Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
File: vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft (raw, json)
Hash identifier: gn04/b04BAg4S38sWtXFK6LiQ1ubNRnin2WQEnGykwQ=
Subject key identifier: DA:C9:D9:7C:1D:30:0B:B1:4C:33:A1:E5:21:78:A4:95:F8:0B:5B:09
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Certificate issuer: /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial: 019CA9B351FA66F523C8A7B59621CD53063C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
Manifest number: 1A
Signing time: Sun 01 Mar 2026 14:00:27 +0000
Manifest this update: Sun 01 Mar 2026 14:00:27 +0000
Manifest next update: Mon 02 Mar 2026 14:00:27 +0000
Files and hashes: 1: EwUUc2dE6q5b6syyezzDk_bQ_Q0.asa (hash: 6XduT1B3a9XuB4cQHe5NZFspu4pd0HZYEHNdzQP96Os=)
2: vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl (hash: +L6rNuB0jJAgCkxhvcMwJQQsP5ANvvcd03F4jWkP6Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:51:fa:66:f5:23:c8:a7:b5:96:21:cd:53:06:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Validity
Not Before: Mar 1 14:00:27 2026 GMT
Not After : Mar 2 14:00:27 2026 GMT
Subject: CN=dac9d97c1d300bb14c33a1e52178a495f80b5b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:c1:ec:12:69:aa:bd:d9:7a:93:ad:7f:c7:
02:91:15:e5:90:73:e8:3d:a8:48:48:9f:bc:42:39:
82:b7:8c:45:68:7a:b9:0b:0c:b9:45:18:8a:4a:96:
6b:92:74:c0:47:f2:48:82:e4:96:8a:5d:77:fc:d9:
2a:80:89:c4:59:af:51:b9:d7:de:9d:b1:fe:17:2f:
47:a9:0b:c0:ea:e2:27:d8:61:12:d4:aa:62:7c:11:
ed:9a:12:e1:68:b9:0f:62:fb:26:cb:0c:9e:87:14:
61:e0:65:5b:65:9d:5b:50:16:8a:58:9e:f7:7f:33:
4e:50:05:fc:46:03:a8:b0:42:b5:74:55:32:82:60:
55:c9:48:22:a4:a0:2b:e7:e7:35:cc:49:9a:e1:b9:
21:a6:4b:ad:98:f8:19:47:90:9d:ca:bf:a5:d2:a6:
48:0c:db:f4:15:df:ea:6f:4d:59:55:c3:f6:6e:41:
a9:a2:fb:ed:50:d1:7f:99:a8:78:eb:0c:f8:fe:fe:
d7:98:c7:08:2c:54:73:01:9d:37:d2:b2:b5:63:e9:
c2:23:f0:fc:71:86:5b:be:6e:97:32:91:f1:15:28:
2d:4f:e3:f0:f4:66:82:f9:25:6a:bd:72:37:3c:62:
c2:b6:15:25:f6:9d:bd:88:00:f9:e9:84:9f:2d:32:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:D9:7C:1D:30:0B:B1:4C:33:A1:E5:21:78:A4:95:F8:0B:5B:09
X509v3 Authority Key Identifier:
keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8c:41:67:2d:39:60:32:a8:cc:7a:cf:92:90:6b:6e:48:2f:
63:23:c1:94:d3:40:e3:92:e1:d8:47:6d:11:27:98:78:fc:88:
2e:84:83:2e:e7:fe:f0:55:fd:25:df:d4:b3:86:70:51:c8:61:
21:0e:7b:02:dd:90:56:0f:a7:12:76:fc:36:0a:d0:1c:e5:e7:
34:c9:90:34:71:32:91:1b:25:b2:d4:97:7d:be:26:fe:f3:ce:
54:72:64:24:e2:7a:be:c6:8a:ce:02:d4:78:db:11:5f:03:e5:
82:aa:ea:e6:e2:ae:1a:7f:e5:5d:30:17:d1:6f:47:02:9e:71:
5e:c6:8c:46:e8:58:0e:01:f7:ca:72:a6:bb:ef:11:f1:f3:31:
15:80:cb:33:c2:97:c7:00:6c:eb:f0:ce:92:d7:a2:e4:38:07:
89:98:89:4b:2f:44:ae:b5:0d:a9:42:e8:e5:ed:75:50:80:88:
44:94:4c:75:f1:6a:91:22:ba:57:8c:0e:b7:af:1f:e1:b6:f9:
aa:1f:32:d1:19:19:37:17:84:31:68:7b:e3:c2:9e:5d:3d:a3:
af:d6:76:70:37:fb:06:0d:d7:41:54:1a:ad:43:ad:50:3b:e7:
cc:e8:db:35:be:55:c0:63:c7:d4:bd:5d:a3:c8:54:69:17:f4:
da:79:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:32 2026 by rpki-client