Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: HX97BplxMjDZgFGXFhghWk3+mdPSfvO4sonaV7qwlDQ=
Subject key identifier: 93:3C:03:DF:9C:B7:19:91:FE:B5:E8:3A:B0:74:D2:17:BD:12:B9:BF
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 019CAD223A7249F7B3CF3E2CD3458C705A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 18A8
Signing time: Mon 02 Mar 2026 06:00:27 +0000
Manifest this update: Mon 02 Mar 2026 06:00:27 +0000
Manifest next update: Tue 03 Mar 2026 06:00:27 +0000
Files and hashes: 1: 8TA7t7HrUBV_MAyX5n-91LJHqkY.roa (hash: /S+gSBwTzcXM3LZzCzX/nuyybzqrF+WlaDQm17WzHkw=)
2: QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa (hash: lNF+nwAKLXvKgpTrABWuuKjeHqZ2vPmIOlH0x80veow=)
3: qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa (hash: 32HDKvNSzbAK7fB6zWT8id6Yo7qRMY5K04pfmrZY4Ms=)
4: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: BXNBmBd3ppm7bSFe+ptxrUcarXwWO1v8WD1GfCpwQrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3a:72:49:f7:b3:cf:3e:2c:d3:45:8c:70:5a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Mar 2 06:00:27 2026 GMT
Not After : Mar 3 06:00:27 2026 GMT
Subject: CN=933c03df9cb71991feb5e83ab074d217bd12b9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:bb:b6:de:40:86:6f:47:b4:fb:9d:9f:bc:
49:97:eb:14:93:3a:a1:f0:32:77:16:c0:2d:3b:5a:
16:53:7f:b9:bd:15:78:6d:bd:d3:5c:fc:aa:ef:21:
65:61:16:50:7d:4a:1a:61:77:06:ec:e5:c7:71:d2:
9e:1c:4a:a8:db:4e:e2:37:44:12:f5:02:d2:1e:fb:
64:b6:bf:e2:7b:b3:86:1d:b0:24:c5:8b:34:56:11:
ee:04:50:a1:e8:c0:af:6e:19:82:fe:09:52:6e:4d:
74:6c:f5:73:38:e4:e6:97:f9:8a:e3:8c:a9:53:ce:
37:83:d1:f4:86:5b:1f:39:2a:9e:40:b8:47:31:43:
d2:d9:2b:be:d8:82:34:65:f0:a2:16:cd:ea:5c:df:
b7:2a:6e:1e:f7:37:13:eb:fd:cf:a8:9c:60:7a:a1:
b1:0f:3b:7d:0e:09:99:fa:1c:a2:8d:c6:41:c0:0d:
32:fd:ad:6f:c7:e8:6b:c1:69:52:e8:73:69:cf:96:
45:b6:fe:aa:b2:25:45:7d:d7:fc:68:84:6a:70:98:
a2:29:05:21:3b:a3:2c:0c:c0:e5:d4:27:e8:7e:3c:
b0:49:90:17:75:31:14:b2:b7:b4:b2:4e:28:f9:dd:
34:dc:6c:aa:1d:d3:a4:cf:50:6d:47:73:76:f2:40:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:03:DF:9C:B7:19:91:FE:B5:E8:3A:B0:74:D2:17:BD:12:B9:BF
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:20:f0:d0:a0:d1:5d:21:cd:70:0c:9f:7f:36:0d:33:b8:
b2:f0:0f:57:96:a8:74:64:6b:80:08:60:4b:e0:ab:a2:21:6b:
50:61:a6:af:96:a6:16:b5:13:d8:ab:7d:ee:83:16:c5:c8:1f:
d1:09:30:92:b9:70:00:f6:af:f0:f8:f5:7b:20:71:71:e2:4c:
33:de:38:67:a7:0d:5d:31:c2:c7:4b:12:02:4f:35:fe:a6:27:
5b:f4:6e:fe:2f:dd:e3:42:d7:12:c4:14:80:b9:46:a8:31:0e:
ca:02:4c:46:0c:05:b1:13:85:0f:32:93:59:b1:f4:6c:19:8a:
88:ab:fa:39:1e:fd:2a:21:7d:85:53:d7:5d:05:f2:dd:26:fc:
e0:9b:a8:21:78:14:de:6f:30:70:60:9a:e0:6b:06:49:c1:c7:
84:c0:2f:9f:4d:b7:8d:f2:16:5c:02:7a:a5:13:88:50:3d:2a:
12:b8:2c:40:73:5d:6a:fc:0e:c8:0f:54:0a:8a:9f:90:b0:07:
a9:23:9d:b0:3d:32:1a:93:26:bd:69:29:67:6c:19:ef:6c:ef:
ce:80:05:dd:82:f0:1e:92:15:fb:c0:9b:88:19:c8:db:05:8c:
5f:42:2c:62:16:f9:1b:e5:fd:52:9f:dd:96:d4:d7:40:c4:d3:
be:dc:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:57 2026 by rpki-client