Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: +WGFrmPq/qilOH0OAg+XCwvZeESHxErjWGSCYAZ9t6k=
Subject key identifier: 87:7C:81:F8:74:D0:7A:9F:84:54:93:E7:6E:11:19:18:F8:53:68:0C
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 019CAA2141C1AAEDF9FA70AB021148511840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 16:00:31 +0000
Manifest this update: Sun 01 Mar 2026 16:00:31 +0000
Manifest next update: Mon 02 Mar 2026 16:00:31 +0000
Files and hashes: 1: DnP6GcDKWF77PKsQ6HasKB8i_K0.roa (hash: 5rS9bW+Cd7FZhz3igcUd9hkUorfrY7/8Znu4PQmJGxs=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: ORLptKO2Qa5Buze9iR6LmZ61zhjZLDO1hOCAVk1gLgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:41:c1:aa:ed:f9:fa:70:ab:02:11:48:51:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Mar 1 16:00:31 2026 GMT
Not After : Mar 2 16:00:31 2026 GMT
Subject: CN=877c81f874d07a9f845493e76e111918f853680c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:50:b1:49:5b:d8:97:cc:ed:e4:f8:d5:97:
e9:1f:cb:a6:a5:bb:31:e9:ae:43:d1:31:49:da:66:
15:c1:a5:77:37:ee:66:fe:36:5e:24:02:0b:e9:e9:
3a:0c:58:b9:5b:05:58:6e:0c:a8:58:1c:d4:df:dd:
35:c9:ea:ae:81:69:49:07:2a:b4:91:71:cf:41:4d:
21:9e:16:3d:ff:11:aa:fe:4c:70:36:02:33:93:88:
71:1f:77:63:c0:60:29:88:0a:79:7b:f1:b6:e6:b3:
28:c7:f1:c2:8e:d8:85:e7:22:d7:c6:37:15:cc:6c:
ce:9e:22:41:27:96:3d:54:8c:59:30:85:08:d8:ce:
54:40:33:aa:f4:c2:28:a4:0b:18:b3:61:62:8f:7d:
62:d4:16:c9:7a:75:4d:b9:73:b7:fe:4b:4c:01:d1:
5d:cc:22:90:2f:ff:09:91:23:3c:d3:58:0b:2f:e2:
11:ff:41:42:51:08:d3:7e:fc:df:46:8b:97:d4:ee:
2d:5c:be:32:3f:ca:fb:dc:34:37:ed:d0:7e:95:f5:
f1:2d:d7:04:e9:04:f3:a1:3f:2d:cc:01:ec:35:f2:
09:da:d2:12:24:63:8a:72:35:15:e9:2d:2f:6e:f9:
26:36:47:1a:fe:ac:08:59:4b:f1:af:b2:da:bb:89:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:81:F8:74:D0:7A:9F:84:54:93:E7:6E:11:19:18:F8:53:68:0C
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:78:fc:f4:13:20:2f:1e:e1:72:7c:df:f5:c3:aa:eb:ad:2d:
0f:ab:3e:45:af:ec:b0:27:06:4d:40:7d:e7:28:ab:94:c1:fb:
e6:a7:55:c1:76:6c:b1:c3:c1:65:be:d2:3c:af:4a:f3:d2:b8:
79:7c:fe:b3:5f:22:92:d5:0a:34:a9:71:bb:d9:d4:8b:bd:88:
a1:b5:77:2e:cf:c8:51:d1:fc:52:ab:77:e1:cf:ae:01:7a:85:
ab:fd:60:c4:49:41:88:0a:1a:88:1b:34:45:92:23:56:f4:a9:
80:f4:92:a3:8a:5f:69:52:d9:0b:09:3f:e4:8e:9a:80:3c:00:
23:36:0d:dc:d4:8c:d1:d7:5c:df:2d:b6:df:33:83:8f:74:c4:
71:ad:58:11:4b:43:33:d4:c6:65:6d:df:4b:93:fc:cd:5e:6e:
14:b1:b2:de:ac:17:b0:71:9c:62:d6:03:55:a5:aa:55:09:32:
81:61:41:71:dc:aa:fe:4a:ab:84:95:42:d3:2c:fa:29:1e:e0:
ed:1a:2b:ae:f8:aa:04:2d:99:eb:71:a8:df:c2:bb:67:e1:9e:
48:90:1b:8e:c7:e8:96:ec:80:7a:a9:16:67:5d:37:ec:82:03:
b3:04:2f:c7:3a:5c:2f:96:c6:c5:7c:9f:37:9d:e9:ba:0b:43:
67:4a:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:37 2026 by rpki-client