Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: fyMI54uY85unDm0f0LAnOQwO3ahYWNcl9Fj5Aqndca4=
Subject key identifier: 2D:2A:D1:C6:65:E4:4C:35:37:15:40:C0:D7:02:0C:A0:C9:BB:96:79
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 019CAD22E8687DF025A74AC174CCA7D06F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:01:11 +0000
Manifest this update: Mon 02 Mar 2026 06:01:11 +0000
Manifest next update: Tue 03 Mar 2026 06:01:11 +0000
Files and hashes: 1: QOx2LcItYAde8Bu7yyYezAd_b5U.roa (hash: recLbl2iES5/0aXRvjtkzbHI5bXaE/LjpnXC8P4lC98=)
2: QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa (hash: q6REhdk2/z8f63MlyAEiLr/0oQ0zIK2tSS3WmI/QIxA=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: JTZRRRnrD+X+nYZBUWoPPQ219+AKdHu6l0vTfPkDeVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e8:68:7d:f0:25:a7:4a:c1:74:cc:a7:d0:6f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Mar 2 06:01:11 2026 GMT
Not After : Mar 3 06:01:11 2026 GMT
Subject: CN=2d2ad1c665e44c35371540c0d7020ca0c9bb9679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:c7:b9:b9:a3:08:cd:01:6a:54:31:69:52:
fa:47:ae:48:4e:f1:01:bb:44:fd:0c:10:af:8d:dc:
88:a2:3b:07:fc:61:ff:f5:6d:3b:c5:87:60:64:42:
c7:39:8e:50:7b:54:ef:cd:1f:3d:0b:41:f8:7b:4c:
35:9a:1a:c0:91:d1:69:21:55:90:4a:e0:c9:bf:43:
73:2d:7c:b2:68:a0:6c:aa:67:57:51:ca:06:bd:f3:
dd:b0:0a:c5:6a:84:47:6c:87:17:d8:76:48:c5:dd:
14:34:de:ab:05:45:07:17:2c:c9:a0:8c:43:9a:7e:
48:c4:2f:52:5a:40:fa:5e:55:c2:ad:33:02:84:b6:
bd:ba:28:a5:2f:93:54:d6:09:9b:5d:6a:ff:04:34:
3c:5e:ff:c2:45:42:9b:f7:84:34:37:ee:6b:1f:5a:
f9:de:75:d6:d7:39:9b:98:37:af:37:d8:61:db:d7:
a0:5e:b2:14:3d:5d:97:8e:fe:88:b7:9f:25:38:57:
c1:25:a5:0e:9d:86:01:fb:4c:ea:9a:a6:1f:06:d4:
ff:fd:27:ea:24:f4:e6:19:33:73:0c:bd:72:64:74:
d9:46:76:e4:7e:2e:d3:ad:79:02:54:3e:75:d0:48:
5d:3c:be:cd:be:9c:90:a4:96:c6:0a:c7:a1:37:07:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:D1:C6:65:E4:4C:35:37:15:40:C0:D7:02:0C:A0:C9:BB:96:79
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:0f:7b:a7:c1:53:cb:1a:6d:a8:8b:f0:d8:23:a0:e3:0f:
28:49:c2:b3:e6:b5:c8:83:03:f8:37:a3:3c:b8:2b:1b:71:eb:
72:c6:08:b2:63:6f:bd:f2:54:cd:2a:58:57:53:23:ae:c3:df:
e4:2d:68:7d:8e:09:c4:b5:88:8f:77:bf:f3:25:2f:90:6e:56:
b2:b3:a7:90:cb:99:8c:2c:2a:ac:36:47:3a:ea:f6:78:e2:c1:
85:9f:c9:33:73:84:58:6c:42:3e:d1:58:dd:57:98:00:0d:af:
0b:30:31:74:00:d0:fb:26:e0:db:b8:3d:7d:be:c1:ce:40:d7:
49:f9:46:98:ca:1b:f7:22:52:eb:ea:7b:9b:f1:d4:1a:55:cb:
09:6f:23:25:08:29:aa:d2:e0:1a:61:8a:34:55:f9:66:7e:30:
fa:c0:19:49:b7:2b:d5:ea:f2:74:bd:bf:31:6c:11:31:41:16:
f4:10:76:46:65:6c:2a:10:b8:4a:99:26:85:ec:bb:6e:a0:80:
4d:eb:62:7d:65:4c:2d:a2:77:8e:20:25:38:b2:33:5c:c7:0b:
79:b7:91:36:49:18:ff:7e:4d:fb:a1:d8:25:03:2b:6d:d7:59:
c5:f0:35:a6:03:bc:d5:9a:61:06:f7:d7:32:5e:5f:55:1a:6c:
a7:37:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:16:35 2026 by rpki-client