Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: raw3m1XpKwj0ftX4YlZx3E3o1XpAM/KR0bOEgbd0oGw=
Subject key identifier: 0D:3A:AD:1A:1E:5C:A9:2B:81:8F:EA:C6:F3:E3:45:34:3C:2A:41:6D
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019CACB51BFD679F5BB788D6458DD0F43529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0C48
Signing time: Mon 02 Mar 2026 04:01:16 +0000
Manifest this update: Mon 02 Mar 2026 04:01:16 +0000
Manifest next update: Tue 03 Mar 2026 04:01:16 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: nGjbVgP/H62gevT2XWDKOnTh9UAF8xU4qd2fBUCVFEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1b:fd:67:9f:5b:b7:88:d6:45:8d:d0:f4:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Mar 2 04:01:16 2026 GMT
Not After : Mar 3 04:01:16 2026 GMT
Subject: CN=0d3aad1a1e5ca92b818feac6f3e345343c2a416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:dd:2f:d0:93:35:92:60:9d:23:f6:8c:91:
09:37:d9:10:0d:35:a2:bc:d3:ba:f7:25:bb:e7:a4:
b7:ae:05:1f:f8:92:67:84:da:4b:71:da:1b:31:4b:
52:2b:77:de:a6:18:3e:d3:77:17:ad:71:0c:6c:6b:
d9:f8:4f:7c:4e:0a:46:26:da:22:5b:83:4f:6b:04:
fd:d4:f6:5b:14:3c:36:ed:3e:f8:c6:4f:c0:2c:aa:
bb:8f:8e:ee:51:ad:5f:a4:2e:35:b3:83:c6:30:64:
5f:5b:13:4d:c2:6e:f2:e6:e6:ce:8d:cf:ec:ad:a7:
78:b0:43:90:33:d3:d6:18:bd:31:5a:9f:25:78:45:
c7:aa:7d:cc:8f:6b:ce:d7:bb:33:d4:cd:40:09:40:
bb:c4:3b:14:30:07:57:6d:73:57:61:68:ca:b9:b8:
0b:26:62:59:a8:c5:84:f8:d7:4d:39:c8:89:c1:cb:
23:f1:95:7b:ca:33:45:b8:7e:93:3a:2f:11:24:73:
69:61:4d:d7:d5:42:ab:14:70:dc:db:70:b4:fb:d9:
0b:9e:c2:83:ea:73:f8:ca:f5:8d:31:95:30:b3:3b:
66:c3:71:96:1f:d4:a9:bc:ef:48:2d:3b:b5:4d:fe:
bf:dc:51:6c:6f:40:70:a6:01:68:85:d4:68:d8:96:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:AD:1A:1E:5C:A9:2B:81:8F:EA:C6:F3:E3:45:34:3C:2A:41:6D
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0c:43:fc:4b:a3:8e:3b:b7:ce:cb:0f:67:72:a1:ff:98:64:
f3:9d:4d:2e:fc:74:d6:32:b5:07:99:6d:cf:4b:9b:cf:67:b5:
9a:77:3f:26:ee:1b:5f:29:ea:d5:6d:99:28:ab:d5:28:ab:72:
8c:ff:37:03:0d:a3:3a:b7:d9:43:7c:91:6a:0d:e7:3d:ee:78:
34:e6:8b:89:ea:50:70:1d:07:b9:0d:fa:3f:61:93:c8:9c:d7:
78:be:92:73:83:96:62:b0:09:c9:89:04:30:c3:0f:49:85:ac:
50:46:1b:21:d9:e5:9c:14:2f:70:36:c7:8b:53:0b:6b:a4:f5:
5c:d7:cd:c1:e2:44:e5:b4:2d:e3:6b:6d:ff:2a:37:95:db:96:
a9:f1:bc:b6:ac:33:35:4e:a1:c2:82:ea:e1:e1:5c:cb:07:ec:
b5:e4:65:2b:31:fc:db:ae:57:53:83:1a:53:6c:87:a0:44:94:
fb:98:a7:c8:65:9d:3e:bd:85:1f:f2:7b:0d:9f:26:1a:f9:97:
b3:d2:f1:06:be:05:66:ce:bc:b7:0d:bf:be:2e:3c:ff:b0:ba:
4c:43:84:72:bf:e3:e3:e4:7f:2d:58:7b:4f:33:1a:89:4b:17:
60:ba:a0:19:93:95:3e:09:c5:53:ea:21:e3:84:8c:8e:9a:8b:
0f:02:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:05 2026 by rpki-client