Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: KUiIc73AEaXNmVHGor/5k0sQDSbGqUI2/bIwJl3XDLw=
Subject key identifier: FF:36:C4:AA:09:D9:F9:09:9C:9F:39:6B:A8:A9:4F:B2:72:AD:5D:B8
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019CAE35ABE0542CA7B0C8D36EE9E8D72D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 02DE
Signing time: Mon 02 Mar 2026 11:01:18 +0000
Manifest this update: Mon 02 Mar 2026 11:01:18 +0000
Manifest next update: Tue 03 Mar 2026 11:01:18 +0000
Files and hashes: 1: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (hash: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk=)
2: OlHHMfPygKkyr7HTvCn4K8p01_U.roa (hash: N9V2kxguErly1WsufOsx/epgV4HMlIpbzSH7yTgCKok=)
3: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (hash: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo=)
4: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: wIyBIw3fh99E20CXnmiEeOPsErknmlh8+Jf6EaxbelY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ab:e0:54:2c:a7:b0:c8:d3:6e:e9:e8:d7:2d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Mar 2 11:01:18 2026 GMT
Not After : Mar 3 11:01:18 2026 GMT
Subject: CN=ff36c4aa09d9f9099c9f396ba8a94fb272ad5db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3b:ce:3b:91:0e:f0:27:ec:9f:05:cb:5e:df:
ca:96:3d:1d:b5:cb:ff:26:74:12:50:da:3d:1d:75:
d6:96:08:cb:c2:e5:f4:de:06:a6:50:0a:47:53:fc:
a7:b4:29:15:aa:24:02:0c:24:2e:71:5e:d5:dd:7a:
df:ca:d6:f0:a0:8e:46:c6:3b:a4:b8:48:b7:c3:13:
cf:c7:19:cb:38:c7:01:f1:dd:ea:91:23:42:b8:df:
27:a5:10:58:67:c8:00:f3:96:d8:dc:3e:6d:8a:a9:
56:68:3a:08:c3:fb:ef:7d:73:b6:c8:dc:26:17:d7:
c3:94:7a:91:9c:17:c6:b1:45:1e:d6:45:02:68:4e:
81:a4:3b:55:e4:8a:4a:52:62:ea:7c:cb:fc:75:c2:
dd:62:7d:5d:b0:3d:e6:31:1b:12:cf:68:2b:3d:dd:
98:fe:e7:96:16:a1:4b:83:4f:67:18:d8:35:40:9b:
07:68:57:da:2f:e1:99:c8:14:c5:d2:6b:e1:b3:45:
dd:9b:3c:7e:68:fa:b1:16:ee:7d:e7:7f:8c:4c:15:
b3:5e:a1:70:a8:75:c0:b4:e7:64:33:6f:7e:28:d0:
06:98:43:25:dd:28:73:27:08:1d:19:75:74:9b:cb:
58:89:79:38:a0:26:53:2c:c8:49:6a:0a:85:31:ab:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:C4:AA:09:D9:F9:09:9C:9F:39:6B:A8:A9:4F:B2:72:AD:5D:B8
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:bc:4e:e1:17:8d:f3:24:aa:d8:46:37:f9:4d:38:f2:ef:
4a:27:83:cf:49:a5:c7:1f:27:0b:6b:89:0e:dc:17:12:d8:c6:
85:93:e2:48:40:02:1f:d9:11:9a:bc:00:55:e4:9d:42:32:b1:
ec:60:94:af:ad:e1:6f:68:a4:91:f6:f4:da:57:11:b1:85:6c:
b0:99:eb:83:be:ed:9b:45:a3:b0:97:74:45:de:d2:d9:3f:4d:
50:4f:ce:7c:cd:78:84:f6:ab:88:7f:38:4c:5e:b8:c1:13:61:
f7:59:db:27:f3:9d:8c:39:6a:7b:23:a6:9a:54:56:5e:4d:81:
79:0f:99:94:40:2a:b3:e1:f9:6d:be:09:6e:ec:6f:cf:cb:93:
0c:20:40:31:15:94:12:76:96:70:23:33:68:c1:4c:9f:76:15:
4f:f8:26:cb:64:1a:09:0c:ec:a6:46:e2:de:2b:c8:03:be:c9:
e6:e7:f8:a6:aa:ec:26:91:f7:42:1f:6c:56:05:fe:5d:0f:07:
1c:ac:ed:b8:a0:a3:0e:e0:b6:bd:02:f0:39:c1:13:3c:92:aa:
1b:bc:3d:e0:3e:1d:b3:ab:d7:9c:94:3a:d8:ca:0d:95:1a:21:
a5:3e:f9:9d:db:40:d1:aa:8b:c9:89:50:36:0a:f9:09:9e:71:
16:54:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:24 2026 by rpki-client