Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: uER4ocCbgjeEHlHsrzLb6mB0EzVTCBGpQmwsz2exLCQ=
Subject key identifier: 43:D2:1A:FB:45:66:99:F7:0C:CB:D6:CE:5F:A2:BD:6F:1A:E5:FA:76
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019CAD2304E07767189175986EC50B29F816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: lYGezoTiS4XlnUnLGS628MtG4WmkGnFo2AhJrRCMHx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:04:e0:77:67:18:91:75:98:6e:c5:0b:29:f8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=43d21afb456699f70ccbd6ce5fa2bd6f1ae5fa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:20:7f:c5:66:b6:17:6c:df:9d:63:f1:e0:
a6:2d:03:ee:d7:f6:4b:b0:b7:a0:06:c0:9a:69:83:
45:87:69:ef:bd:42:5b:d8:40:a0:6b:16:0e:24:a3:
bc:29:10:a5:c3:a9:2f:2c:0a:3d:65:01:fb:66:4d:
2d:56:2c:94:3e:9b:a8:d0:80:62:c2:9c:37:d0:77:
38:09:6a:55:ef:6a:90:77:ba:6e:31:33:b6:d8:4c:
bc:83:c2:88:09:24:3d:97:64:fc:76:d0:ab:4c:19:
b3:5e:39:c5:a7:a5:fe:8a:99:4d:c0:fc:1e:a6:28:
37:b2:3a:70:4b:0f:72:3b:3e:60:06:25:1c:bb:20:
da:1f:3a:fa:f0:c8:a2:f5:eb:29:c2:62:0b:5e:ac:
65:d5:6b:e8:03:87:6d:80:05:51:d7:5f:27:5c:91:
1a:b7:ac:1b:29:5a:31:96:a5:40:c3:06:0b:4e:83:
3f:50:f1:a2:98:3b:fd:1c:a9:e9:1f:26:1d:b5:ea:
c9:21:56:04:f6:93:2b:8c:6f:de:8e:e6:5a:27:57:
6a:a2:2e:1a:a0:e5:b8:49:82:12:b4:17:15:da:71:
ae:a6:dc:e2:cf:4d:da:2d:8a:42:9e:45:17:1e:5d:
54:98:3e:0b:cd:29:66:9b:4d:9b:c3:98:e2:6c:ea:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:1A:FB:45:66:99:F7:0C:CB:D6:CE:5F:A2:BD:6F:1A:E5:FA:76
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:52:3e:af:af:59:96:92:8f:f1:d2:44:bc:70:82:01:d6:
e5:12:9d:f3:40:5a:81:a7:c8:52:61:9a:59:73:e3:41:87:fb:
ee:e2:b8:ad:2f:8f:59:c9:d3:70:eb:dc:4e:7d:b5:ea:a0:40:
81:db:b9:6f:de:65:1b:10:a0:3f:91:75:fe:02:5c:56:6a:8b:
b3:bd:23:94:24:d3:df:5d:06:b3:20:d9:07:c4:41:e5:77:3b:
51:ad:05:dc:ca:ea:44:eb:3e:67:16:8c:c2:07:f4:ee:df:de:
1c:96:39:82:4f:4e:ab:c2:aa:5e:21:08:0e:71:7a:86:1f:2c:
95:54:6c:90:8e:77:15:46:af:f9:8f:95:31:1f:33:c8:cc:dc:
cb:8e:1b:5d:f8:91:84:49:1d:6b:61:88:aa:5a:09:9a:c4:dd:
e1:82:6f:0b:09:ff:ce:e6:83:cc:81:b1:fc:b2:e9:c2:a8:54:
fd:20:9d:e8:38:89:35:11:02:43:93:7a:0d:d7:d8:8e:66:19:
fa:28:35:ca:14:30:89:4e:b6:63:b0:45:78:13:15:42:36:c5:
2f:68:95:15:b7:3d:cc:9a:78:18:26:77:50:74:42:0c:03:dd:
38:a6:dc:40:56:d9:27:86:af:7c:ea:8c:1d:b6:86:3f:fa:63:
6e:56:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:53 2026 by rpki-client