Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: ZYdwjUaGpEmvSnxKPSR3Yhvw3mo8HdxYV6rU5w+YPac=
Subject key identifier: C8:F2:A7:10:57:1A:E4:40:6B:6E:3B:3E:E7:08:92:57:8C:95:E1:F5
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 019CAE6BDC112D416DB85E402F6F9380E0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 01AB
Signing time: Mon 02 Mar 2026 12:00:30 +0000
Manifest this update: Mon 02 Mar 2026 12:00:30 +0000
Manifest next update: Tue 03 Mar 2026 12:00:30 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: 34gf59DlNyR8nK4vblpXc64z0k+9XHGGnbqV/hOAniI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:dc:11:2d:41:6d:b8:5e:40:2f:6f:93:80:e0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Mar 2 12:00:30 2026 GMT
Not After : Mar 3 12:00:30 2026 GMT
Subject: CN=c8f2a710571ae4406b6e3b3ee70892578c95e1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:ee:8b:ff:14:e0:1d:92:9b:3b:fa:a5:8d:
ae:e5:1f:32:4d:cf:ab:39:78:40:06:04:50:63:bd:
e5:99:5a:ba:a9:e1:e4:09:5c:45:da:cd:9f:2f:f1:
69:56:9b:da:2f:cb:c0:87:f5:1e:53:cf:3b:4e:9d:
5a:46:c3:76:8a:9d:e3:e0:e4:15:9b:63:6e:5d:d1:
8e:e2:43:b6:f8:da:79:2d:66:a4:ca:23:cf:72:83:
bd:33:09:e0:2c:25:5b:23:b9:0e:af:50:a9:14:d1:
c3:11:d2:dc:b8:54:f0:b2:bf:58:6c:87:9e:c3:b8:
36:e9:0e:53:ca:75:9b:8e:1b:e6:03:82:49:60:b7:
8c:8c:ec:b7:47:23:dc:66:00:53:9c:be:3b:20:24:
5e:c2:8b:d8:41:ec:cd:4d:fe:9f:e5:b9:9a:c9:58:
23:c4:fe:f6:0b:87:36:59:4f:64:8c:5a:93:9b:f4:
0a:06:07:b6:42:e7:d4:d6:12:cc:40:b9:0e:fd:c1:
5c:f4:a5:e5:da:02:8f:ae:a5:81:68:b6:7d:9b:9a:
6b:2b:b8:3f:b2:82:05:68:b4:ae:dd:c7:fc:3f:81:
0c:0e:49:39:fd:87:d8:05:53:7a:cd:91:46:ae:fd:
2e:e3:5b:f4:b6:6e:ac:e4:84:15:c5:04:6a:43:bd:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:A7:10:57:1A:E4:40:6B:6E:3B:3E:E7:08:92:57:8C:95:E1:F5
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cd:7a:e3:b7:0a:bd:52:2e:bf:e7:01:34:1f:85:f0:41:69:
20:4d:70:7c:56:9e:8e:ab:5c:48:1c:5f:20:3e:b1:6e:a8:ff:
74:2b:56:d1:2f:09:f2:d1:fb:06:81:21:78:51:2d:74:8e:e9:
78:8b:d7:56:12:b9:07:ea:ca:d4:67:97:fc:18:71:6f:0e:fb:
94:4e:26:48:e8:58:70:33:e3:07:fa:71:00:06:88:f4:ef:cc:
a7:88:61:47:b8:78:ff:80:c4:3b:12:dd:aa:00:ad:a3:c2:5b:
2d:ba:46:26:9f:90:5e:b2:ae:49:b2:99:11:d5:8d:7b:4b:19:
be:ca:22:c9:ac:c3:bf:51:38:16:95:8e:ef:09:c0:81:18:f4:
7e:8b:78:9f:fb:5a:94:76:22:5c:aa:70:30:16:86:55:6f:64:
c1:f0:22:f9:bf:2b:b4:a6:e3:ce:6c:de:b9:ef:a5:f0:78:a5:
80:f0:68:2b:df:3a:c4:52:0e:a2:59:45:6c:64:65:86:55:ad:
49:8f:c5:72:55:72:38:ed:94:c4:19:60:f5:7a:fd:1e:16:09:
c0:3e:b8:2f:6b:83:dc:43:45:21:3d:c6:42:71:d7:09:61:3e:
a3:a9:c8:5c:f2:06:a9:a6:1f:c5:46:dc:fc:46:d9:4f:65:60:
78:0e:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:42 2026 by rpki-client