Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: IHPjd1QZiUB0+JRjus4Q2/pcdB3bpHS4dImpqdT5LTc=
Subject key identifier: EC:F7:A2:14:8A:FE:03:FA:ED:72:33:6F:78:4D:33:73:3C:30:86:29
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019CA97CEFF308361DB56010E6169DA45E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 032F
Signing time: Sun 01 Mar 2026 13:01:03 +0000
Manifest this update: Sun 01 Mar 2026 13:01:03 +0000
Manifest next update: Mon 02 Mar 2026 13:01:03 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: n7mbbUREafG6eAXZSZWhQ8r4Lqq1cEtUYn66KDKHdgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ef:f3:08:36:1d:b5:60:10:e6:16:9d:a4:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Mar 1 13:01:03 2026 GMT
Not After : Mar 2 13:01:03 2026 GMT
Subject: CN=ecf7a2148afe03faed72336f784d33733c308629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:a6:62:bf:89:41:83:71:da:eb:5f:a1:0f:
18:59:67:c8:ae:93:39:1a:28:7c:3d:41:21:88:55:
c9:84:73:40:fb:e4:3c:2a:95:e3:91:54:4d:5f:57:
43:f4:1d:7a:f0:9b:4e:52:68:13:5d:ec:9b:a5:81:
b7:5d:9a:73:e4:25:fc:0c:a9:82:f0:90:20:fb:02:
b9:d5:6f:a9:a9:f4:10:d0:b3:09:3a:d8:d0:05:3a:
48:a7:8e:9e:48:cf:13:c7:1e:1e:95:98:b4:ad:58:
03:46:a5:57:ea:c5:9e:88:50:d8:64:50:b6:e2:33:
76:60:6e:6c:9a:51:26:f9:d1:94:6c:b8:78:ad:7c:
e7:6b:79:8f:03:6b:ba:ea:d5:24:88:c4:8f:cf:aa:
07:3a:43:83:44:4a:57:85:36:ec:53:ba:77:39:de:
50:70:fe:be:65:84:cb:1b:fa:58:f6:77:ee:fd:af:
29:55:9f:ab:3a:8f:77:2e:9f:4e:8b:44:bb:83:a1:
29:c2:29:18:52:40:41:ff:df:7e:d5:ff:37:2f:d8:
e2:32:93:9d:cf:6e:b0:20:af:6e:26:db:52:12:9d:
b6:99:d4:ac:ac:d4:e6:6f:22:93:4e:80:9e:4a:95:
2e:57:e3:93:88:b4:c1:4c:bf:df:92:6d:ae:61:b3:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:A2:14:8A:FE:03:FA:ED:72:33:6F:78:4D:33:73:3C:30:86:29
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2e:ed:0c:4a:b9:8e:5f:6b:25:28:db:68:23:c6:f4:bf:e1:
46:b8:50:f3:23:d0:62:fa:7e:2a:d1:44:7e:3c:4b:0c:01:57:
f2:01:69:19:76:b1:ea:75:58:2d:02:1c:de:8b:17:90:c1:ab:
98:db:58:8a:57:69:dd:d7:4a:c9:b3:0b:4b:a0:4f:64:6d:21:
65:c0:dd:9b:35:fa:c4:7a:f8:3c:89:4f:27:f2:c5:80:f3:d5:
07:c6:9c:46:54:56:06:e7:bc:b8:3c:c1:dd:b6:22:c3:87:cb:
29:3b:22:94:7a:ba:88:39:0f:e8:2f:f8:7f:a2:0c:29:e1:e1:
b4:da:e7:92:49:5c:9f:54:43:fa:3b:0e:56:cc:39:29:20:ea:
c3:78:a2:d6:a3:96:39:43:6b:57:aa:25:f8:8a:a7:b5:4a:75:
ea:2b:97:bf:85:72:47:7d:05:51:68:28:c9:46:d8:47:c3:21:
e6:57:1e:a3:c5:ec:0d:6f:41:bb:a5:e2:d9:05:5a:5e:c2:3f:
5d:f2:e5:d3:c8:23:a8:52:8f:8b:01:ad:42:02:fa:57:87:85:
cc:ca:37:79:22:1b:ec:f9:b4:9a:ae:8f:d3:b4:b4:4f:76:6d:
79:16:13:50:fb:02:35:3f:64:8d:ae:76:02:db:d2:cf:96:e7:
1f:f9:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:39 2026 by rpki-client