Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: G6268C1GqanplVlhENUYYR3Wj5EVf6NypCD+KiRT9Zk=
Subject key identifier: ED:C4:80:F6:6F:8F:87:1A:51:62:B6:17:B4:91:CA:6B:CF:9F:3D:39
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 019CAA58F04A992C37FF42FC7685DAD14AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0E0D
Signing time: Sun 01 Mar 2026 17:01:21 +0000
Manifest this update: Sun 01 Mar 2026 17:01:21 +0000
Manifest next update: Mon 02 Mar 2026 17:01:21 +0000
Files and hashes: 1: 7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa (hash: 5arTTImvBzaIRupQVayIK37D8OB4WYArstAWqXrZVwM=)
2: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: cnzjOXiyTmN7Zv0mNPQD9vSGBVWhnq7yLoXVGY8vREc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f0:4a:99:2c:37:ff:42:fc:76:85:da:d1:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Mar 1 17:01:21 2026 GMT
Not After : Mar 2 17:01:21 2026 GMT
Subject: CN=edc480f66f8f871a5162b617b491ca6bcf9f3d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:50:51:28:f5:51:e7:fa:60:cc:24:26:50:
c6:b3:f9:9a:75:a0:a3:49:05:78:db:32:c2:dd:c5:
9b:37:a0:02:ba:bb:90:46:e4:0f:52:82:0a:28:3f:
cc:22:7d:81:d2:f5:31:c3:73:55:c5:d7:00:30:73:
b7:9f:ae:6a:71:83:6e:69:e8:0b:37:9d:1f:c9:df:
c8:b2:fa:5d:54:16:e6:62:4e:18:8f:0c:59:92:43:
0e:32:cf:2e:04:f4:41:f1:18:8e:3b:0a:52:ab:50:
1b:6f:7c:13:1b:cd:d4:88:f1:d8:9f:77:c0:9c:a2:
47:85:ae:8f:61:a2:d3:7b:22:55:62:44:65:63:ca:
97:71:fc:84:87:59:4f:5d:b3:87:7b:6d:df:cd:48:
18:4b:0c:aa:a5:40:ab:99:0f:23:e2:97:58:4b:79:
3f:fc:ce:ec:fd:93:a9:fa:3b:e6:31:3a:58:1d:63:
6c:12:fd:3a:82:42:9a:9b:ff:63:b7:95:0b:69:39:
30:5a:98:d4:ea:59:1c:cc:3e:84:41:67:ed:8f:16:
0f:04:7d:7b:71:64:05:80:2a:91:06:bb:3b:67:26:
5c:37:5a:46:45:91:5e:a2:f7:7a:b0:10:f5:7e:86:
51:ca:3b:b4:51:17:fc:0e:d3:dd:e8:e9:9d:d8:e9:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:80:F6:6F:8F:87:1A:51:62:B6:17:B4:91:CA:6B:CF:9F:3D:39
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c9:e6:b6:0f:4c:42:21:a7:f2:52:18:5d:b4:48:48:8b:c1:
67:01:8e:d4:1a:d0:3f:e3:3a:29:9a:fd:31:be:39:7c:0e:b8:
ca:9e:e6:a9:cd:67:a6:72:b8:94:9e:93:5a:1f:eb:ba:cc:b4:
11:8c:10:5e:0a:43:0f:a4:0e:9a:7d:fa:24:72:33:f8:e9:43:
0e:30:e3:28:4a:a7:45:90:71:fb:7b:43:04:34:ee:ce:74:ca:
ca:f6:27:c9:29:78:ea:3c:6c:e1:f9:89:97:24:c8:4d:d1:e6:
5f:24:84:9c:10:e8:cf:28:28:08:d4:82:05:96:dc:a7:cc:d8:
1e:11:dc:44:8c:1c:de:67:f5:a1:2f:98:24:d0:99:29:61:fb:
5c:c3:e3:0a:43:1b:50:84:23:23:b8:4e:02:2a:72:9c:34:2b:
09:0b:8d:e9:e5:96:6c:fc:bc:ea:76:11:b7:db:6e:e2:10:fa:
5b:0a:1d:a2:0d:a2:fa:79:2f:9d:e6:68:78:ca:e7:58:d1:a6:
21:17:2c:75:e2:e0:07:da:aa:5d:19:6e:35:a8:c9:7b:e0:6a:
d0:a3:60:c1:13:31:20:47:10:7b:e8:59:5f:36:12:50:8f:f8:
53:24:cb:d1:93:ca:4e:08:6a:20:c8:1d:4b:17:64:62:60:32:
15:af:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:24:02 2026 by rpki-client