Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: YsA3w2RtXfOBpc9ZNzezTWJGsn7eai+eRZVKRLFR3Fw=
Subject key identifier: EE:9F:00:13:D0:3D:33:2D:96:3B:FA:50:DB:11:5A:08:D7:D8:4D:51
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 019CABD907EA5125753832DDA1017127C88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 1654
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: PYuODH0zBuvAiK-JKuXaExSuhvY.roa (hash: j4fDEw0K8kYxrAUmB58fcgklFQjA7X3SeZOjGCv6B9g=)
2: r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa (hash: q8BWxYBDwimUfBX5rZs0mS3SnxWzlL9k3GvkEkEzIbs=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: mVSDDynFkui5BlRpc5Sen0dC+V/eXD4jhl/1TL7ipP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:07:ea:51:25:75:38:32:dd:a1:01:71:27:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=ee9f0013d03d332d963bfa50db115a08d7d84d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d2:b9:b1:2a:76:94:5f:01:b5:11:39:86:06:
c3:45:8f:71:60:09:f3:6b:2a:ba:d4:79:10:ba:bf:
83:16:69:db:eb:ea:28:55:36:cb:34:4c:87:b8:fe:
4d:4f:7e:8c:0c:c8:4e:41:de:b3:76:3f:27:85:61:
4c:80:46:50:16:27:65:6f:04:2f:e4:74:f9:93:64:
cd:67:20:4f:a0:5d:9f:a3:35:90:a3:cf:4c:9e:c5:
58:8b:15:75:f3:ee:c4:20:87:d9:1c:ae:41:e6:7d:
ea:a7:37:be:77:cb:21:ac:80:d4:d2:63:c1:32:61:
bf:6d:28:c2:ea:6c:ea:ab:f2:56:32:61:3a:30:ce:
6d:23:41:d4:d9:90:8b:c6:f6:6a:70:00:4e:66:87:
2c:f4:e0:ce:b4:16:d6:5e:81:94:5c:44:c6:1c:25:
34:fd:02:92:ac:4b:87:be:99:20:8c:85:65:3e:b7:
87:27:03:2b:ba:ac:cc:53:1c:b3:51:98:74:6d:6c:
a6:38:af:55:7c:5f:ab:7b:65:9a:d0:8f:66:c0:a2:
91:13:23:09:48:d8:21:bd:d3:05:27:9b:18:2f:02:
04:b7:7e:f5:36:ea:f4:05:26:3e:84:66:4b:c4:fb:
07:d2:f6:66:df:b4:df:d3:a3:1d:e7:3b:f4:2b:f9:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9F:00:13:D0:3D:33:2D:96:3B:FA:50:DB:11:5A:08:D7:D8:4D:51
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:85:cd:d5:70:48:08:df:b7:f2:b1:68:12:38:35:60:80:8a:
7d:71:7f:d7:13:fa:9c:8b:d3:f1:e3:40:f6:cc:c4:2b:d5:fa:
6f:75:30:40:28:53:b4:94:1f:62:64:62:d9:c1:0f:6d:64:c5:
1d:03:c9:0b:c7:54:b1:c8:ac:37:93:93:ce:97:a4:3d:e9:ad:
fd:ab:5b:3b:19:e9:d2:11:28:25:5c:2b:1b:b4:9e:ae:14:92:
86:ae:df:2e:63:06:f4:e6:41:a6:46:bd:9c:4e:bc:24:69:7e:
46:70:f1:ab:3c:6b:d4:5a:49:9b:61:be:a8:16:d1:2c:ac:c9:
a3:b9:d6:df:81:2f:8f:40:1f:37:e7:59:71:29:5e:06:62:57:
8a:4f:f4:7e:94:2c:4c:9d:61:c1:06:ed:82:c1:a0:f3:54:f5:
c5:a8:98:8c:8f:a9:ea:6c:a2:c9:72:6c:de:ce:79:8c:f3:d4:
4d:56:c3:33:25:98:a0:a6:57:d9:40:7f:95:af:05:15:0e:20:
4c:45:ea:e7:7e:87:ed:00:a4:fd:66:11:de:03:9e:82:fd:13:
07:7f:72:45:c2:1a:e6:eb:a2:88:2d:27:35:c2:14:b9:d1:41:
98:cf:4a:dd:3b:5e:ef:cf:47:1d:4f:88:98:87:54:b7:c2:fd:
76:9a:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:11 2026 by rpki-client