Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: g86SpqSELKy28iyRFCoNDD9rkOC4i/e/xMADKMtdAJE=
Subject key identifier: 38:63:05:1B:26:02:67:51:FF:FD:84:7C:42:7E:21:3E:1B:D0:59:18
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019CABD97E8CC4BC6C7030E0F91CCE6667FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: IkP0hTgpmJ64sa7MrN6uJEeFm1+0xcpLFTR/+4KCe44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7e:8c:c4:bc:6c:70:30:e0:f9:1c:ce:66:67:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=3863051b26026751fffd847c427e213e1bd05918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:7f:74:1c:f4:86:35:a6:d3:10:8b:3b:81:
15:75:e8:29:58:78:7a:84:09:f0:a6:46:70:22:76:
19:3b:46:e6:5a:4e:66:be:66:d3:52:f9:de:70:a3:
71:ea:93:48:db:2f:d0:1d:c5:e3:5e:31:b3:f1:ff:
56:5d:e5:43:28:cd:c2:73:a3:d1:fc:7f:d7:c8:05:
6a:4d:ae:b0:00:33:a9:47:6a:96:51:e9:0a:87:cd:
ad:02:c9:64:a0:35:22:03:0b:12:ca:b4:36:a1:67:
43:52:51:32:37:c2:00:78:38:8b:85:c0:e7:a1:04:
2c:da:0e:2e:34:59:5c:30:2f:99:8b:37:a9:5f:0d:
fc:a1:6a:47:85:ef:3f:46:da:ff:4f:7b:e6:5d:2e:
d6:df:7a:39:f4:9e:fe:f3:90:05:c4:40:97:74:7e:
49:b4:7d:10:e5:e7:95:a7:81:5f:5f:07:a6:13:34:
0d:2c:4e:c5:25:d5:15:3d:93:73:b7:69:ed:b0:8a:
3c:d2:47:47:a1:b7:49:8a:a7:20:86:1b:40:cc:c7:
12:81:f8:d0:66:b8:08:95:d3:0c:8e:7a:8f:d7:63:
8f:74:d0:27:2f:75:64:93:97:58:c8:d7:3e:60:48:
b8:8e:b3:42:ce:a9:29:3d:ad:d7:a2:6c:ce:df:21:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:05:1B:26:02:67:51:FF:FD:84:7C:42:7E:21:3E:1B:D0:59:18
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:42:f9:ca:dc:62:ae:56:4b:de:67:85:27:d1:2e:fc:34:
73:9c:01:7c:f8:d4:65:b8:02:ed:de:03:1e:a8:8b:60:73:d0:
96:3c:a1:6d:20:6d:82:9d:f1:bc:f0:4b:09:40:4d:83:45:06:
1b:f0:06:06:89:81:75:77:6b:7b:38:f5:57:0e:0d:21:e1:9d:
fc:6a:20:4f:8f:a6:e6:1d:80:30:d4:7e:2f:53:c0:4d:34:c1:
a5:38:d8:00:71:e3:d7:20:4b:e7:d2:29:54:7e:d6:39:8f:1b:
6e:15:83:09:ba:73:30:57:b0:ce:83:84:f0:1c:0a:a3:48:70:
ff:b0:27:ea:96:14:ac:48:32:72:12:f1:64:39:de:b0:47:f3:
f9:7c:a3:c7:cb:c1:d8:a0:e1:6b:f8:52:91:cf:66:97:60:19:
5f:3a:f8:32:db:c0:f2:34:64:97:04:4e:df:6b:67:0f:35:b5:
68:54:d1:c5:a1:b1:93:dc:dc:ed:a8:42:d3:d6:6e:f7:f0:f3:
81:34:48:a5:b4:30:d8:83:1a:42:0b:de:67:53:86:5c:fa:9b:
10:87:c2:82:ad:11:40:1e:9c:3b:f2:26:34:1c:1f:bf:ea:24:
7f:5b:37:9e:0c:1b:37:e6:00:e2:bc:4e:51:07:84:c1:8c:98:
99:c9:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:14 2026 by rpki-client