Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: lP0ua1V6wO6BDUF4CwSyPxpy53eU+TKHOmBQ/K5Z33A=
Subject key identifier: B3:98:FA:1B:DB:E3:27:55:F7:F9:82:A0:DC:82:8E:80:E3:54:37:2E
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 019CACB530A84836A7388314991AA7045AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:01:21 +0000
Manifest this update: Mon 02 Mar 2026 04:01:21 +0000
Manifest next update: Tue 03 Mar 2026 04:01:21 +0000
Files and hashes: 1: t38nL5oN5Hl7YW2Um4h4b4mkFQY.roa (hash: yo6pqMRWLvkyp3h1nhu6jmRo6lvB15VlScam6f7A8qw=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: F/RztONol19s6oJJpkr/auV1g64z6VDb2MIZEEP44xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:30:a8:48:36:a7:38:83:14:99:1a:a7:04:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Mar 2 04:01:21 2026 GMT
Not After : Mar 3 04:01:21 2026 GMT
Subject: CN=b398fa1bdbe32755f7f982a0dc828e80e354372e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:ea:52:42:24:01:ac:c1:a7:2c:71:db:9a:
bf:51:2b:18:ad:d4:24:3c:6e:a5:f0:30:92:0e:47:
72:c3:13:30:29:56:0e:b6:b7:0e:e5:f1:3f:1c:6f:
d0:6f:14:9e:5d:a6:4c:bc:30:7a:d4:5c:8b:fa:0c:
5a:75:60:28:36:c0:94:6f:54:2e:2b:c6:bd:21:ef:
db:c9:63:6f:a4:63:3f:16:e3:12:2c:46:79:e1:4f:
8f:54:20:4a:03:91:79:bc:53:6c:b5:4e:a5:b4:0c:
cd:0c:31:e9:52:89:11:28:44:08:80:d0:e7:00:f8:
73:64:10:9b:86:9d:80:31:6b:af:fd:41:29:55:8f:
cc:44:a5:90:c7:a1:5a:be:a6:74:5b:ef:ab:7b:db:
94:67:e9:e9:16:d1:a9:88:50:20:2b:3e:87:51:f2:
08:9d:c8:c9:e7:05:f5:b0:cf:09:47:f4:a1:07:63:
30:89:44:83:18:b6:28:27:54:78:9d:5f:f6:d9:d8:
7b:3f:d8:2e:8d:78:84:50:7c:b1:c3:94:f6:d5:20:
0a:17:f4:fa:5f:d0:e7:fc:09:1a:df:18:d2:87:17:
c6:ce:7c:f4:a0:1a:8c:8f:59:fc:47:b8:51:78:62:
17:b3:c8:4b:a6:c5:3c:f0:e3:e7:56:44:03:88:ed:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:FA:1B:DB:E3:27:55:F7:F9:82:A0:DC:82:8E:80:E3:54:37:2E
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:fd:b4:40:b3:32:30:30:ba:ac:d0:8a:12:6e:8d:e1:54:
07:1c:8a:53:1c:10:f3:d6:3b:55:d8:d2:9a:ca:18:ff:ec:8b:
5d:dd:5b:ee:25:3e:fe:cf:7d:31:b9:c5:1a:aa:d5:20:11:e4:
b2:7b:8a:28:af:1b:27:1d:1b:63:ff:55:c8:de:12:25:e8:39:
58:62:07:2f:fd:c9:ee:28:da:07:2b:1c:58:22:87:f4:4a:65:
65:2c:b2:ec:d1:46:4f:92:3b:9f:7f:36:e4:8b:57:b7:fd:e3:
73:df:55:71:64:52:48:d3:ea:bf:fd:02:eb:e8:02:8e:f4:e8:
64:4b:9b:6f:5d:e1:5e:14:b7:4e:c6:7d:9f:26:98:cd:94:37:
bb:ce:85:1c:c5:45:ae:7f:91:0a:df:ae:82:a8:11:df:76:0a:
06:e7:2b:28:db:aa:37:6a:85:bd:a3:29:27:b0:a7:81:9f:e2:
0b:13:45:b5:8e:aa:d2:3a:09:dc:8b:6c:31:4b:bc:e6:cd:6c:
5b:29:0c:cf:a5:d6:d8:36:0a:fa:cd:a2:94:3d:f4:c7:fe:d9:
8a:91:9b:11:c0:38:f7:93:35:3d:9c:5b:dc:ea:ef:0d:88:d7:
6f:33:49:a2:aa:f0:b7:f0:55:9d:6d:9d:e9:3e:ab:d2:89:d0:
18:a9:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:54 2026 by rpki-client