Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: Ep/fvgqN32trgRmyiiToD9+H6u37OlnhNe6mPQODwHk=
Subject key identifier: 73:35:43:64:AA:19:6A:1B:41:A1:D5:6E:C6:C6:84:D6:1A:FB:53:B5
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 019CACEB625F88993801C99FA92601260097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 05:00:33 +0000
Manifest this update: Mon 02 Mar 2026 05:00:33 +0000
Manifest next update: Tue 03 Mar 2026 05:00:33 +0000
Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: bG78tZR4cZogZNNE69tMfUQa5JJjssRTUmHtiNeklgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:62:5f:88:99:38:01:c9:9f:a9:26:01:26:00:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Mar 2 05:00:33 2026 GMT
Not After : Mar 3 05:00:33 2026 GMT
Subject: CN=73354364aa196a1b41a1d56ec6c684d61afb53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:49:5a:7c:7b:a3:c1:2e:c3:7d:56:85:f5:
96:79:34:ab:61:a9:a8:d1:97:61:5c:c7:31:fe:35:
59:bc:50:3a:e6:f2:99:99:b3:d8:45:f4:67:bf:cc:
bd:bb:3a:e0:1b:70:d4:d7:4c:3f:fb:75:83:f5:18:
23:7e:09:a1:1e:17:9d:04:6f:cb:48:c3:3f:e1:cc:
bb:bf:36:a3:c1:d6:7c:e2:f7:57:6d:c0:ff:71:b4:
f2:89:72:65:58:33:ad:72:0d:22:da:e0:6f:f0:12:
41:28:d1:81:a9:91:27:e5:d9:d9:f8:33:3f:bf:96:
10:39:1d:c8:96:13:ce:1d:8b:c9:5a:63:1d:03:ca:
0d:07:0a:77:57:c8:3a:df:dc:85:d4:87:2f:91:7f:
0b:fb:05:be:d7:8d:22:9d:25:52:d7:28:e5:78:22:
29:00:80:3d:4f:87:18:86:9a:b1:c9:7b:8a:3f:21:
eb:72:20:2f:ab:89:90:c2:4f:89:10:26:de:0e:f1:
d0:01:44:8f:9c:8d:43:b9:2d:60:33:85:06:83:f6:
9f:5b:c7:28:69:0a:39:fe:76:24:d7:63:ec:d3:1d:
bd:a5:9c:7a:e3:8f:bc:43:43:52:c8:22:68:b8:66:
9f:ab:29:72:f3:cf:b8:62:c5:ec:03:90:27:a3:b4:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:43:64:AA:19:6A:1B:41:A1:D5:6E:C6:C6:84:D6:1A:FB:53:B5
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:51:6b:1b:6c:17:7a:4a:9c:96:31:b3:dd:fd:1a:81:cf:a4:
54:70:cd:bb:05:14:00:70:b6:40:07:2f:fb:b9:7b:99:f3:c8:
5b:b5:4a:85:c0:d9:c6:0a:a2:ab:2c:f0:5e:ea:28:f0:ec:af:
35:77:b3:6b:91:1c:4a:9f:bb:35:38:71:22:b6:11:55:88:08:
ca:03:48:0e:e0:50:00:fe:26:7f:e8:49:15:5d:dc:8d:8b:09:
ca:6f:e3:15:e0:3e:d9:29:5d:85:51:98:87:71:12:61:f1:fb:
07:13:0a:35:a1:3c:fe:00:35:0d:a9:03:73:b9:83:22:fb:db:
98:81:32:19:34:47:82:99:37:76:c5:33:d1:f6:8c:92:c1:99:
4b:5f:a5:76:9a:6d:70:6b:8b:1b:44:ca:88:d9:96:c2:55:84:
e0:1d:ca:e7:5a:8a:47:eb:0e:fa:47:f0:cf:9e:77:f6:4a:4a:
c8:45:1b:f1:93:5c:69:17:20:af:13:3d:a1:0d:73:aa:6d:a3:
15:f8:19:34:d0:d3:e0:e3:5c:12:41:20:19:77:7d:b1:78:bd:
54:dc:da:1a:95:11:08:77:f1:8c:9a:57:b0:83:cf:87:89:94:
95:37:c5:06:52:fc:95:f7:1b:46:ad:34:bb:f9:6f:07:ce:03:
bd:74:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:42 2026 by rpki-client