Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: YtecVB+LF/m1Y1lhtGf7nuYbil8/VliCPd0XWKAis4c=
Subject key identifier: 01:45:29:BB:C3:3A:A0:2A:CB:4D:FA:46:26:DE:B1:63:F0:32:7F:F9
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 019CAA5896B7CC07CE915F2A1BFA11BCE008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: bbUvQcBL8PFNw2iTLVczp7F8xLg.roa (hash: roBeIpW3t+PPAB0V8G5Pbdujfwh3PQz2ybcfRM5Trps=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: pfuQou18FZFNGzYOxgpxLq0c2qbYMa4DuPFDIhNB750=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:96:b7:cc:07:ce:91:5f:2a:1b:fa:11:bc:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=014529bbc33aa02acb4dfa4626deb163f0327ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:7a:25:7e:8e:3f:ec:55:42:d9:c5:7f:47:
99:91:17:b5:d3:29:9b:8a:d4:a7:99:70:27:a4:46:
29:52:bb:8e:a7:bb:63:88:38:55:9e:a3:b5:26:6d:
2b:7d:1f:69:c7:6e:75:da:fc:a8:fe:fc:e6:fa:15:
8a:c1:fa:6e:43:fc:11:72:2c:0a:5c:0d:39:66:45:
64:98:a7:fb:d4:ff:4d:d6:b8:c6:fc:7e:8f:71:91:
fc:0c:eb:5a:13:d9:0a:d7:c1:d7:86:e2:04:73:52:
9d:4e:f3:ad:3b:0e:62:eb:a7:32:a9:6c:c1:d8:1c:
a2:3d:54:b3:5c:3d:70:d6:5e:3f:d8:79:9e:86:03:
30:b6:4a:97:53:a0:b3:d7:c2:fc:30:48:6d:20:3a:
56:4a:c2:3c:7a:37:46:99:85:e1:9e:43:98:d1:2f:
c6:92:45:01:79:01:3f:e8:ce:95:70:bc:29:51:8d:
f0:be:45:0a:bb:f4:24:cf:a5:c3:ae:4b:2c:ec:29:
0c:e8:f5:5d:bf:ca:7c:6c:d3:ef:41:1f:10:a0:17:
c1:72:71:7e:ce:b4:9b:27:72:58:7d:8f:3e:ad:17:
ae:85:94:0d:bd:25:af:32:57:be:de:a3:23:2b:a3:
67:b6:e7:12:f7:7c:02:d0:46:03:45:bc:36:25:48:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:29:BB:C3:3A:A0:2A:CB:4D:FA:46:26:DE:B1:63:F0:32:7F:F9
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a7:40:a4:a9:4f:54:2d:cc:f4:a4:38:68:1b:e8:b3:c3:32:
e8:e9:81:d0:77:ea:71:fb:fa:9b:3c:63:e5:7e:94:3e:1a:09:
08:4b:61:d7:cf:5c:0f:ed:8b:d6:1d:ad:04:e9:44:9d:af:7c:
14:58:82:ab:e0:e7:7d:6a:0c:a6:c3:31:1e:5c:e9:c1:68:7b:
34:99:55:50:97:b2:37:dc:fb:b4:ff:25:cb:c1:2c:44:b2:36:
eb:db:28:8e:89:bd:2c:da:b4:66:59:0a:f8:34:0f:15:7b:6f:
ac:5f:fa:79:c1:3a:0d:d0:e7:b3:2e:16:0f:97:41:d6:8e:9c:
0d:35:fe:1a:96:49:32:e2:f9:36:0e:ac:ed:1a:d0:12:d2:1c:
75:35:71:e2:69:94:9a:12:69:b7:41:0f:61:f1:f1:29:7a:4d:
a9:72:09:23:8e:f3:fa:4b:86:f9:15:37:9a:2c:31:05:18:6f:
15:a8:0b:35:60:60:9c:74:90:a5:6f:07:86:06:77:16:09:4f:
d7:e2:a2:76:dd:6f:d2:bd:4d:88:0f:df:72:11:3f:8e:f6:12:
c7:27:a8:8e:c8:f9:42:dc:7c:73:26:f0:b2:5e:4b:70:98:31:
f3:4d:ca:03:76:0c:3e:d0:17:d9:85:e6:1e:d4:6b:6e:6e:83:
aa:aa:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:46 2026 by rpki-client