Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: +SAyMuBEzfR2bOmw8OI0QcvWFWDlAhcLxvHX9vMCplc=
Subject key identifier: FF:40:A4:D7:CD:D1:C7:7E:60:6B:23:3B:FF:9E:1C:A0:12:CE:8D:5B
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 019CA9EB37C29CB8C1D043386D74CDCC591E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 067C
Signing time: Sun 01 Mar 2026 15:01:30 +0000
Manifest this update: Sun 01 Mar 2026 15:01:30 +0000
Manifest next update: Mon 02 Mar 2026 15:01:30 +0000
Files and hashes: 1: oj97Ng3JgLvsyAIw1yTVTtpM69s.roa (hash: vIQENoGSkGXr7OaQKpDZcQK7eabU4UndqxZJRNZu8JU=)
2: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=)
3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: E3Nt3kOLZHetP6RjAzbkZStauO6GOVwkwzQqFH0/AsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:37:c2:9c:b8:c1:d0:43:38:6d:74:cd:cc:59:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Mar 1 15:01:30 2026 GMT
Not After : Mar 2 15:01:30 2026 GMT
Subject: CN=ff40a4d7cdd1c77e606b233bff9e1ca012ce8d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:aa:b6:ac:89:b4:45:b8:57:0c:26:92:6e:17:
bd:31:26:a9:3a:35:9a:12:5c:f7:3a:69:76:8a:d6:
ca:99:2c:c7:0d:de:57:07:4d:56:84:a9:ad:d5:f3:
0b:85:b3:11:a0:f8:fe:b3:4b:44:09:42:8b:0a:36:
5e:12:8e:05:08:5b:9c:cc:4d:f4:5b:7a:cf:2b:c3:
4a:e1:f8:0d:a6:9b:36:08:2d:98:c7:cb:a5:3d:b4:
85:0b:3c:d8:02:a3:e7:fe:f4:10:5b:75:c7:ec:c9:
a8:83:f3:a1:d7:26:8c:b6:0a:c9:e7:cf:90:27:e7:
03:32:28:ce:88:a4:56:bd:a8:68:20:be:69:41:ce:
ad:48:6c:33:7d:a6:ad:1a:c6:cd:7b:80:16:60:da:
c1:cc:6b:ea:96:ae:7b:0d:a8:0a:c5:c3:80:9a:62:
df:67:e3:3c:4d:b6:75:4c:89:66:ee:0c:6d:ec:3b:
af:c6:58:57:61:e1:ec:3e:46:36:35:7c:1c:ad:4e:
9b:89:7c:6b:ea:61:ba:70:c8:af:1c:99:e4:36:49:
35:af:50:50:7a:45:9c:3f:02:28:12:ea:bb:8a:49:
22:8d:20:74:15:3c:27:7d:8a:c2:2f:c5:da:8d:3e:
3c:d8:33:28:d2:fe:1a:48:9c:41:f9:76:0e:eb:0a:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:A4:D7:CD:D1:C7:7E:60:6B:23:3B:FF:9E:1C:A0:12:CE:8D:5B
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9f:df:af:ec:e2:67:ef:3e:30:63:19:d3:95:0c:25:76:0e:
f2:78:eb:c4:ab:59:22:9b:8d:4b:b6:34:13:3c:b9:14:90:30:
f2:5f:eb:d0:cf:39:83:aa:c6:94:0c:23:03:c9:18:09:19:8b:
ab:95:3d:41:16:e7:bb:07:77:f8:d7:92:9a:b2:e3:6d:72:ea:
31:08:31:48:89:37:7e:15:22:c8:c9:f2:8b:da:19:34:b2:35:
ff:a7:fa:65:83:73:1c:14:46:31:c2:91:d8:b1:7c:ba:d8:84:
0d:5b:68:0b:82:d0:d2:78:8d:38:0f:56:35:27:7e:c8:7f:39:
9e:b7:e2:6c:77:f4:3b:3f:15:6b:21:d8:c8:76:3f:6e:26:94:
fc:2e:65:c5:c3:75:10:61:3c:cc:4d:c5:76:b2:60:64:dd:6a:
dd:d0:3b:50:8d:32:9f:bb:94:69:58:cc:39:49:3d:a1:61:fe:
2f:4b:3c:09:e1:a2:2c:35:6b:dc:bf:bc:28:ba:39:4d:79:12:
be:cb:96:5d:9b:3d:6a:fd:31:73:3c:e7:9d:f2:f8:fe:b5:24:
23:25:ee:d4:e1:77:62:36:6e:50:cb:63:18:13:8b:5c:ef:ca:
b0:f2:5c:81:82:b8:fe:89:7c:02:8b:0a:9c:09:d4:0c:28:08:
98:35:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:53 2026 by rpki-client