Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: zSXtAhem8tybyUfuF6L3J53YQu1q0jjYRmf9+8fHa6E=
Subject key identifier: D3:4F:B0:98:7D:FB:8A:D1:EC:B3:BB:AE:6D:EB:69:E8:40:22:1B:A4
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019CAC7E2C416A91C9D413F2CF4060D4D988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 11C6
Signing time: Mon 02 Mar 2026 03:01:15 +0000
Manifest this update: Mon 02 Mar 2026 03:01:15 +0000
Manifest next update: Tue 03 Mar 2026 03:01:15 +0000
Files and hashes: 1: C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa (hash: 6iHK7B3B74ju73Bu4UIi5X39juU33AzJxjN7DE2wqoc=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: SxEwzv09zQMfanK16jAKlVwX97Fz4VtpZBWm/mkXDsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2c:41:6a:91:c9:d4:13:f2:cf:40:60:d4:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Mar 2 03:01:15 2026 GMT
Not After : Mar 3 03:01:15 2026 GMT
Subject: CN=d34fb0987dfb8ad1ecb3bbae6deb69e840221ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:3a:07:38:9c:62:1c:c7:6e:bc:b6:bf:f6:
2b:43:59:c6:e8:92:30:eb:1d:73:64:bd:e9:4b:84:
a7:32:f0:27:4d:c2:3d:5f:d6:4e:59:a6:ff:ad:c0:
43:e6:dd:f0:04:1a:bd:a6:e9:4d:94:d1:67:ab:29:
6e:fd:ce:f4:a3:9b:dc:4d:12:f5:45:97:3e:77:a7:
10:d8:4d:87:21:79:00:a2:0a:54:ac:f8:5d:b0:26:
cb:2f:cb:cd:6f:0e:82:ba:45:c6:4f:1d:48:fd:27:
7c:d0:a6:b8:c5:e8:ee:90:ad:c9:2c:97:33:b9:f8:
6f:c7:bd:48:22:a0:e3:15:79:c3:eb:b7:17:bc:f8:
70:64:37:f9:73:89:2a:44:47:c2:56:e5:cc:04:0c:
ee:a5:10:b3:0b:db:12:97:f5:de:19:c5:7c:42:08:
a6:58:a2:70:97:d9:44:b6:a2:c2:ee:42:2e:d4:e5:
ab:a6:01:30:12:b2:0a:62:9f:d5:e0:e7:c9:8c:1e:
cc:23:42:88:74:f6:4c:2a:2b:be:a4:35:26:42:0b:
6a:26:94:ca:01:99:fe:f1:79:76:6a:03:a0:13:54:
c6:90:f7:5b:0a:12:dd:36:03:9b:fc:a6:a4:2a:ec:
ea:b0:37:eb:a5:8b:64:de:ac:c7:a2:5f:be:a7:74:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:B0:98:7D:FB:8A:D1:EC:B3:BB:AE:6D:EB:69:E8:40:22:1B:A4
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:ff:22:ad:55:40:6d:aa:5f:c5:5f:78:6f:6a:9b:56:2e:
0d:32:5f:0d:48:f1:0e:5f:ba:13:e4:b7:7c:af:0e:7e:45:b6:
d2:7c:0e:a0:ea:7a:e1:79:ee:bf:24:e1:a1:f5:52:bb:06:80:
df:df:1f:d9:5d:88:72:7c:86:35:40:76:08:4a:5c:56:87:f2:
50:6a:93:c1:55:40:cf:8c:8a:c2:ac:36:7a:4a:5c:d1:b1:fc:
d8:89:c2:16:6d:6c:8b:93:f4:c2:cc:e2:3a:3d:32:b5:d1:9e:
98:ea:d3:f7:1f:46:c1:c3:30:fa:13:3d:de:0c:4e:4a:b1:88:
bc:63:b6:d0:80:3e:59:9c:7a:0b:53:5b:fa:a8:21:0a:66:b4:
ec:04:be:57:47:70:d0:3c:22:eb:71:7a:69:96:a3:76:53:f7:
11:12:5a:8d:b5:2d:f3:0a:9e:19:ba:ab:96:e7:98:69:4e:d6:
83:4e:90:ac:e1:89:29:a3:86:68:e3:64:26:83:2c:e5:61:a7:
07:92:0a:3c:47:4a:96:df:1a:3b:71:db:69:4c:3c:5a:19:42:
3c:87:87:9d:2d:12:5d:59:95:21:e9:41:47:fc:3c:e0:50:eb:
f0:cd:c9:41:aa:5a:2c:cb:32:42:71:fc:85:98:82:1c:78:68:
3c:be:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:42:00 2026 by rpki-client