Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: GVHk7TmowykATLP/8wNynlt6gECpo29PcIRWuzWvsyE=
Subject key identifier: 97:BD:28:B8:EB:ED:52:7E:86:A2:FD:52:63:A1:38:AD:B4:7C:15:AB
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 019CAD2297583930CF7675A99480D698AF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:51 +0000
Manifest this update: Mon 02 Mar 2026 06:00:51 +0000
Manifest next update: Tue 03 Mar 2026 06:00:51 +0000
Files and hashes: 1: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (hash: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: Wjg7bNGwovt8Xi5M+Mpv+b8sXEiJnOnfWL14UpUvdMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:97:58:39:30:cf:76:75:a9:94:80:d6:98:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Mar 2 06:00:51 2026 GMT
Not After : Mar 3 06:00:51 2026 GMT
Subject: CN=97bd28b8ebed527e86a2fd5263a138adb47c15ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:18:a9:42:9a:25:11:fd:45:b1:98:84:4a:
8c:81:42:03:57:3c:e0:36:8b:6c:f7:d5:4e:fd:60:
3e:87:60:90:f6:59:88:20:9f:1d:e0:d0:cc:fd:27:
67:59:6f:7e:6b:ee:04:60:2e:e1:c6:59:d3:e3:f6:
f3:25:de:38:42:1c:33:81:74:e6:b5:82:65:ee:a6:
16:cb:17:4f:d5:4e:61:5e:ab:77:51:12:d8:7e:ed:
e1:37:73:60:f2:1e:ea:e5:d0:7a:90:bc:0e:0a:68:
5e:1e:ab:7b:ae:b0:14:82:5f:1a:09:ec:b5:4f:af:
39:80:08:46:e2:58:1d:cb:bd:00:88:77:f0:54:ef:
bc:3b:7a:be:5f:57:c0:cd:53:9b:15:5e:5f:e1:ee:
de:e9:55:c4:4f:f3:3e:79:a0:cc:9a:9b:ad:8e:41:
22:1a:ba:e6:11:f7:0e:02:0c:90:c6:25:18:e7:0e:
b5:65:f6:15:ab:85:e5:1a:d0:d9:c9:4d:2a:69:34:
7e:3c:8b:40:71:df:12:94:8c:3f:c4:a0:89:58:29:
87:40:59:62:b3:42:3c:a6:c1:24:97:30:eb:f1:17:
1d:32:0f:bd:a6:7d:52:19:98:e5:10:4b:91:f2:db:
9b:fe:a8:25:8b:70:6d:a4:ed:e2:e7:60:56:c6:55:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BD:28:B8:EB:ED:52:7E:86:A2:FD:52:63:A1:38:AD:B4:7C:15:AB
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:f3:b4:75:a7:c2:56:49:20:14:a7:b8:d6:ad:6d:91:d9:
fd:d5:40:36:7c:e2:3a:1b:da:4e:b4:a1:35:2e:da:66:7d:9b:
a9:71:f5:29:af:4c:2e:38:68:7d:90:1e:26:3f:d2:e4:57:2b:
1e:87:a5:74:a9:7d:25:fb:94:ef:dd:42:aa:72:46:af:d8:00:
e0:3b:c9:1e:39:1f:cf:94:66:c3:e0:a3:1f:bf:d6:7c:7b:c7:
11:00:06:95:83:86:8d:90:9a:14:cd:31:70:f0:95:6b:84:e3:
6b:14:e6:60:17:a3:7b:1c:1a:c4:41:a6:52:3e:dc:d0:06:78:
60:77:25:ea:18:a7:88:f6:fb:cd:1e:3b:30:97:c1:d9:dd:ac:
80:26:40:ba:44:42:51:12:1e:37:10:2d:ce:a2:94:b1:b1:7d:
97:38:d2:1c:bc:77:c9:13:2d:8c:18:01:c3:3f:c7:d2:51:34:
d9:f3:0b:93:66:d6:1e:d8:54:29:9c:02:9c:04:8e:85:23:c4:
8e:44:b9:db:a8:79:59:da:68:9d:b3:b2:ef:7b:ae:7d:d8:9e:
9a:9d:ee:a3:6c:e5:d8:a7:5a:77:21:89:96:e3:3f:28:57:6b:
25:1a:b7:6b:7c:60:29:ec:d9:25:e5:3d:a1:46:8b:a1:ae:7c:
99:ae:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:17 2026 by rpki-client