Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: jLXlZHw1jcv65iZ4Js/R0FeBuNwx5e2ERG6ZkW2zwRc=
Subject key identifier: EC:74:D3:9D:43:D7:0B:AB:68:E9:A8:F5:EE:4C:66:5F:E8:1D:4E:2A
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019CACB4C4B6CB7E1495D3D123FF114BDDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: bYaKx8KmodMXf0FQqY/zvjtBZB4+W3t2nqDiV4JG+8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c4:b6:cb:7e:14:95:d3:d1:23:ff:11:4b:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=ec74d39d43d70bab68e9a8f5ee4c665fe81d4e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:05:28:05:10:b0:4c:e6:02:b1:d5:5b:5e:
a8:84:e8:8f:56:ff:0c:35:e8:b7:5c:28:14:22:0c:
13:e8:a7:27:b6:65:c3:63:99:db:81:f8:42:97:84:
c1:2d:6c:de:5b:3d:0c:f4:aa:50:10:33:ab:dd:8e:
a5:81:d8:f9:56:f4:42:87:8f:7d:71:c7:91:13:83:
b4:8c:f7:83:91:d7:cf:6e:c0:dc:93:0f:17:d9:d7:
6d:54:d1:bf:7d:a2:70:3d:06:60:4e:3a:b4:63:6b:
88:30:94:b5:fe:4e:99:07:36:98:a0:b8:ff:d5:f4:
1c:fa:c4:05:69:11:2a:3c:0e:48:8d:ce:ff:76:5f:
90:23:79:df:78:2a:91:33:10:7b:6f:d8:54:7e:03:
c2:c6:03:c3:a4:08:71:9a:44:e9:5e:6f:88:57:6c:
36:a1:cd:cb:e6:d8:c3:95:49:2c:98:f1:4d:d2:62:
b7:88:28:c7:77:aa:98:bb:04:b4:75:85:0e:77:ec:
57:46:50:8e:92:c9:30:eb:7d:95:aa:d0:d0:e3:fc:
b3:4a:af:43:bc:53:b4:37:62:91:8b:c8:01:53:39:
58:18:e3:13:6e:a1:d4:21:24:28:09:11:36:cc:7d:
a0:66:93:af:a6:5a:5e:09:2a:5d:9b:41:47:ad:f6:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:D3:9D:43:D7:0B:AB:68:E9:A8:F5:EE:4C:66:5F:E8:1D:4E:2A
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b4:d5:65:2b:c6:d1:e0:27:6e:2b:18:86:51:01:67:cc:79:
01:d5:69:c4:6e:63:5d:f3:8b:be:c7:13:26:4a:6f:16:52:81:
fa:53:6d:41:f6:dc:73:3c:4a:52:16:f7:19:04:ac:1c:07:cb:
0a:fd:c6:e8:ab:0b:24:3f:58:15:0b:61:bb:fb:62:ee:6c:2f:
0b:a1:f1:67:d8:50:28:59:3f:f2:05:21:b8:56:69:8d:ed:57:
4a:ed:16:e1:38:75:9e:4d:97:dc:9e:ed:40:a3:3f:a6:86:13:
de:17:ff:e3:24:ae:7e:0b:de:18:a0:2e:9b:7d:ca:73:3e:0d:
84:2e:f0:71:94:0c:8a:a0:38:de:17:8b:70:f2:a3:99:c1:ab:
76:3a:ee:a5:bb:71:b9:5c:20:22:7a:26:fa:cd:bb:ed:2d:dd:
35:e3:44:41:1d:e7:06:a7:53:21:eb:49:de:1d:73:36:a1:00:
50:d7:de:91:12:b8:33:bf:ed:d8:db:4c:fd:a1:d0:ef:b0:c6:
ad:0d:a0:83:13:e3:8e:80:9e:d8:e4:a3:0c:f8:2f:fb:48:38:
18:7d:f4:c1:56:17:f0:2e:e5:d5:df:71:6e:8c:79:c4:1c:ab:
43:14:6f:18:be:d9:04:1c:86:7f:a7:a4:b5:37:92:67:8e:df:
08:c1:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:25 2026 by rpki-client