Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: vjD5KNYeCs9+YNttDuFvlS/oV82K7qOcJ4l9FgveIok=
Subject key identifier: 0C:D8:BC:A1:57:96:A6:35:3F:E9:2F:AC:76:54:B2:1F:E0:21:9D:0D
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019CA86A3C27FE17DDBB5CABAF0F47CE92F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 08:01:00 +0000
Manifest this update: Sun 01 Mar 2026 08:01:00 +0000
Manifest next update: Mon 02 Mar 2026 08:01:00 +0000
Files and hashes: 1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: xLt5/ArOTAKCDyIzq+AexaeA99D4Lk2TwGmaONCwUq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:3c:27:fe:17:dd:bb:5c:ab:af:0f:47:ce:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Mar 1 08:01:00 2026 GMT
Not After : Mar 2 08:01:00 2026 GMT
Subject: CN=0cd8bca15796a6353fe92fac7654b21fe0219d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:a7:b2:8f:b2:69:4f:6c:fa:7e:2c:1f:4c:
7b:7f:49:6f:52:15:08:8d:5a:c3:c7:76:19:d4:b1:
66:4b:ac:06:4c:6f:a3:8d:e3:c8:b1:c9:1b:82:f0:
ba:69:37:4f:a1:9b:ed:af:b0:ea:7a:87:d0:bd:ed:
08:49:5b:72:f9:cf:45:b6:bf:0d:b7:59:1d:7f:50:
4c:0a:70:1d:6e:31:54:09:fa:df:a4:0b:95:36:a7:
98:4f:05:52:16:bf:84:de:f1:20:26:bf:45:64:90:
56:13:d9:f3:f8:c8:bf:56:c2:2e:20:d4:16:13:e3:
68:4b:f2:ff:45:48:6e:db:8a:76:c4:31:f9:50:c5:
fc:8e:8b:8d:d1:b1:c0:98:cf:57:97:a3:3e:66:08:
42:e1:0f:bf:3e:0a:6c:5f:0b:0d:30:27:1c:8c:c2:
e3:4d:47:8e:00:59:44:07:e2:fb:ce:0a:25:83:e0:
95:07:c8:49:70:47:b5:bb:22:15:46:da:e5:2c:54:
61:a4:51:fe:d1:11:97:eb:05:21:23:d2:72:ab:88:
65:71:72:b0:88:c5:21:34:f4:75:40:55:4e:bb:91:
40:97:22:ac:ec:5e:1d:3f:1f:49:6f:f6:f4:da:cc:
eb:1c:31:f6:97:de:94:3e:8a:a0:68:8b:86:e3:64:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:BC:A1:57:96:A6:35:3F:E9:2F:AC:76:54:B2:1F:E0:21:9D:0D
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:c7:b0:92:20:7e:21:ad:45:90:55:b0:4e:8c:e8:cd:2d:
e3:65:d3:9b:27:88:d9:69:73:44:c4:65:19:eb:cd:b3:bc:77:
67:9e:16:72:13:07:cd:f9:0c:59:d5:a2:45:d2:e4:b6:36:5c:
47:0d:ab:a0:f6:a6:cb:17:da:0e:1e:0a:07:32:8c:74:2d:15:
60:34:a9:23:2a:78:d8:9e:82:91:5a:8b:99:c4:7a:cf:19:83:
f6:51:76:c2:5f:e3:59:a4:0b:1e:a0:e1:3c:22:81:02:d5:42:
1b:48:1e:1e:1d:d7:b1:a3:49:d4:ab:ad:19:a0:24:81:2b:ae:
d0:f6:12:97:3f:f3:90:03:d4:49:e8:36:a2:95:f7:10:ff:34:
a5:1f:aa:50:f8:c0:4f:59:c6:cd:67:f9:2e:5f:50:64:60:db:
42:3f:54:bb:c6:9a:3f:68:2f:91:a8:51:db:4d:5a:7d:a8:c1:
72:42:29:cd:83:92:a3:42:26:0c:26:20:35:68:73:6a:6c:32:
ca:70:8d:49:c5:01:d8:e4:ed:69:5d:77:fb:d3:ab:af:43:60:
ad:8c:fd:8f:e0:0c:ed:7c:27:7e:48:a1:5d:4f:ed:06:24:e9:
1b:c0:03:87:da:7a:a1:16:5b:8c:3d:c9:cc:98:c3:06:41:79:
d4:e5:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:25 2026 by rpki-client