Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: Xw+cETTs2RhgGLNb+emqP8rqWbc475uIF7Qv7gaZBFY=
Subject key identifier: F3:C6:88:1F:CE:B8:DF:AB:43:C1:01:08:76:2D:5B:03:99:77:81:F2
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019CAC46A9491A8AB262DFC92374AE18E73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0121
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: NadFmu24a3AdUPK+dWRk28wMZOs/Gymfdja5f05a1hs=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a9:49:1a:8a:b2:62:df:c9:23:74:ae:18:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=f3c6881fceb8dfab43c10108762d5b03997781f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:a3:fe:62:74:d9:3c:4d:e2:06:0d:8e:54:
25:29:c1:a4:d0:dc:7a:6c:49:bc:6e:17:fa:8b:b4:
33:4c:8a:c2:dd:f9:fa:63:be:61:ef:73:b2:ee:d9:
17:f3:5c:34:7d:3d:24:97:d9:70:7e:c0:be:65:36:
54:f8:9c:d9:9a:ff:14:f3:3c:e9:0c:c1:75:be:0a:
a7:27:57:ae:7b:70:d5:35:4b:ac:8d:62:a5:34:b9:
6e:8f:9a:29:d2:58:24:f4:67:f9:59:71:c6:ae:14:
b4:39:03:ca:3f:db:f6:fd:67:df:44:ba:20:cb:3d:
fd:33:3f:d4:69:87:29:12:b0:97:b4:1e:92:d6:9b:
84:6a:56:53:d2:63:bd:9c:94:9d:e2:4b:45:cc:c1:
14:12:e9:d4:67:e5:bc:3c:75:3f:3d:21:f8:3b:74:
5e:d5:81:94:f1:6c:26:eb:c9:87:d2:54:e8:54:87:
1d:87:69:24:22:d8:18:06:5a:5f:a0:cb:f2:26:a4:
3c:18:c6:2b:ef:05:ef:6b:e7:a0:80:05:2d:bf:a6:
4b:ab:a0:62:42:dc:f1:5b:5d:22:97:e1:aa:8c:b6:
a2:41:a5:e5:47:31:7b:76:95:c3:75:ff:22:cd:6e:
43:02:f9:cf:bd:b2:74:56:df:0e:e8:b3:b4:54:9f:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:88:1F:CE:B8:DF:AB:43:C1:01:08:76:2D:5B:03:99:77:81:F2
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:11:25:af:69:48:5d:64:b5:d8:6b:e0:d3:0b:a4:21:ed:ea:
44:4b:67:3e:d8:57:bb:d3:2d:84:f2:60:29:c1:60:2b:b2:93:
e0:32:8e:37:3a:ea:b8:3c:83:04:3b:66:90:88:88:03:df:70:
1a:fd:3c:2f:a7:7e:f1:60:67:f0:61:86:e8:15:62:7f:7b:81:
cb:76:f8:d6:eb:e4:0e:ed:c5:96:8d:81:ce:57:1a:65:86:d0:
4f:94:8e:43:fd:ea:4c:db:1a:6f:f1:ce:9f:29:e2:1d:48:ff:
86:0b:55:a3:27:37:35:44:f9:39:20:5e:8e:26:db:b6:6d:51:
8b:ae:f3:d2:59:77:87:48:d8:63:a3:19:8b:c7:c2:4c:3d:76:
25:81:ab:c0:b7:ea:23:33:88:0a:b0:0c:25:f1:98:08:8f:a2:
09:54:25:e8:40:54:41:32:0e:c9:c0:6c:5c:a0:b2:a9:af:cc:
2b:a5:33:88:05:9d:b9:9a:60:f8:cf:f6:b6:95:7b:09:c1:8f:
fc:cd:02:df:32:9b:ec:ab:32:ef:3f:2e:de:f5:37:c4:9a:fc:
88:85:77:05:b8:d1:67:0a:ff:15:17:f2:1c:92:8d:68:ff:f6:
bc:ed:fb:db:29:e5:48:ef:c1:bc:48:80:cf:85:8b:3d:e1:dd:
47:fe:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:58 2026 by rpki-client