Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: vmMI+T6/vjuYQnXAkIPnAd+tIKJx1zqzmIsNEHCDvlA=
Subject key identifier: 9A:65:5B:1A:5D:14:98:7B:83:4A:72:93:A9:17:48:21:67:C4:F9:69
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 019CAC4739E133C992EFE6F0597D858DFCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 0A71
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: FvWk7ZFUzYMXdurfDb5I7qSsm-w.roa (hash: qTbl4NTq62nI1e2eOQ+PRcMBLw7F9yXGF00ckT1wuOc=)
2: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: lHOrgaZeSsBtT6NfrQ+ejIHuHMAiKQT26ytw6fcnNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:39:e1:33:c9:92:ef:e6:f0:59:7d:85:8d:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=9a655b1a5d14987b834a7293a917482167c4f969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:c2:4b:fd:4d:8b:c9:83:8f:5c:a5:b6:58:
1e:30:8f:77:7f:23:b5:d5:4a:df:6d:61:57:4c:72:
d5:b2:e0:df:d1:70:8f:b1:a3:5b:0d:b4:72:f7:a0:
11:d2:61:87:e8:61:c9:76:96:40:33:61:40:bf:da:
59:06:51:1b:df:b2:05:12:72:f1:e0:c0:7f:79:af:
ff:4a:04:b3:3f:02:2f:68:5a:bf:01:a2:4b:b1:ab:
5c:b0:09:35:38:58:25:23:62:83:66:16:45:08:6c:
e6:e3:b8:65:52:1e:93:cc:25:db:da:7f:5f:5a:04:
8b:92:8f:97:f5:95:3d:8c:84:a8:08:0c:60:a2:98:
8c:ae:f2:7f:7b:ca:3c:83:6c:4c:e8:44:6c:e8:69:
7e:bb:29:b1:6a:a2:f1:e7:f2:ad:b8:56:26:48:49:
3a:02:bb:1b:88:64:c0:8b:2d:ae:46:45:fa:45:5b:
18:27:cc:a4:f8:4a:8b:d8:de:dc:f4:9d:a0:c1:96:
21:2f:84:6d:2b:b1:46:88:56:ad:3b:25:56:c7:42:
eb:86:a5:5d:f3:3e:e7:50:0c:6c:cf:33:5f:7d:9f:
ca:65:e1:00:9f:95:f7:bd:c2:df:4a:93:88:f2:c4:
37:aa:89:aa:39:b0:28:79:f9:a3:07:b0:7b:37:8a:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:5B:1A:5D:14:98:7B:83:4A:72:93:A9:17:48:21:67:C4:F9:69
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e5:b2:4a:0a:55:80:6c:fe:01:ab:c2:89:a5:20:e0:92:dc:
57:e2:cd:60:f6:99:11:ca:27:3e:db:ac:2e:7a:71:c9:c1:e6:
bb:ed:80:2c:93:36:47:d8:68:4b:7a:d1:60:93:5c:ee:c2:20:
db:3a:98:27:a9:b5:ee:41:70:b2:e0:bf:13:4b:52:f4:73:ff:
e1:99:4d:ae:ec:f0:c8:c3:bb:22:7d:57:24:03:52:b3:2a:13:
20:0b:e1:a9:ce:e3:aa:5c:de:1f:92:aa:c8:e6:04:c1:37:fd:
27:f5:2b:ba:26:2c:74:3b:8a:dc:8e:84:9e:20:ed:ab:3a:2f:
99:15:9d:b5:66:0c:91:7b:16:7d:f9:3a:69:88:b4:cc:91:f1:
0d:b2:78:00:07:84:1c:7e:e8:3d:b3:e8:4c:75:49:1f:df:8d:
9e:11:d3:dc:07:10:43:d1:f7:63:49:f6:f2:aa:1b:8b:3b:c7:
2b:25:ee:ac:43:d7:9d:e2:92:cb:95:06:69:08:08:af:92:1a:
4b:85:5a:36:e7:77:3b:ee:9f:ae:ff:54:98:9a:e4:e8:da:29:
73:ca:34:fc:c5:e8:29:6f:e3:18:c4:6c:7d:ba:28:c4:a6:60:
f1:84:fc:24:52:6f:4a:13:ef:8e:84:5a:dc:fc:ef:8e:2e:d7:
62:24:73:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:36 2026 by rpki-client