c0:c0:5e:e0:a8:b5:8a:f0:c4:21:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Mar 2 02:00:47 2026 GMT
Not After : Mar 3 02:00:47 2026 GMT
Subject: CN=af8c78b82779cd9da700d9b711ffee933f63614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:1a:e8:c6:b4:5e:20:e5:89:ac:ec:39:14:
8a:83:15:1b:48:be:5d:d2:d8:99:6d:56:27:8c:72:
00:86:61:ec:9f:1f:aa:c8:ce:85:18:60:99:09:7b:
c6:68:74:c5:68:81:6a:5f:b7:78:e3:69:6c:38:90:
57:8f:75:3a:5a:51:a2:49:13:3b:f0:d8:0d:3b:46:
f6:ed:1f:ce:6c:56:29:f2:49:f7:17:27:c9:3a:e4:
17:ab:f3:d1:21:de:99:31:1d:b4:ae:5a:75:4c:63:
fb:1a:a5:61:90:db:e4:58:ca:2f:e4:19:51:39:e0:
9f:f0:2e:8a:46:a4:83:d3:30:09:2b:20:47:49:3e:
51:1d:28:0f:d5:cc:b3:d2:22:ef:3b:26:67:17:00:
ee:9d:ab:5e:fe:ce:30:2c:a0:5e:43:e9:1c:24:f4:
db:9b:1e:29:c7:57:f6:2a:26:c1:b4:d6:36:7b:5b:
34:2d:a7:11:5d:c9:81:1c:be:6c:64:92:27:9f:52:
c3:bd:bb:e5:2c:12:14:32:25:93:ea:40:46:d3:e8:
8f:78:27:40:5c:f7:b5:03:f6:cc:cc:f1:50:09:14:
81:e9:a4:92:e8:2b:53:81:fc:9e:89:f2:45:53:8c:
46:91:f6:10:d7:c8:af:89:c4:45:ba:78:b4:ff:bd:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:78:B8:27:79:CD:9D:A7:00:D9:B7:11:FF:EE:93:3F:63:61:4C
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:8e:76:68:02:c0:be:c5:7e:63:e8:42:e5:c1:04:18:0c:
a2:34:3e:3c:01:f5:95:d7:41:14:7b:4d:39:54:3d:08:7a:16:
c5:cc:2e:94:eb:91:26:9f:8d:b8:eb:24:7e:79:73:9d:5f:4d:
a9:ae:76:ef:03:bc:98:70:b9:ae:ee:c4:be:cd:8b:97:d4:56:
3d:83:16:1a:ab:8e:11:d9:b4:dd:d5:3d:50:d9:8f:3d:d8:fc:
70:04:34:46:4d:30:a0:29:f8:66:6c:90:66:d3:31:8b:d7:59:
2c:66:24:40:bd:3b:ff:5f:54:6e:98:49:e2:12:e9:a2:70:44:
09:e0:e3:22:9a:65:f4:d1:4e:87:f1:a9:a9:4d:ee:35:0f:fa:
09:3b:54:af:c7:f5:e5:21:78:e3:b7:c2:50:48:8c:e1:73:c0:
66:ef:bf:2a:b7:80:36:1e:67:c2:f5:68:fd:ce:a5:a9:1b:9e:
3d:fa:7c:a7:c0:a6:df:69:93:a3:00:dc:b1:ea:26:47:43:c9:
a7:3b:58:3e:f1:8d:ec:ce:90:9e:1f:bd:19:b1:8e:b4:56:b8:
6e:d5:01:f2:3b:bd:fa:6f:ce:b2:62:b6:41:71:3e:01:4e:2e:
7c:75:e5:7f:dd:51:bd:0b:bb:dd:86:c1:64:79:41:61:cc:ab:
c7:4b:5e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:38 2026 by rpki-client