Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: XB+03SCW+NnAgdSQfaTQXXCK6EASbOLfCSaZ9iiW5xI=
Subject key identifier: CE:AB:21:38:B4:33:5D:B4:4B:2D:E3:B5:80:EF:20:44:63:3E:31:8C
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 019CAAFCFFB7F21721A270E15477B9C1BDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 0961
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: hXEjZNuizVLb54bNDgzP0/82uCg3fBuK43I3zriXh3U=)
2: xdDHjpMxa5Db0sg2IbYCFBzBU4g.roa (hash: i6O8Zdm48WH9FHIuopoB/Fvv/PqB8Y1fepb+H0IN4zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ff:b7:f2:17:21:a2:70:e1:54:77:b9:c1:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=ceab2138b4335db44b2de3b580ef2044633e318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:f8:85:82:f8:c1:09:84:17:8e:00:7d:2a:
66:a3:9d:77:25:0b:bf:0a:e1:c3:03:95:c2:0d:13:
69:a1:2e:f3:4b:35:18:58:05:22:cb:6f:4a:a1:44:
e2:34:f4:fc:35:fc:38:94:9d:ba:07:e7:4a:13:15:
fe:98:b2:df:72:e4:66:a9:57:f3:33:5d:9b:c0:0d:
05:f9:d7:2a:ed:d5:bb:39:c7:57:62:76:af:38:ce:
45:75:6e:68:7c:1f:56:f7:98:59:3b:b5:33:92:c7:
0f:08:63:0f:c0:b3:86:3f:36:5f:8c:12:1f:2b:70:
56:71:ad:8a:06:15:7e:61:78:f5:0f:11:82:67:21:
71:ae:98:8f:ad:17:a3:d4:4d:11:97:20:d7:ed:ef:
85:2e:46:81:a9:ab:9c:d8:6a:66:e7:84:70:99:f3:
ed:85:40:f4:d3:3d:ed:da:06:19:4f:7d:37:e3:2b:
89:f0:eb:83:08:9c:35:b1:d4:92:6d:f8:e6:12:d5:
a1:0f:59:c3:08:f9:d2:a6:31:4d:91:a7:4f:d9:ba:
69:1b:75:1e:e6:fc:ac:69:03:69:f5:8a:48:7a:cb:
9f:0f:4b:5f:2d:01:ac:a4:ec:bb:f1:24:d6:f9:dd:
02:c1:88:65:21:95:29:12:44:c1:9d:63:be:b8:f8:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AB:21:38:B4:33:5D:B4:4B:2D:E3:B5:80:EF:20:44:63:3E:31:8C
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:db:f5:96:a6:8c:a9:1b:8f:fe:3c:e8:c2:28:9b:eb:b5:3a:
0a:d9:e1:2b:09:03:7a:8e:e2:be:6a:85:4e:62:de:fb:05:d2:
e6:5d:45:c1:bd:c5:97:8e:cd:dd:98:e6:2c:99:ce:74:53:6b:
21:37:4b:d9:8a:41:3a:f6:eb:99:99:40:94:e3:df:90:3a:9a:
30:6a:b0:7e:79:4c:7f:c0:19:1b:3b:df:4a:77:eb:14:cc:34:
ca:27:45:cc:34:58:b0:b4:cc:af:9a:1d:dc:a9:32:54:f1:53:
9f:7a:34:5b:61:85:ca:e9:ec:01:63:32:6b:ff:43:5c:10:9d:
1b:90:68:90:42:5c:ad:ca:c3:e0:e7:b2:d4:be:75:76:a2:78:
e7:01:83:46:5e:dd:91:54:9a:7c:e4:51:8c:4b:ae:7d:0b:34:
8d:47:3a:ee:25:09:ff:c0:66:04:d8:e9:1a:90:63:2a:7f:8f:
0a:44:c0:86:2c:94:d6:e2:93:6d:c8:2f:cb:dd:d8:de:45:e6:
58:3a:26:f1:06:ac:b3:cd:00:88:5e:b6:6d:91:e0:bd:04:5c:
02:b4:48:f4:77:e0:a9:a1:f1:24:31:0e:3b:5b:b1:6f:47:f3:
f2:f2:f6:47:14:9b:49:99:bd:7b:19:3c:78:be:f6:ad:3f:02:
be:a9:46:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:11 2026 by rpki-client