Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: lqtf7VNthfvTZRGZv2jBV3SYawsICfrLll1lr2/BtcA=
Subject key identifier: CF:BD:07:0E:5A:C4:0D:2A:AF:19:71:05:55:96:3B:0F:F0:E6:55:DB
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019CAB33D729E602A5B1EC0C789979772C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: fp1h2kqp4gzV8cIS/829VnQ4vdc9/V9Rtrskyg8HaDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d7:29:e6:02:a5:b1:ec:0c:78:99:79:77:2c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=cfbd070e5ac40d2aaf19710555963b0ff0e655db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:c1:a4:a3:32:6f:57:ce:44:33:0c:56:90:
d0:70:5b:17:93:85:e6:f5:84:89:33:82:28:31:7c:
e3:19:0e:6f:2a:ca:7f:01:e5:73:b1:78:1e:5d:64:
5f:f6:0f:4b:69:8b:5f:25:df:9f:58:f2:e3:1e:ff:
8b:8c:42:32:9b:67:7a:14:20:62:0d:ea:76:b2:de:
dd:55:cb:b6:d5:6f:f8:cc:ca:8c:18:0f:62:01:47:
b8:7d:de:a0:97:a3:bc:76:ca:59:81:83:65:3d:7d:
a9:c2:03:3d:01:f6:06:5f:83:c2:ff:a7:6f:af:60:
d2:94:ad:08:07:5c:f4:88:04:6e:c1:25:f5:be:1a:
97:52:a2:71:d9:d5:69:77:22:4d:9d:fc:53:00:a1:
d5:32:55:c4:b5:2e:06:c6:cb:1a:13:be:70:98:74:
0f:e1:65:b3:c6:a1:70:ae:de:c0:88:76:c0:b4:48:
13:d0:bf:9f:33:2d:ab:a9:08:63:98:0c:be:6a:23:
e4:77:40:62:10:57:cb:1a:b7:54:27:39:40:39:7f:
b0:3c:a1:72:0f:bb:57:53:9a:a6:e2:fd:60:de:5b:
de:54:f9:50:38:98:e6:99:14:36:60:21:99:9d:60:
bd:bd:b0:35:78:ec:da:72:3f:41:25:62:fb:74:aa:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:07:0E:5A:C4:0D:2A:AF:19:71:05:55:96:3B:0F:F0:E6:55:DB
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:35:41:78:1d:c1:b9:3b:a2:43:ec:69:cc:82:23:32:ff:
e2:65:38:e6:f2:e7:e4:8c:4c:d7:82:38:c6:bf:29:84:fb:6e:
12:e4:6f:8a:c9:5c:2d:78:6d:60:4e:85:1f:84:0b:ca:c8:49:
94:ca:91:85:58:28:dd:d7:f7:7e:ac:72:ff:60:cf:97:a1:eb:
1f:a4:79:98:a8:1f:af:0e:a3:77:83:50:1e:fb:28:6f:d6:62:
c0:66:3f:fd:da:46:b7:ad:c8:a4:93:93:46:28:52:8b:62:a3:
b8:01:31:fc:3d:42:a5:4d:ae:e1:e3:bd:6f:97:f9:af:0f:ba:
4c:c0:3c:41:18:d3:cd:33:24:75:90:aa:8b:72:c1:d4:0d:f5:
39:c6:b4:ce:8c:cc:13:ce:50:bb:88:2b:2d:93:7b:a2:95:3e:
e1:46:e9:8b:28:8c:68:ba:b9:80:77:dd:e8:70:76:f2:7c:d7:
45:c6:04:68:66:98:d8:89:2e:bb:ea:9e:ae:bd:f8:6e:6c:61:
ee:8f:1e:5c:8c:89:90:e6:d6:66:de:62:6e:35:6c:c7:c3:46:
69:2f:be:7b:07:e7:56:26:d2:8a:44:f7:1e:2d:45:ac:3f:c9:
cb:92:d5:83:c5:b2:04:3f:36:27:2c:de:8c:ac:55:b6:72:28:
1c:08:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:19 2026 by rpki-client