Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
File: vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json)
Hash identifier: Rnd9d76GeMK0uA6A78YZXaF9WvEL65w+O2fo5fxDJcM=
Subject key identifier: 60:B7:B2:02:97:EF:3F:36:B7:4F:78:82:0C:14:B9:43:79:85:3C:9A
Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
Certificate issuer: /CN=be370733b8db614daa760a002c24048028300e2d
Certificate serial: 019CABD8E6559D5D53252FCC9F92CDEE69FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: D-LoIPh4w6ZRPr6EB3oORu8b_qM.roa (hash: IJEKqU/hmkuGGlwqmZo6DWM0XWvE4LTwDePizqu7MS0=)
2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: 0575xc0duKlF1I51iFVwS67Ow4SOnQOIfQ5I5bikSWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e6:55:9d:5d:53:25:2f:cc:9f:92:cd:ee:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be370733b8db614daa760a002c24048028300e2d
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=60b7b20297ef3f36b74f78820c14b94379853c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:62:1b:6b:83:77:06:ec:4d:06:2a:3e:aa:
b6:c0:c3:02:ad:fb:f5:22:06:fd:e5:e0:4f:dd:ba:
98:bf:44:5b:aa:30:77:d3:c2:5b:06:d2:2f:68:8a:
f0:14:67:9e:ef:ee:1b:ed:72:af:b4:9f:93:9a:7b:
21:f3:9d:35:42:d0:b1:a6:a5:99:c1:a8:25:43:ce:
17:9a:36:08:26:d7:f3:b1:74:14:2a:49:48:7b:60:
24:5a:ea:7d:cf:12:2d:94:c5:1e:ed:7c:3c:c6:22:
20:ab:b0:b4:27:e9:d4:55:13:9e:fa:63:c1:5d:f5:
27:d5:0b:d3:2f:f9:de:e8:1e:42:ab:8b:83:46:24:
4d:95:b2:e2:b0:90:64:b5:5f:5c:13:1a:1b:5e:de:
93:62:ee:ce:01:85:8b:0a:62:fd:c3:55:b8:d2:62:
75:9c:02:d1:43:21:a2:4c:4b:a9:ca:c8:2f:14:bd:
fd:60:09:b1:cd:eb:b0:a1:37:e5:c3:30:35:3e:7a:
25:14:58:f8:de:e5:3b:b5:8f:16:c0:14:b0:91:14:
f2:15:c0:e7:09:12:62:ea:16:bf:e3:86:d9:b9:92:
fc:fe:74:a8:62:aa:dd:13:6f:2f:5d:03:13:52:26:
12:f2:a6:a0:a7:d4:08:34:90:ee:29:90:fc:54:1f:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B7:B2:02:97:EF:3F:36:B7:4F:78:82:0C:14:B9:43:79:85:3C:9A
X509v3 Authority Key Identifier:
keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:75:b6:e0:d5:e8:ed:74:4e:21:d7:3d:71:7c:d9:64:35:4f:
5c:11:dc:7a:d9:f2:15:47:ea:be:dc:8b:65:fd:fe:d2:40:3c:
d0:75:c5:a3:a1:fc:7f:ee:28:cd:5e:47:e0:ee:91:d8:63:a3:
ef:58:db:9d:cc:12:99:5b:b5:af:10:10:62:84:4c:b0:06:de:
ac:cd:75:70:a4:c6:66:cb:fc:1d:75:18:8c:36:79:78:66:e0:
22:86:38:6f:73:50:4a:77:7b:00:60:7a:4b:d6:78:d3:c2:3d:
09:8c:f3:20:d6:42:c9:cd:3b:11:61:90:59:0c:53:40:47:be:
91:e5:91:18:6f:ba:7f:11:dc:36:91:da:e8:95:91:d6:eb:aa:
fb:7f:b1:f7:01:70:07:9b:a3:3e:4a:dd:c5:d8:c8:27:94:4a:
92:5c:90:99:e5:f2:09:ab:ad:95:9f:14:3b:17:8b:b2:e6:68:
49:5e:cd:09:bc:b1:77:ca:b2:33:09:1a:e8:09:3c:5b:8c:5a:
21:7c:e3:16:be:43:46:90:9d:9d:f6:ef:9c:7e:7c:bd:fe:04:
82:fe:fe:bf:59:83:05:9e:37:6c:a1:a7:cb:98:3a:d7:61:14:
b5:9d:de:ac:fd:06:5c:b3:77:14:28:33:aa:9b:f2:65:c8:aa:
74:75:83:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2OZVnV1TJS/Mn5LN7mn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzcwNzMzYjhkYjYxNGRhYTc2MGEwMDJjMjQwNDgwMjgz
MDBlMmQwHhcNMjYwMzAyMDAwMDQ0WhcNMjYwMzAzMDAwMDQ0WjAzMTEwLwYDVQQD
Eyg2MGI3YjIwMjk3ZWYzZjM2Yjc0Zjc4ODIwYzE0Yjk0Mzc5ODUzYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYFiG2uDdwbsTQYqPqq2wMMCrfv1
Igb95eBP3bqYv0RbqjB308JbBtIvaIrwFGee7+4b7XKvtJ+Tmnsh8501QtCxpqWZ
waglQ84XmjYIJtfzsXQUKklIe2AkWup9zxItlMUe7Xw8xiIgq7C0J+nUVROe+mPB
XfUn1QvTL/ne6B5Cq4uDRiRNlbLisJBktV9cExobXt6TYu7OAYWLCmL9w1W40mJ1
nALRQyGiTEupysgvFL39YAmxzeuwoTflwzA1PnolFFj43uU7tY8WwBSwkRTyFcDn
CRJi6ha/44bZuZL8/nSoYqrdE28vXQMTUiYS8qagp9QINJDuKZD8VB/0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC3sgKX7z82t094ggwUuUN5hTyaMB8GA1UdIwQY
MBaAFL43BzO422FNqnYKACwkBIAoMA4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84OTZhYjMtYzQ3OS00NzBhLThiYjkt
MjQyMjJkODdmODhkLzEvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84OTZhYjMtYzQ3OS00NzBhLThiYjktMjQyMjJkODdmODhk
LzEvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXW24NXo
7XROIdc9cXzZZDVPXBHcetnyFUfqvtyLZf3+0kA80HXFo6H8f+4ozV5H4O6R2GOj
71jbncwSmVu1rxAQYoRMsAberM11cKTGZsv8HXUYjDZ5eGbgIoY4b3NQSnd7AGB6
S9Z408I9CYzzINZCyc07EWGQWQxTQEe+keWRGG+6fxHcNpHa6JWR1uuq+3+x9wFw
B5ujPkrdxdjIJ5RKklyQmeXyCautlZ8UOxeLsuZoSV7NCbyxd8qyMwka6Ak8W4xa
IXzjFr5DRpCdnfbvnH58vf4Egv7+v1mDBZ43bKGny5g612EUtZ3erP0GXLN3FCgz
qpvyZciqdHWDcA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:08 2026 by rpki-client