Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: u9eDN3lJ1fBY7NSvG7aj3Wf9Eku+eKs61zcCcWbKPQ0=
Subject key identifier: 7B:0D:E4:63:47:83:29:87:6B:CB:7B:F4:3F:86:05:68:C5:FE:C1:AA
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019CACEBB1E667DE71AB4E8EBCF05C1709D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 09DE
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: b3FE//RxLL7uvThOPpiUFkFJYZKCTPBLDn/gNCpU2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b1:e6:67:de:71:ab:4e:8e:bc:f0:5c:17:09:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=7b0de463478329876bcb7bf43f860568c5fec1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:7f:66:10:37:af:6d:d4:a4:dd:09:8b:33:
78:a0:c0:df:2a:ef:32:a5:34:89:9d:51:18:32:71:
92:3a:91:9e:e4:a0:6b:cc:fc:b5:e8:a9:96:51:fe:
4c:1c:4c:e7:b3:14:99:f0:07:2c:e5:36:61:fe:6d:
95:51:56:3d:9a:14:dc:14:9f:ad:8b:a7:7b:6d:51:
8b:3e:ee:29:82:2e:9b:07:df:f5:ba:7f:29:c8:0f:
48:46:b9:bb:6d:9f:cd:6d:db:e5:b8:6c:ba:f3:57:
ac:6a:fc:fb:a6:84:c0:f3:02:aa:26:4d:78:b2:39:
a9:ab:2a:f8:38:a3:bf:a0:b6:d4:d9:01:54:bf:29:
0c:8d:4b:be:2f:e0:7f:0b:45:04:6e:6e:1a:d6:cc:
bc:cf:aa:99:d6:5e:df:49:72:18:4a:49:7c:e9:10:
79:96:82:49:be:d8:90:4a:3c:24:ab:6f:a3:5e:87:
9d:94:2b:01:2a:48:ad:c4:1e:ec:6b:f0:e4:6d:3e:
4f:e7:cc:d4:4d:62:9b:97:ab:99:39:72:ed:0f:88:
bd:5c:07:ec:e6:5a:8f:51:4d:8a:60:2e:81:0f:1d:
4a:46:6f:ee:89:af:96:5e:ae:23:2a:97:a4:78:5b:
85:a2:4b:a3:c7:91:89:d1:29:bc:3c:09:45:89:15:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:E4:63:47:83:29:87:6B:CB:7B:F4:3F:86:05:68:C5:FE:C1:AA
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bd:39:ea:17:4b:6e:ce:87:95:fc:77:68:5c:fd:66:03:7b:
17:64:b0:40:91:57:a3:22:94:17:2b:e9:19:6d:7f:47:80:28:
6a:47:0c:9e:9a:de:e3:5e:d1:29:80:bd:4b:70:52:a9:5f:5c:
ac:49:96:d6:24:6d:26:04:b3:5b:42:76:6c:a1:e1:37:f2:55:
c2:f7:2b:a7:c6:e5:e1:19:73:83:86:66:1f:43:69:94:4f:75:
d7:a2:0d:ad:e1:9e:9a:b0:da:0a:18:fd:5d:80:d2:d3:3e:99:
c5:92:55:be:a4:2e:6e:37:6b:72:76:c2:0f:9b:a5:17:3f:1b:
53:58:10:86:24:8f:6b:73:3b:09:e9:1b:0e:fd:21:05:bb:29:
5f:d0:03:28:35:34:ce:79:f6:31:63:e7:c0:a6:0c:54:6e:58:
a2:c8:0e:7c:ec:d4:2d:c8:ce:39:76:eb:af:99:fa:08:79:f1:
24:68:de:1b:1f:77:f2:e8:0e:fb:4b:e2:b4:ea:1f:d0:4e:e9:
fe:f5:68:c8:ec:cc:21:54:eb:65:a3:ae:61:02:06:2e:2c:02:
12:b3:3d:b8:43:dc:e4:fa:d3:b3:81:e1:33:5e:b1:c4:8f:72:
a0:1c:77:4a:bb:b5:07:f2:5b:59:8c:f6:42:b2:73:96:09:72:
5d:78:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:08 2026 by rpki-client