Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: qqkhHEpbT09e4xWijzot0MTcVsozZ5AwrHnSRKRZwtE=
Subject key identifier: F1:F1:29:18:41:7B:1A:A2:46:A3:F9:C9:34:2C:23:F3:99:80:19:8C
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019CACB4DEBCFB989A228936C4C5CBF5B009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 0B7B
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: dk1G9hz2trfq5CaaUBMe9RcS93I.roa (hash: lH6gfT8/HMNpYY4aojCo2W76iGRxmIa0HJsfcgDAePE=)
2: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: qJqbdxqjtkjMYdT53hejOwoLj17T+29SmTY/+42ZuKM=)
3: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (hash: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:de:bc:fb:98:9a:22:89:36:c4:c5:cb:f5:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=f1f12918417b1aa246a3f9c9342c23f39980198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:57:88:01:44:de:8e:74:e6:92:75:d0:aa:
d0:84:46:97:af:5f:71:8f:c4:44:f5:31:eb:b0:ef:
5f:49:8c:3d:16:af:79:61:b9:ed:aa:71:14:04:ed:
3f:5a:da:ec:87:e9:2c:99:16:8c:38:e7:56:d4:58:
a6:15:4f:5c:9f:07:bd:a8:5a:1a:35:81:f5:3e:07:
4b:a4:ad:69:5d:75:6f:44:f8:69:26:b8:61:ae:92:
7e:2e:b7:ae:13:c4:e1:cf:c2:b2:4b:e1:57:24:ff:
be:1d:0f:37:fb:39:4b:52:2b:6a:d0:49:13:a5:8a:
fa:0b:a6:bf:2a:8c:52:46:d4:8a:d5:e2:1a:ae:1a:
37:ca:34:18:cd:a6:40:1e:5d:14:e0:fb:66:a5:06:
fb:63:57:98:b4:10:7b:af:27:77:cd:3d:fc:5c:9c:
c5:09:61:0e:e6:45:f9:5f:55:f7:ca:b5:a0:4a:d9:
46:60:29:88:78:f5:31:89:f8:02:00:59:83:1e:f6:
5b:10:1c:0d:65:e3:e5:53:64:89:86:cf:85:2f:fa:
35:fa:17:cc:5f:a8:82:ca:06:e8:0c:ec:0a:51:60:
05:1e:82:d3:7a:4f:13:33:77:d5:b9:f1:6a:58:3d:
51:8c:a4:7a:b1:99:d8:0a:cb:c9:26:bd:cc:96:a6:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:29:18:41:7B:1A:A2:46:A3:F9:C9:34:2C:23:F3:99:80:19:8C
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:54:0d:e9:3b:43:69:4b:40:1e:86:9a:1e:79:d3:8a:45:af:
c2:b7:0b:c1:08:5c:95:2a:d7:c1:c8:09:01:f3:b7:24:fa:69:
d8:55:e5:72:8f:39:56:55:0c:12:8c:29:c3:6a:0e:65:7e:cd:
37:c1:79:a5:4e:1a:8e:23:7e:ba:61:83:63:9b:f1:e4:42:8c:
a6:86:c1:86:1d:3c:ba:d0:e7:ad:d8:96:67:85:84:47:a9:50:
da:4e:21:b9:94:05:c8:76:d2:87:f4:e4:03:b0:3c:38:2a:a8:
02:65:1c:90:f2:5e:5b:6c:74:01:80:88:17:75:6c:12:fd:cd:
81:0b:c1:60:e9:62:2a:9b:8d:0d:4f:f3:63:49:65:5c:df:0d:
72:a5:b0:a0:e9:73:f5:81:e4:f2:f2:97:e3:7a:4e:55:08:b2:
9a:af:88:46:8f:c2:74:97:2f:a5:54:fc:03:7b:76:47:55:01:
6c:d1:c0:bd:62:b2:47:74:d3:54:49:b4:3d:e0:18:2f:0c:ec:
07:0e:80:27:c8:a4:6e:89:63:74:d2:d3:36:c2:dd:db:84:fd:
07:83:d4:ee:5a:2c:08:e3:18:59:28:dd:c1:6b:41:5f:fc:2f:
70:4b:77:9b:cb:c6:e1:55:f5:c8:ec:d7:cc:d2:93:4f:17:2d:
3e:f1:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:20 2026 by rpki-client