Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: b265KGQaFiH/UidCP9fde20RTDTiGzCXtTBY1di9DMw=
Subject key identifier: C2:49:C0:C7:15:2D:1F:7F:65:2E:4E:7E:38:73:B6:A6:66:4E:18:D8
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 019CAC7E0255B6C3D8A85F677333B6F39108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 0C41
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: fvwoz7v/hFhZa2gTNduw9WpQCBv9mR+U/W0LKg1/ecg=)
2: wEItEwxXTo8UEkPrbbqheWRaMG8.roa (hash: yoZaY3FJD2E2HyfnXNJYmTTSvlkSy7fNejE8EJiOlJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:02:55:b6:c3:d8:a8:5f:67:73:33:b6:f3:91:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=c249c0c7152d1f7f652e4e7e3873b6a6664e18d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:33:53:ec:70:f3:b8:bc:7a:0e:69:36:68:
72:3e:99:ce:96:98:4f:a0:50:33:94:a6:96:74:4c:
6e:9c:12:21:f6:f5:8a:9d:eb:48:0b:9e:8d:6b:ac:
0f:2d:5a:bc:3a:2f:15:56:46:5c:5b:d5:8e:da:de:
3d:26:ca:bd:5b:cc:59:da:77:e0:90:50:ac:2e:07:
aa:6f:60:20:aa:f0:0c:68:7b:6e:22:a5:4f:ce:9a:
ba:c6:9d:2c:58:08:51:e7:d8:a6:08:2b:93:69:ce:
2f:71:ba:ce:59:7c:2b:5d:8a:9f:66:80:cc:98:ef:
a6:08:34:6f:ba:ed:8e:a0:fc:e4:bc:b5:f1:2c:31:
ac:04:f0:74:36:f1:15:7e:d3:b2:be:c1:1d:74:1b:
ee:af:cb:6e:55:7c:c5:ab:31:05:91:f8:06:11:2b:
6b:8b:7a:0f:35:b3:91:fb:1a:4c:ce:e9:9b:c4:d1:
36:57:07:7c:e1:6b:9a:c9:92:78:54:35:5e:13:68:
7f:e1:fb:37:fc:67:64:39:6d:1c:8e:a9:6c:69:b4:
e7:e1:ae:23:e7:d2:16:b7:ae:fa:0d:5c:38:f8:1f:
e0:b7:b4:55:0d:30:b6:46:39:a5:e6:34:eb:73:71:
48:57:36:9f:bd:d0:72:5d:3b:d3:07:96:b5:69:f3:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:C0:C7:15:2D:1F:7F:65:2E:4E:7E:38:73:B6:A6:66:4E:18:D8
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:02:8a:bb:19:82:dd:59:f1:03:75:a7:0a:22:e5:3c:06:c7:
24:a1:c4:6d:1b:3b:1e:c6:14:4b:0b:65:3c:b2:f1:b5:56:fc:
a5:e3:a6:48:27:a5:84:f5:47:44:1b:12:06:a2:42:64:48:60:
a8:11:e9:b8:08:48:43:a5:f7:f8:4c:fa:f4:a8:f0:84:f4:e6:
5d:25:56:b3:73:e9:40:4b:03:c4:a8:83:ba:d8:44:53:ec:95:
3a:b5:f8:17:79:f5:db:17:f9:6e:6d:a2:9f:8d:b6:a5:6c:9d:
09:85:d0:8b:f2:b9:13:b2:bf:92:89:73:04:11:10:b2:4d:8b:
b8:b9:69:62:98:da:12:1e:ec:fc:71:2b:bb:ef:65:74:7b:d4:
2c:f8:4a:04:5f:c9:8e:f7:05:1f:b0:ab:b6:ee:a3:07:ad:a9:
93:76:5e:9b:67:03:1e:94:69:a2:af:fa:5f:54:6a:56:88:23:
46:37:a6:0d:a3:17:80:a5:38:ed:72:a9:6a:b6:53:08:5a:d1:
45:95:47:77:96:7d:63:d0:b2:0e:8e:74:e0:ad:81:a6:2c:0c:
01:cb:88:38:7b:7a:52:c6:f3:fe:26:14:5b:30:ed:96:2a:59:
f0:83:27:83:43:67:da:87:4b:ef:94:8d:f3:ab:9c:96:99:aa:
31:8e:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:31 2026 by rpki-client