Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: t98euci8NaA9gIz0qJvetgE652UHgelk899lPhZrqTw=
Subject key identifier: 68:C3:26:BB:84:56:A5:E2:02:6A:47:2C:AE:EA:13:5A:B4:5B:58:BC
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 019CAAC6A065ACA360CE4975DB5C7636271A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 1229
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: bbz47osIb4c7uoiyZJGPaxcYxu8.roa (hash: yDftJ0V1zP6tNWS59D23nQ4A6wYjaRjcaKzcMkYk8QQ=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: zTt1l+CWMKqQFBDvp8U4KZyx61niKNgbBmXiCG9m4R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a0:65:ac:a3:60:ce:49:75:db:5c:76:36:27:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=68c326bb8456a5e2026a472caeea135ab45b58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:48:84:46:e9:b5:a5:ad:ca:0f:0c:72:e3:f7:
d6:e4:52:5a:0f:06:3e:cc:bb:04:a6:74:f6:47:28:
bf:56:fd:15:3c:2f:02:81:9b:62:8c:c8:e4:0b:a2:
76:30:88:50:ef:b2:07:51:43:be:14:02:fa:8e:3c:
ff:6d:22:58:37:0d:69:2d:4d:f1:e9:8b:5d:53:5f:
55:fd:2b:23:f3:ca:5c:ea:67:30:36:be:86:e0:a1:
67:96:6c:80:dd:8d:63:f9:77:4a:a7:b8:3e:29:24:
ac:12:9d:9d:73:5d:7a:f0:4c:62:97:7f:d4:d3:38:
2b:6b:29:4e:c2:6a:ef:47:c2:13:23:45:f8:fe:55:
e2:77:31:c2:69:1f:74:4c:f1:66:64:52:4e:39:94:
8e:ba:fc:2e:f9:2a:44:94:44:0e:c5:19:01:83:d0:
7f:b3:f6:1c:35:66:62:4b:d8:ac:ff:8e:84:86:01:
60:4d:b3:a3:e5:e7:23:0f:ae:f0:01:66:d0:0b:ca:
ac:66:e9:66:18:4a:1d:9d:f3:fa:71:1b:9b:a0:94:
e3:6e:ef:2f:bb:81:46:ef:fc:8a:68:19:2c:f0:6e:
e8:ee:1d:2e:6c:5c:e2:d8:42:27:e8:4b:2a:28:9f:
75:24:85:0f:59:11:ac:a6:66:42:67:78:10:62:4e:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:26:BB:84:56:A5:E2:02:6A:47:2C:AE:EA:13:5A:B4:5B:58:BC
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bc:fc:f3:d9:bc:e4:2f:64:18:35:af:6e:22:3f:3f:12:75:
eb:e8:af:a8:54:bf:f3:36:3b:39:82:db:47:64:1f:c6:0d:79:
26:83:42:94:1e:f1:bb:48:72:fe:e6:06:74:df:5a:9f:e7:0e:
f5:95:20:74:ec:ce:8a:77:ce:8e:ca:fb:28:d0:b3:44:dd:84:
99:d5:5e:65:1d:f4:86:c7:57:cc:6f:57:31:73:0c:b0:c1:a1:
d9:8e:02:6a:98:59:ea:72:7e:24:aa:01:4d:e1:6c:4d:28:31:
cb:64:e6:45:33:a1:86:57:a2:dc:54:2f:74:03:43:07:fd:8e:
4d:3a:3e:d4:b1:e6:67:4d:75:df:22:53:30:8f:5b:c6:b3:34:
ee:1d:7f:80:89:45:8b:6d:4b:f1:82:88:be:68:83:b6:69:d6:
90:40:0a:97:45:02:43:d8:47:53:90:1a:04:f1:95:ed:c0:4a:
09:65:e3:2c:a2:2b:30:55:d9:44:a1:5b:fd:e4:83:9b:95:b0:
34:43:41:98:cd:43:cf:c6:85:a3:bd:43:fe:23:6f:12:06:32:
6b:79:5f:53:8f:62:5e:65:08:9f:cd:84:4f:a2:5b:bf:ca:9b:
70:cd:38:0d:ac:99:5a:2b:a3:51:c6:ca:c4:3b:69:bb:97:ba:
64:4b:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:40 2026 by rpki-client