Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: loNTwRHWiST1wZnKq5jAdI6IZ2R39lNn7KwjdNX9ysA=
Subject key identifier: 6E:05:94:88:42:80:FF:83:E0:4F:AD:2F:90:3F:64:D5:89:1D:82:5B
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 019CAEA356D49845C87388D470DF6385FB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 02FD
Signing time: Mon 02 Mar 2026 13:01:05 +0000
Manifest this update: Mon 02 Mar 2026 13:01:05 +0000
Manifest next update: Tue 03 Mar 2026 13:01:05 +0000
Files and hashes: 1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: +qhZCYOUbM1p2gneoA5qWcwjw74edEacs4v/qqRnsN4=)
2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:56:d4:98:45:c8:73:88:d4:70:df:63:85:fb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Mar 2 13:01:05 2026 GMT
Not After : Mar 3 13:01:05 2026 GMT
Subject: CN=6e0594884280ff83e04fad2f903f64d5891d825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:f2:76:eb:ab:f2:2c:54:a5:00:ec:f7:fb:
3b:b6:c4:86:5a:0a:e8:8e:dc:85:f4:91:0a:a9:35:
8e:f4:a6:7f:5c:49:31:14:35:da:5a:7d:15:83:e8:
8a:37:f5:bb:73:28:14:bd:58:56:85:85:e3:42:c5:
33:84:9f:f0:42:5c:39:c0:66:82:44:8a:29:11:10:
0b:20:49:50:6f:6a:37:5a:81:ad:81:b9:a0:f0:b2:
d3:df:2e:84:48:6c:33:12:70:28:6e:a1:37:a5:3e:
40:ef:01:8b:12:c4:7e:a6:aa:3f:c3:33:53:08:be:
85:e2:48:fc:b9:5a:24:44:a8:0c:9f:fd:a3:d1:9f:
bc:01:c5:f4:c9:87:f5:a5:03:d8:f9:40:4d:96:d9:
c5:4a:6a:60:62:9d:f9:fa:02:8e:70:8f:f3:1b:7a:
90:e1:f2:98:a9:46:03:7a:40:70:2a:8a:f2:88:d4:
e9:1f:9e:25:6f:55:e9:42:26:f4:6b:87:54:b7:86:
f5:a6:48:1f:31:97:f5:37:28:30:1f:d6:26:10:b1:
9e:eb:e5:cd:3b:c0:da:0b:82:59:e9:c0:ef:0e:b8:
49:c5:12:3b:76:f8:19:4e:a6:c6:7f:59:6c:28:57:
ad:1d:92:97:95:41:dc:9c:31:bf:2a:21:4f:ce:ff:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:05:94:88:42:80:FF:83:E0:4F:AD:2F:90:3F:64:D5:89:1D:82:5B
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fd:0f:28:d2:a7:d1:46:34:f5:28:9c:b4:2a:12:c2:bd:fe:
e3:80:11:71:43:2d:94:e1:b1:f9:b8:91:62:09:73:7f:54:60:
7f:e7:5f:27:0f:cc:58:2b:b9:01:75:bc:fa:43:b9:79:12:f0:
c7:a3:8a:f0:ec:df:a1:4c:56:75:53:51:15:ba:41:31:1e:71:
0f:44:e7:b3:6f:44:8d:e7:c6:27:7e:cf:c3:ed:52:af:bc:0f:
8f:b9:f2:39:8e:1e:f3:9d:0d:6c:b4:e1:11:2e:81:08:d9:8d:
e6:71:da:df:1d:a3:b1:f9:bc:d0:d5:6b:f6:4c:da:17:c4:26:
02:dd:80:89:8b:05:dd:3c:55:86:25:73:7e:95:6a:60:9e:10:
ff:ab:8e:94:42:55:90:eb:70:83:de:f3:8b:0b:56:db:5b:89:
fc:ae:f8:e9:6c:8a:c4:3c:a2:df:34:c1:84:02:ff:e2:a4:bc:
ab:6e:b0:d7:58:63:cf:7f:58:2a:ab:70:f4:05:04:46:15:17:
ee:2a:59:5c:f2:04:a4:ed:32:9e:d4:b5:65:a7:e5:d9:d5:66:
db:90:95:b8:14:dd:b8:64:bd:d4:d3:46:b8:10:3e:0d:22:f2:
7d:96:08:74:f7:0d:0b:e9:70:32:1d:ed:15:20:2b:fc:33:59:
bd:41:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:49 2026 by rpki-client