Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: pbgyXCAEuagr7hHY4kdVMtpyl/T4j2E+iPVn9Q2hsTI=
Subject key identifier: 8F:81:B8:4F:F0:BF:9E:73:97:8F:91:45:FB:FE:39:0C:8D:79:B4:30
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019D9A3ECA46FF47498F3C9495805B93B1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 0BF6
Signing time: Fri 17 Apr 2026 07:01:39 +0000
Manifest this update: Fri 17 Apr 2026 07:01:39 +0000
Manifest next update: Sat 18 Apr 2026 07:01:39 +0000
Files and hashes: 1: dk1G9hz2trfq5CaaUBMe9RcS93I.roa (hash: lH6gfT8/HMNpYY4aojCo2W76iGRxmIa0HJsfcgDAePE=)
2: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: ZwqKYGB+zJ1IWQ5shk2BjG71nHiEaUpqHVFkZqxm6X8=)
3: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (hash: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ca:46:ff:47:49:8f:3c:94:95:80:5b:93:b1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Apr 17 07:01:39 2026 GMT
Not After : Apr 18 07:01:39 2026 GMT
Subject: CN=8f81b84ff0bf9e73978f9145fbfe390c8d79b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:f2:cf:7b:e0:42:06:54:4d:75:ea:7e:06:
c1:6a:0e:e3:56:21:e6:b1:84:29:85:ef:64:f8:16:
08:16:5c:f7:7e:2a:86:73:ac:a8:94:b8:dd:dd:25:
3d:2a:68:0d:09:65:e3:14:35:ba:60:1c:e1:4b:44:
e9:82:2c:d7:e6:f5:41:68:bb:9b:58:8c:ff:23:bc:
47:9a:87:22:f6:a4:bf:c6:0e:dd:e2:e9:fb:92:5e:
64:9a:b5:d9:d0:52:ce:0e:e0:76:5b:c5:ff:68:91:
e8:37:f3:58:bc:29:f1:36:03:50:9a:b1:78:bf:cb:
50:ec:28:74:06:87:95:9f:80:e6:63:bc:bf:4c:f7:
be:f7:7c:12:52:39:a3:44:6f:20:c4:aa:f4:6b:84:
73:49:44:24:c3:e6:97:8e:48:4c:2e:89:52:ee:0a:
4c:46:51:9b:ac:16:7f:59:2a:74:93:66:f6:fa:b4:
d7:2f:81:c7:41:52:9d:2c:52:59:d2:a0:0a:b6:e3:
e1:17:8e:9d:52:6b:2f:b3:87:1c:91:9d:05:15:df:
f0:9b:23:28:6a:d4:57:98:cb:1d:35:fd:5b:a4:22:
03:27:b1:3b:eb:b3:8a:16:40:62:43:6d:9a:71:3c:
a6:77:fd:2d:8a:5b:c6:b0:1b:53:4f:7b:79:5d:e6:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:B8:4F:F0:BF:9E:73:97:8F:91:45:FB:FE:39:0C:8D:79:B4:30
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:f9:a7:4c:69:18:c0:49:b8:3e:88:2c:1b:f2:ce:1b:c1:
ce:43:cb:a6:80:53:44:40:9d:6e:a2:97:9e:49:fd:83:a0:d2:
ef:c5:36:70:41:be:a0:0d:d7:d5:44:67:08:9b:2c:4c:aa:cf:
51:21:3e:2b:a7:9e:41:a9:d7:33:5d:f4:1c:26:4a:90:d9:07:
ef:b1:fc:be:82:da:e8:84:b2:f6:67:ec:0b:4f:ee:8c:4f:8f:
b4:5f:f0:c9:53:cb:f4:11:22:17:f6:3f:09:a7:71:c6:f5:0e:
d1:a7:a5:d5:60:27:79:e6:bd:e6:9d:76:03:9a:5b:07:36:fd:
6b:5e:46:61:2e:f0:ce:40:22:2e:84:3c:30:b0:7a:ef:27:b8:
08:29:9a:7f:ff:b5:b1:b8:97:53:cd:d3:f8:5a:b8:56:3b:7b:
97:07:29:34:d5:2f:dc:81:49:ef:fa:81:eb:48:ca:65:7b:25:
2e:ba:b3:ad:70:4e:ec:9c:7f:76:14:83:14:b5:b4:07:82:0a:
68:ea:f4:fd:f6:e4:a5:6a:e8:30:10:7c:24:01:2b:96:63:e2:
37:b2:6b:8b:cf:5b:e4:43:a4:af:74:dd:ae:68:01:9a:39:9f:
b3:a6:67:93:9b:da:36:89:1d:68:08:b4:64:62:aa:86:54:9e:
48:49:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:42 2026 by rpki-client