Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: PyLwDSbrkl3Y7I19z1ImP0Gyw3qUVlnuupOEOgidPck=
Subject key identifier: 10:FA:A3:14:24:DC:F3:A2:2F:FB:62:1F:1C:E1:CA:55:A0:5C:4D:93
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019CAC0F9AF9779BACF497303DE65122D5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:29 +0000
Manifest this update: Mon 02 Mar 2026 01:00:29 +0000
Manifest next update: Tue 03 Mar 2026 01:00:29 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: PIbxz4ilyn5IIXdDYZstf7TmK0HXbTNZNsPCY4w3kLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9a:f9:77:9b:ac:f4:97:30:3d:e6:51:22:d5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Mar 2 01:00:29 2026 GMT
Not After : Mar 3 01:00:29 2026 GMT
Subject: CN=10faa31424dcf3a22ffb621f1ce1ca55a05c4d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:3a:b7:00:c1:b1:fe:3b:39:74:eb:27:e3:
18:2e:a5:9c:22:03:0c:66:0a:fb:4b:60:ed:e3:0e:
f3:d8:ad:a4:63:37:bc:9b:9e:5d:dc:c1:73:db:30:
94:a0:78:b6:d9:2a:7d:9a:28:fa:37:b7:ac:71:0f:
e2:f8:87:78:23:f9:1d:89:fa:d2:3a:0e:d3:17:45:
5d:c8:e8:08:9f:5c:f5:32:73:57:5c:34:49:7c:fc:
69:6c:aa:aa:ef:b4:1f:63:ce:d3:9b:d4:c1:ba:65:
29:8d:6c:19:ed:55:14:c7:af:7f:d2:39:3e:de:c2:
b3:d6:40:7b:d5:5f:d9:94:19:fc:2b:2e:91:e8:c4:
d6:cc:51:01:a3:f7:27:80:c6:9b:04:36:fb:c1:28:
11:db:a0:11:79:79:25:e3:06:bc:d2:89:71:c9:0e:
ac:d0:50:4f:7c:e9:3c:d4:fd:3c:9c:28:ec:63:1a:
70:d1:21:f4:5e:c4:a6:a7:0e:d2:84:df:cf:b1:51:
ee:c6:ae:b1:2f:69:33:7e:21:97:a8:f0:9f:db:22:
bd:59:b6:b0:5f:8c:43:2f:1e:fc:64:b4:bb:b7:dc:
f0:77:76:88:aa:8e:62:0b:55:47:37:07:65:a1:7e:
4c:1c:3b:0d:5c:dc:89:4e:c7:0e:ee:6f:2f:2d:3f:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:A3:14:24:DC:F3:A2:2F:FB:62:1F:1C:E1:CA:55:A0:5C:4D:93
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2c:81:b4:2f:ce:9a:96:53:aa:87:d1:db:cb:2c:d0:f0:9a:
74:79:d7:be:93:57:1f:d0:df:18:a3:7d:0f:7e:d5:09:1d:cc:
d1:12:7f:16:a8:2b:17:fd:cd:ce:b7:2c:1c:9a:84:24:a4:57:
5a:77:c1:dc:a3:ad:5e:f6:69:92:47:5d:c8:93:a0:d9:2f:df:
32:a8:bc:38:62:f8:1b:a9:d7:f1:ee:42:96:d8:f8:e0:7b:0e:
0b:c6:af:7b:40:aa:d1:35:c0:44:16:d7:c5:97:4f:be:66:b6:
d9:8e:b3:d4:43:41:92:e8:b0:02:fd:6e:67:d5:2a:96:a8:aa:
b9:72:e8:ce:e2:12:98:5b:10:95:ec:90:14:07:a0:48:51:d8:
56:8a:fc:a9:6b:a8:b9:26:fe:23:d7:a9:cc:87:c9:51:bb:d6:
ef:11:03:c7:7c:17:19:eb:59:d9:41:2c:bb:cc:42:e4:fb:97:
5e:03:6b:f7:88:82:32:b4:9e:a6:67:80:c4:e4:44:45:3e:00:
4a:37:90:8c:60:0b:0b:e6:6f:85:ba:9f:61:31:5e:2b:6b:9b:
2b:8b:7a:e0:d5:6b:ec:98:5d:2f:6f:32:7b:72:c7:6c:5e:10:
67:4d:ca:a5:65:ee:08:7b:22:0c:10:a2:dd:97:78:ca:59:8e:
82:9e:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:34 2026 by rpki-client