Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: wTyWCQz6W7ZbEvS3L3HkV3Iu+ckLWtWKNuNaKHoct98=
Subject key identifier: 74:17:27:87:62:EC:22:6E:74:B5:EC:6B:B8:81:65:A5:39:C7:A5:DA
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019CAAC60A24ACE5CFF134229CEF52A18225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0E9A
Signing time: Sun 01 Mar 2026 19:00:31 +0000
Manifest this update: Sun 01 Mar 2026 19:00:31 +0000
Manifest next update: Mon 02 Mar 2026 19:00:31 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: D4/BM8cHMlbYVa2ou9G3aySnBLC69DUqqEnInn8ENT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0a:24:ac:e5:cf:f1:34:22:9c:ef:52:a1:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Mar 1 19:00:31 2026 GMT
Not After : Mar 2 19:00:31 2026 GMT
Subject: CN=7417278762ec226e74b5ec6bb88165a539c7a5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:4e:2c:41:2c:bf:62:b7:4e:d2:27:99:f9:
f6:35:2b:86:af:fc:4a:b5:a7:80:31:3e:89:d8:29:
6a:85:17:9e:87:f4:30:77:94:a4:46:e8:9a:d2:39:
3a:5d:23:52:fb:79:80:b1:6b:ba:45:fb:ca:c9:cc:
12:9c:a6:33:27:d9:bd:93:4f:d5:b6:22:03:72:bd:
e0:d7:75:70:2f:6d:0c:72:c0:d2:53:dc:d6:69:62:
54:e5:30:b1:eb:bf:43:e1:4f:33:55:7b:ad:c3:7d:
81:96:72:c3:53:64:18:d4:e7:fc:99:78:51:3e:70:
fe:7f:ea:9c:ac:fb:f3:a2:fb:bb:2f:41:53:72:7b:
f3:5f:94:22:89:06:46:ef:ab:a2:55:9d:13:8b:fa:
f8:68:95:c2:87:1a:ec:b8:7f:b9:96:5e:a2:02:51:
20:27:0c:66:df:44:63:c5:b0:9a:bb:c5:36:36:06:
68:ae:66:3d:a6:a9:f4:44:e1:be:66:d1:00:fd:ff:
d0:06:94:31:49:38:58:a0:39:2e:0a:ee:7a:cd:06:
55:45:d0:a2:06:56:c7:1b:ff:1d:a7:40:c4:fa:55:
0b:86:0d:d8:a1:a6:e9:fc:c4:e8:6d:42:90:f7:69:
6a:8b:6b:0a:3a:2c:12:bc:90:fd:c2:18:ed:7a:cc:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:27:87:62:EC:22:6E:74:B5:EC:6B:B8:81:65:A5:39:C7:A5:DA
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:78:9a:3a:2a:5d:48:81:27:8e:99:37:2f:a0:78:ed:5e:a6:
a6:26:ec:38:69:8a:28:85:34:63:79:84:ba:8f:d6:47:cf:bc:
e1:bd:b0:40:26:cb:43:88:a0:fa:da:7e:0b:8b:37:9d:2a:c6:
6e:3c:1b:c4:06:96:fb:6f:7a:0d:89:04:fa:70:cb:c0:be:7d:
17:83:1f:ea:22:ba:cf:89:50:89:5a:49:b8:f9:c8:4e:a3:3e:
75:43:d6:2f:f1:2c:f7:a2:10:71:82:4a:34:3c:08:3c:4e:19:
9c:31:0b:00:ab:b6:a8:25:f5:89:f3:98:b7:c6:c4:28:3c:54:
22:6d:b8:ab:aa:e7:86:d1:08:23:2a:39:4b:01:9a:09:99:23:
d3:2c:43:7c:1d:f7:d1:81:e4:a9:5a:8c:40:5b:0f:82:41:4b:
7f:48:3d:23:05:b1:a0:93:10:f3:6d:b8:2b:fa:43:95:9f:fe:
87:1d:d8:69:b1:8a:58:2c:fe:ee:d9:f3:24:d2:ab:5e:1b:25:
cd:3d:7d:f0:18:5b:0a:7f:5a:fc:fd:6d:b7:0e:8f:fe:7e:b8:
38:51:8c:19:f3:ff:45:57:ce:ab:6e:94:d8:5b:07:18:79:fd:
f9:0a:89:f1:fe:15:a9:68:a3:b5:d3:20:77:46:75:40:a2:33:
7a:3d:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:31 2026 by rpki-client