Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: oe95yTEpmp7+c3kPDrgJHTyKqaGR0ivEJLCDz1Tldt8=
Subject key identifier: 14:B8:77:11:0D:5E:49:21:71:DB:44:88:5A:B3:84:87:B9:1C:64:40
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019CA9EA8232DA899672875B21C199A37C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 1269
Signing time: Sun 01 Mar 2026 15:00:44 +0000
Manifest this update: Sun 01 Mar 2026 15:00:44 +0000
Manifest next update: Mon 02 Mar 2026 15:00:44 +0000
Files and hashes: 1: bC2nxaXOoHLRq70D4NmWbSzAMRA.roa (hash: Rlixk9Fe/cWKW5omfOghhyxI9gFtiGAWS+9ajtBV+dc=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: ZvTZOKjacHoqFB0R5g4jILVJPONcqsqz2scpWALywRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:82:32:da:89:96:72:87:5b:21:c1:99:a3:7c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Mar 1 15:00:44 2026 GMT
Not After : Mar 2 15:00:44 2026 GMT
Subject: CN=14b877110d5e492171db44885ab38487b91c6440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:56:9b:d7:c4:ca:f5:24:07:8d:e6:cd:7e:
54:a6:dc:64:85:6a:64:a1:16:71:33:0d:33:3d:82:
a3:82:7e:26:a0:51:6c:9e:48:53:bd:58:80:08:41:
de:85:19:59:4e:ea:d2:ab:94:cc:9a:9e:8c:a5:48:
2a:af:00:64:f1:18:7e:44:90:7d:62:c0:43:a3:e5:
b7:51:84:3f:91:64:40:95:ff:73:fe:58:47:38:85:
d4:2d:1f:4a:f1:a7:28:55:76:03:8f:c2:74:16:9f:
3e:c2:08:48:64:28:9b:e4:32:43:79:8e:22:71:ca:
bd:13:99:d8:86:2d:4b:a6:00:d9:8a:d5:6d:9c:a2:
e5:76:24:6f:82:7a:03:78:8b:1c:09:a7:5e:23:d5:
05:27:22:af:db:0d:2b:9d:a6:02:d0:a5:3a:5c:67:
6a:c3:95:41:15:bd:9a:6e:c9:52:85:be:26:ba:3f:
b2:f8:5c:9a:4b:5a:af:90:62:15:2d:d4:af:c8:fc:
fb:d3:2f:1c:29:66:dd:15:90:de:80:f0:70:ca:e6:
1a:89:ab:43:c2:42:95:a5:b1:95:17:af:6e:fb:15:
f5:aa:f1:9d:52:c6:a4:78:b0:cd:31:03:22:33:33:
5a:33:88:ca:a6:0d:b5:22:5e:77:d9:2a:57:c5:31:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:77:11:0D:5E:49:21:71:DB:44:88:5A:B3:84:87:B9:1C:64:40
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:c4:46:97:94:63:27:19:da:88:ac:f7:06:19:6a:82:fb:
19:1a:1f:29:4a:c1:0d:b5:b3:71:34:01:0e:af:e7:89:ba:20:
5f:9a:c2:05:94:bd:62:11:cb:9b:8d:82:5d:66:47:46:e1:c4:
c7:92:ef:77:19:66:3a:0a:fd:99:4d:b7:99:40:0f:36:e2:75:
fd:d4:4e:4e:d1:02:75:a7:df:6d:6b:26:37:e6:ae:fe:b1:b8:
95:cb:d8:f0:d5:ed:5e:b8:f7:1c:95:73:87:11:48:fc:0e:6f:
7f:9e:24:25:92:41:75:ad:52:6b:88:82:b8:82:cf:7d:b8:1b:
c6:0d:3e:ad:89:83:fe:5e:0d:98:db:cc:2a:3e:5b:80:e2:94:
5a:98:d8:83:d5:c5:25:d9:82:23:b2:43:62:36:0f:5b:5f:8d:
37:27:14:22:6f:d4:26:3c:c4:c0:24:5b:95:62:de:55:55:0b:
b7:e5:55:0e:8f:3f:ae:6b:b8:2b:af:96:da:6e:20:03:e3:d1:
32:f9:f6:31:4d:99:c8:11:68:2a:63:e7:84:cb:8c:b8:66:18:
96:9e:4d:37:87:c2:9e:90:da:57:d2:73:12:2c:4c:be:4b:ca:
5d:c4:c5:b0:ad:8b:91:30:dd:a0:63:4f:db:98:9c:66:b3:ec:
fb:3f:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:51 2026 by rpki-client