Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: k/g9P4lUBFVuKzLagvIogqjZvEe6mPsED2mIFyZaadk=
Subject key identifier: 0D:AF:01:AF:83:70:6D:22:34:A0:14:C6:CC:92:FA:9C:63:5D:4A:77
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 019CABA212BB006A8678518C88FF19DE8A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 13ED
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: nu2lbW0g95yVXBtDFUgDrkJzEwM.roa (hash: 8SMpinprSw+0Hderswh6JaQ9jOtPmZtb2eKAdki8fbU=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: sNepF//f3E/6ZDnKpul/RR/2LJhfSe7mPbyzkumBQVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:12:bb:00:6a:86:78:51:8c:88:ff:19:de:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=0daf01af83706d2234a014c6cc92fa9c635d4a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:0d:fc:59:c3:b7:6e:bd:46:b8:f9:25:1e:
14:d8:7e:93:cf:db:65:d4:9f:40:bd:8d:06:57:7d:
18:06:6c:ae:7a:8c:50:90:c3:4b:60:11:29:1d:ad:
05:6e:54:fc:d0:53:bd:7e:b1:eb:c1:e7:9b:17:65:
d4:51:5c:f5:5e:8d:27:ef:76:fe:d0:b1:85:60:dd:
f8:35:66:07:80:9b:84:d2:2d:ee:41:ff:4a:85:36:
54:70:08:ae:3e:b7:c3:dd:b0:c9:68:1f:21:15:a2:
45:b1:84:55:27:71:5b:fd:5b:fb:f6:79:d2:9f:d7:
3b:db:45:22:0f:82:03:c6:00:7a:b5:15:24:4f:5b:
5d:10:52:73:89:84:ae:97:49:ee:5b:af:3e:c9:1d:
36:a8:7f:bf:6c:b3:89:6c:d5:ef:31:7b:72:02:0c:
2b:5b:72:0c:bc:cd:b6:6f:65:42:e5:c9:0a:aa:04:
74:dd:e7:0c:91:4a:9d:f3:1d:38:b6:2e:74:da:d8:
e4:71:08:4f:e3:59:72:09:20:4f:25:b9:37:5f:fb:
c4:6d:ab:f4:cb:8d:38:99:e1:ee:9d:22:80:62:fa:
96:c8:16:9b:2c:73:48:fc:51:28:53:f8:2d:cc:45:
41:be:f5:85:c4:73:cb:aa:37:38:59:0f:b0:e5:c9:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:01:AF:83:70:6D:22:34:A0:14:C6:CC:92:FA:9C:63:5D:4A:77
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d0:dc:93:c4:bf:21:e6:45:0b:b4:d0:5a:16:6d:8b:aa:0a:
e2:1d:e2:76:24:ea:f5:f1:77:da:51:f5:70:1d:22:85:d8:58:
0e:8c:5b:40:50:76:a1:c8:c9:76:c6:08:c9:18:3e:c6:fb:8a:
51:b6:cb:0d:18:fd:50:c1:6f:33:25:a0:f7:2d:e4:90:10:51:
59:39:76:26:06:62:16:8a:99:2d:00:56:0a:bc:14:37:bf:13:
19:eb:45:d5:09:1e:79:9a:e8:a8:5d:83:2e:98:ac:a8:37:4b:
05:7f:4c:8f:ed:9d:d3:7c:75:f8:6c:3f:4e:c0:2d:92:05:35:
69:8d:03:03:d2:a6:35:04:4e:94:36:65:55:1a:08:d2:9a:9a:
c4:98:12:52:4d:f1:f7:fb:e2:05:bd:92:f1:f9:6b:9b:14:0f:
6f:cc:e1:d3:e5:69:0f:bf:02:93:11:3f:fc:fa:98:da:7e:eb:
8d:31:3c:e6:61:67:6f:62:bf:83:0a:5a:51:dd:93:a1:1b:0e:
99:4f:22:28:53:a4:4a:aa:a3:38:41:76:09:8a:ae:8d:7f:45:
1e:d2:35:1d:57:79:16:a9:4e:36:36:ad:8f:20:a5:4a:3d:c6:
db:5a:8e:9d:94:55:d9:97:bd:43:06:f1:45:25:72:95:c7:1b:
f8:60:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:50 2026 by rpki-client