
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: Ouo6RdXraWgwNYB3vZxLQH8sFS0TPSrjhUqSU5HCJmE=
Subject key identifier: 85:F2:F7:46:CB:64:70:40:5F:32:3E:A6:1C:1D:B0:7E:B9:F8:F0:60
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 019CAC4773BA8F848856246FE78490EAB475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0BB4
Signing time: Mon 02 Mar 2026 02:01:29 +0000
Manifest this update: Mon 02 Mar 2026 02:01:29 +0000
Manifest next update: Tue 03 Mar 2026 02:01:29 +0000
Files and hashes: 1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: 1eVbBJV+UccW+2B7SKofmW2uxK3l+n9xMgFjYvSKTIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:73:ba:8f:84:88:56:24:6f:e7:84:90:ea:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Mar 2 02:01:29 2026 GMT
Not After : Mar 3 02:01:29 2026 GMT
Subject: CN=85f2f746cb6470405f323ea61c1db07eb9f8f060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:01:6f:90:1e:39:ae:b8:0a:29:9d:0b:fd:
98:61:96:f3:cf:3d:6d:00:62:c2:b7:51:70:d6:5b:
e6:17:19:57:85:ba:37:9b:a6:16:21:b3:73:68:61:
0c:c1:b1:59:36:ca:19:49:8a:f9:35:f9:42:ed:50:
16:b0:e7:f8:9c:7a:45:be:5a:74:0b:ea:14:f2:e4:
88:3f:f0:8d:ee:e0:2a:52:56:30:67:ac:a4:67:4b:
72:28:e3:10:49:0f:5a:22:ad:0a:d1:64:23:60:b3:
89:93:48:98:95:95:87:91:a4:de:86:90:79:83:d9:
2f:ad:96:56:de:4b:d8:3a:b6:d8:b8:0a:c3:97:69:
d3:c5:fc:0b:eb:35:6e:e5:ba:a1:d2:89:fe:46:c1:
e5:5d:a5:1e:29:13:ac:d2:ee:a2:99:66:3c:8e:14:
45:fb:68:e6:08:c6:3e:62:40:1d:a3:72:16:a9:12:
40:39:39:40:01:3b:d6:d5:8e:35:c6:6c:57:7c:91:
01:fb:37:21:96:d4:cd:ec:fd:2d:c1:0e:3d:77:98:
ab:20:85:1b:57:3c:20:25:41:a7:93:eb:4e:7a:88:
1b:43:c1:2c:29:f0:50:5b:4d:2d:76:89:e4:d7:8a:
61:e9:ed:03:e1:a1:ba:13:b2:92:06:ca:36:7a:d9:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F2:F7:46:CB:64:70:40:5F:32:3E:A6:1C:1D:B0:7E:B9:F8:F0:60
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9d:5d:55:af:f7:be:fd:9c:fb:35:e2:2f:d9:df:3f:bb:bb:
f7:f8:dc:6d:d8:f8:8a:e8:21:68:07:cd:df:0a:8c:da:ec:e4:
fd:d9:1d:e3:1d:e6:2c:e6:06:0d:85:e0:e8:76:1b:2b:7a:45:
ff:8a:93:66:7a:e1:23:be:fe:55:d4:75:b7:db:96:5e:6c:0d:
14:c6:56:69:a3:44:ba:62:47:e2:65:14:2d:42:9a:5b:52:68:
19:3e:03:a5:bc:a2:0b:fd:7a:30:98:eb:45:e6:c8:a2:68:e9:
4a:6d:e3:31:e3:43:86:43:4f:43:7b:87:6d:05:62:a5:2d:74:
79:c1:2b:60:2e:ec:42:86:50:b8:3c:f2:e3:28:0f:c0:41:68:
8d:2b:2b:3c:c1:30:59:ca:6e:39:8a:a6:b6:11:10:0a:fc:f8:
90:40:93:e5:b6:52:67:aa:05:6e:99:ab:84:fa:61:be:40:15:
98:b7:8b:58:49:cb:ad:71:8f:8e:fe:53:6b:2e:ae:c8:0c:18:
89:8b:8e:82:de:1e:a6:f2:86:b4:e7:34:a7:34:22:e5:fa:b5:
e9:b6:e8:da:47:4f:5c:a4:c7:72:61:e3:75:cb:a0:23:2a:a6:
b5:37:02:3c:9f:70:14:38:5e:df:1e:f9:bd:02:20:6e:1b:c6:
5d:1d:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:47 2026 by rpki-client