Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: cAMvTbSYnQEIl1oNgaw/tuaH11qkbULTGpmxXWjbuJ4=
Subject key identifier: 36:49:59:E8:F4:86:C1:64:92:E7:51:17:1A:F0:1A:A5:F1:F9:25:B3
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 019CABD8E8807AF3CA3BE31518E35EA3A2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: FCHXCRty0sDDNVg9sUK9lZqD9SYZQjKOtfk8LGzA27M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e8:80:7a:f3:ca:3b:e3:15:18:e3:5e:a3:a2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=364959e8f486c16492e751171af01aa5f1f925b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:00:f9:4e:38:a4:83:8f:85:c1:2c:4f:ab:
4f:f6:e1:8c:0d:f6:ab:23:c0:dc:43:74:62:f2:f8:
f8:12:99:d0:a7:7b:c2:d0:f4:39:b5:2a:c9:6e:e9:
2c:5d:fd:19:02:73:63:39:a4:70:80:42:e2:b8:3e:
a7:54:a8:7f:1c:fe:6a:a9:e8:84:f0:4e:be:9a:04:
6e:63:c9:39:24:78:02:37:24:32:f6:3d:40:ac:f1:
aa:31:4e:d1:87:80:76:e6:95:b4:b7:59:50:e5:da:
fc:1b:62:4d:d3:29:bf:2e:c3:8a:ae:59:e2:ef:af:
c8:6d:e9:2f:51:c9:a6:ec:f9:75:aa:5c:7c:17:18:
75:f2:bf:ae:98:36:71:70:b0:36:3a:c7:d8:23:65:
21:c4:e7:8e:5a:ae:bc:75:34:74:4c:e0:14:ec:e6:
a4:d6:3f:18:3e:e3:57:d6:4c:46:1d:1e:1c:7d:81:
5d:ad:58:28:d9:bd:b2:68:df:d7:bc:3d:82:0a:55:
5d:28:08:cc:05:b5:05:77:86:82:ef:70:eb:83:c1:
7b:b2:5f:cf:07:95:62:f0:2c:72:8d:bd:6c:b2:a3:
89:28:d8:e4:16:5d:8e:79:8f:0c:ac:e0:12:73:b8:
62:ac:cf:ad:c7:03:b3:38:f3:71:2f:6d:00:f8:8d:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:59:E8:F4:86:C1:64:92:E7:51:17:1A:F0:1A:A5:F1:F9:25:B3
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2a:58:79:ee:d2:10:74:b8:c7:55:4e:1c:4c:ae:a9:32:4f:
33:fc:73:9e:25:0a:af:c6:ce:8d:39:55:18:b2:be:71:2b:af:
45:b4:7d:4e:ff:ef:ac:03:87:13:95:cc:9c:40:78:42:73:6e:
e1:c5:6f:e5:a2:97:5e:8b:ca:bc:33:1d:99:ba:ad:b5:11:6c:
95:70:f6:e4:56:70:8d:46:08:ed:98:f4:0b:67:8b:d5:8b:99:
57:cf:73:58:1c:a1:b9:b3:06:bd:d5:7c:55:63:33:d3:fd:72:
20:84:bc:0b:5d:8e:a5:30:02:a5:a7:ef:8d:f5:81:2c:a2:2c:
42:c2:1d:77:fc:df:4c:5e:a1:54:ad:ad:cd:25:39:9f:f4:0f:
a3:d3:73:14:ac:fe:99:c3:f0:05:9a:17:e2:9f:97:4e:7a:ee:
78:10:70:d2:3f:06:d9:ea:21:a9:43:50:35:e3:76:88:d0:c1:
06:6b:68:4f:46:5f:d2:b2:41:00:12:82:a7:24:2c:83:2b:84:
50:a3:e2:b3:45:f8:b3:82:37:06:78:b9:5a:2b:8f:8b:0b:30:
e4:ec:f4:50:a0:a8:41:0e:34:fa:7c:3e:49:6c:62:d4:48:9e:
35:eb:6a:56:ad:67:ba:b5:0d:ab:61:1f:5a:2f:70:fe:82:da:
2b:df:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:44 2026 by rpki-client