Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
File: vDH-mHQNcnxyab0GmhN11ZFftI4.mft (raw, json)
Hash identifier: OqwYmx9naHbcslcm0tmCEYLSO23w8VlT+3OyFe8yhlI=
Subject key identifier: B6:CD:B7:79:CA:64:B7:4E:7C:1A:25:2F:FA:8B:98:13:67:9F:28:64
Authority key identifier: BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
Certificate issuer: /CN=bc31fe98740d727c7269bd069a1375d5915fb48e
Certificate serial: 019CAEA3B2595823735DC3B60D4A04578DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
Manifest number: 21
Signing time: Mon 02 Mar 2026 13:01:29 +0000
Manifest this update: Mon 02 Mar 2026 13:01:29 +0000
Manifest next update: Tue 03 Mar 2026 13:01:29 +0000
Files and hashes: 1: eBYsHLpTe5rtTp536t9KrRqEDBw.roa (hash: AfoQ+njM0VDp7GNJ1maOO3kKpGSJZsYKVK6zpBPLxEc=)
2: vDH-mHQNcnxyab0GmhN11ZFftI4.crl (hash: DWkgFM/QeRg9iVTUbQEGHe7uPRstGuSDy24FvqugZmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:b2:59:58:23:73:5d:c3:b6:0d:4a:04:57:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31fe98740d727c7269bd069a1375d5915fb48e
Validity
Not Before: Mar 2 13:01:29 2026 GMT
Not After : Mar 3 13:01:29 2026 GMT
Subject: CN=b6cdb779ca64b74e7c1a252ffa8b9813679f2864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:eb:a6:15:76:9d:05:70:5e:e4:5f:ca:94:
f0:31:5e:18:b9:17:ec:4c:4a:00:f6:25:53:ee:d2:
0c:93:11:29:d2:ff:f7:a7:da:23:39:4a:da:ed:6a:
76:c5:6c:a9:c5:98:45:3a:c3:79:0a:02:fe:0f:d7:
dc:e1:97:b7:97:8b:67:b2:95:88:c6:93:0c:6a:b6:
f6:d8:6b:3c:95:fa:38:23:13:2f:6d:db:68:07:75:
a1:1d:2f:72:61:cc:c0:00:53:00:47:07:32:bb:bc:
75:78:76:e0:fe:a1:ab:aa:85:8a:63:1e:2a:b9:04:
38:56:ae:73:3c:41:7b:40:25:15:6d:42:a8:3d:2e:
dc:67:e8:60:a1:05:20:85:10:43:83:82:07:b3:4f:
12:e4:0d:0a:e1:15:d8:64:36:45:de:f6:88:69:bc:
11:5d:ba:50:dc:6f:83:d9:2a:dc:fd:c4:04:41:5e:
4c:36:76:a5:53:f5:c8:58:8d:bd:d1:05:c0:5d:7a:
98:e8:38:be:e4:83:cc:09:f2:6d:4d:c5:78:b3:05:
51:d3:72:de:55:b3:0f:34:46:29:d7:cf:65:37:a7:
de:12:23:0d:39:98:bd:51:66:9f:84:77:ca:29:49:
7d:ef:4b:52:fd:2f:ef:cb:70:58:d7:3c:2e:e0:69:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:B7:79:CA:64:B7:4E:7C:1A:25:2F:FA:8B:98:13:67:9F:28:64
X509v3 Authority Key Identifier:
keyid:BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f2:10:41:23:8a:56:6a:b8:9e:4b:0d:07:12:86:63:be:63:
7c:5a:65:e6:17:c2:45:7e:e1:11:87:64:33:2b:49:1c:de:16:
85:42:26:5e:cd:c4:66:11:5e:b1:47:75:a2:59:f5:fd:ee:1b:
8a:1f:47:58:38:a0:d2:44:47:6d:be:d4:43:b7:3b:9d:3c:b7:
7a:0b:70:3f:03:12:7e:11:61:a4:bf:88:c0:51:08:5b:32:33:
26:61:f3:d2:d3:a7:ef:ee:ec:51:c2:7a:ab:9e:c4:48:38:06:
2d:7f:b5:7d:17:00:54:38:46:cb:79:9d:c1:ab:fd:45:c2:62:
f5:ff:03:d5:b1:10:38:7d:be:8e:12:f1:6c:80:90:39:11:ef:
44:79:f5:c5:f7:af:ac:ab:ec:a8:6d:89:3d:76:7b:9d:5d:14:
54:d2:35:b7:b6:31:2c:3f:7e:7b:8c:7d:f5:f1:84:23:02:8d:
88:e0:92:48:e6:7e:1c:82:b4:f1:74:1e:4c:af:f6:f1:7d:cf:
60:be:8d:b2:71:8d:d2:ca:8c:69:5e:4c:0c:f4:0d:22:ca:1c:
75:e1:dd:47:77:dc:80:9d:22:ce:20:5e:76:04:df:1c:7a:5b:
d6:63:28:a0:1a:bd:dc:0c:c5:93:5e:82:9d:a8:ed:8e:59:28:
93:e2:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:34:35 2026 by rpki-client